Privacy Policy

Last updated: Tuesday, Oct 13 2026

This policy explains what information Sugar Shark collects, how we use it, and the choices you have. Sugar Shark is operated by Sugar Shark ("we", "us"). Contact: support@sugarshark.org.

What we collect

  • Account information. When you sign in with Apple or Google, we receive your name (if you share it), your email address (or an Apple private relay address), and an account ID.
  • Label photos and scan results. When you scan a product, we process the photo of its ingredient list to read the text. The photo is handled in memory and never stored. We save the ingredients we find, the verdict, and the date to your scan history.
  • Purchase information. If you subscribe to Sugar Shark Pro, Apple or Google handles the payment. Through our subscription provider, RevenueCat, we receive your subscription status and purchase events, such as the product, price, store, and cancellation reason if you give one. We never see your card details.
  • Device and connection information. When you sign in, we record your IP address and basic device information with your session. We also use IP addresses to limit abuse of the service.
  • Push token. If you turn on notifications, we store a push notification token for your device.

We do not collect your location or contacts, and we do not access Apple Health or Google Fit.

How we use it

  • To run the app: sign you in, read labels, show verdicts, and keep your scan history.
  • To provide and restore your Sugar Shark Pro subscription.
  • To keep the service secure, prevent abuse, and improve accuracy using anonymous scan statistics.
  • To send notifications you've turned on.
  • To answer you when you contact support.

We do not sell your personal information, we do not use it for targeted advertising, and we do not track you across other companies' apps or websites.

AI and other service providers

Sugar Shark uses trusted providers to run the service. They may process your information only on our behalf:

  • OpenAI and Google Cloud Vision read the text in your label photos, and OpenAI also analyzes the ingredient text. We ask for your permission in the app before your first scan is sent. OpenAI does not use our data to train its models and keeps it for up to 30 days for abuse monitoring.
  • RevenueCat manages subscriptions.
  • Apple and Google handle sign-in and payments.
  • Fly.io hosts our servers and Neon stores account and scan data, both in the United States (Virginia).
  • Expo delivers push notifications if you turn them on.

We may also share information if the law requires it, to protect our users' or our rights and safety, or as part of a sale or merger of the business, in which case this policy would still apply.

How long we keep it

We keep your account and scan history until you delete your account. Label photos are never stored. Anonymous scan statistics that can't identify you may be kept after your account is deleted. We keep some purchase records longer where the law requires it.

Your choices and rights

  • Delete your account at any time in the app, under Profile. This deletes your account and your personal scan history from our servers. Anonymous scan statistics that can't identify you may remain.
  • Get a copy of your data, or ask us to correct it, by emailing support@sugarshark.org.
  • Manage or cancel your subscription in your Apple or Google account settings. Deleting the app doesn't cancel it.
  • Camera access can be turned off in your device settings at any time. Scanning won't work without it.

Depending on where you live (for example California, the EU or the UK), you may have extra rights, such as the right to object or to complain to a data protection authority. We will respond to requests within the time the law requires.

Security

We use encryption in transit and access controls to protect your information. No system is completely secure, but we work to protect your data and will tell you if a breach affects you, as the law requires.

Children

Sugar Shark is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

International transfers

We and our providers may process your information in the United States and other countries, with appropriate safeguards where the law requires them.

Not medical advice

Sugar Shark gives general information about ingredients and the glycemic index. It is not medical advice. Talk to a qualified professional about your diet or health.

Changes

If we make material changes to this policy, we will update the date above and let you know in the app.

Contact

Sugar Shark, support@sugarshark.org