Last updated Oct 9, 2026

Privacy policy

We collect as little as we can, we don’t sell anything, and you can scan on the web without an account.

On the web

No account. Your ingredient photo is only used to read the label and isn’t stored.

In the app

An account with just your email (or Apple / Google sign-in), so your products and household profiles sync.

Never

No selling data, no ad networks or social pixels, no sharing what you scan with brands.

What we collect

When you scan on the web

The ingredient photo is sent to our AI provider to read the ingredients and isn’t stored. If you also photograph the front of the pack, we keep that photo with the scan. The ingredient names and their ratings are cached to speed up future lookups; the cache contains no personal information.

When you use the app

Your email address (or the identifier Apple or Google provides when you sign in with them), your scans, your lists (At Home and Shopping) and any household profiles you create. Household profiles store the ingredient groups, diets and allergens you choose. We don’t ask for or store medical diagnoses.

When you contact us

The topic, your email, your name if you give it, and your message, so we can reply.

Automatically

Your IP address, for rate limiting and abuse prevention, and standard server logs for debugging.

How we use it

  • To read labels and score products.
  • To sync your products and profiles across your devices.
  • To send notifications you’ve turned on, such as a queued scan being scored or a score changing.
  • To understand which features are used and to fix errors (product analytics, see below).

We don’t use your data for advertising, and we don’t train third-party models on your scans.

Signing in with Google

You can create an account and sign in with your Google account. We only ask Google for basic sign-in access (the “openid”, “email” and “profile” scopes). We don’t ask for access to your Gmail, Drive, contacts, calendar or any other Google data.

  • What we receive: your name, email address and profile photo, plus an account identifier from Google.
  • How we use it: only to create your Sketchy Labels account, sign you in, and show your name and email in the app.
  • Who we share it with: Clerk, our sign-in provider, which stores it to run your account. Nobody else. We never sell it or use it for advertising.
  • How long we keep it: until you delete your account under Account in the app, after which it’s removed within 30 days. You can also remove our access at any time from your Google Account’s security settings.

Sketchy Labels’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Signing in with Apple works the same way: we receive your name and email (or Apple’s private relay address) and use them only for your account.

Who we share with

Only the services we need to run Sketchy Labels:

ConvexDatabase. Stores ingredient ratings and, if you have an account, your products and profiles.
AnthropicAI ingredient reading. Label images and text are sent to its API.
ClerkSign-in and sessions.
Cloudflare TurnstileBot protection on web scans and the contact form.
VercelHosting, and cookieless aggregate analytics.
PostHogProduct analytics and error tracking. Never receives your photos or ingredient text.
ResendSends our emails, including the weekly digest and contact messages.
Apple / GoogleSubscriptions and, if you choose, sign-in.

We disclose data to authorities only when legally required, and will tell you first where we’re allowed to.

How long we keep it

  • Ingredient photos: not stored — used only to read the label.
  • Front-of-pack photos: kept with the scan until you delete the scan or your account. Photos for a queued offline scan stay on your device until they’re scored.
  • Account data: until you delete your account. Deletion removes everything within 30 days.
  • Server logs: up to 90 days.
  • Rate-limit records: purged after each window.

Your rights

In the app, under Account, you can change your name and email and delete your account. For a copy of your data, or anything else, contact us and we’ll reply within 30 days. EU and UK residents can also complain to their local data protection authority.

Cookies

The site needs a sign-in session cookie and a short-lived bot-check token. Analytics cookies (Google Analytics and a first-party PostHog ID) are only set if you accept them on the cookie banner; if you decline, we count visits without cookies. You can change your choice any time from “Cookie settings” in the footer. No advertising cookies or social pixels.

Children

Sketchy Labels isn’t directed at children under 13. Household profiles for children are created and managed by an adult account holder and contain only the ingredient preferences that adult chooses.

International transfers

Our providers process data in the United States and elsewhere, under appropriate safeguards such as Standard Contractual Clauses.

Changes

If we make a material change, we’ll update the date above and email account holders at least 14 days before it takes effect.

Contact

Sketchy Labels is a product of DEFINEWEB INC. For privacy questions, use our contact page.