Privacy Policy

1. Introduction

Unpaq is a product-transparency app operated by To Go Green, LLC (“To Go Green,” “we,” “us,” “our”). You scan a barcode, photograph a product or its label, paste a link to an online listing, or type a description — and Unpaq returns a 0–100 chemical-exposure-potential score with a confidence rating, cited evidence, and lower-exposure alternatives.

This Privacy Policy explains what information we collect through the Unpaq mobile application and this website (together, the “Service”), how we use and share it, how long we keep it, and the rights and choices available to you. By using the Service you acknowledge the practices described here. If you disagree, please do not use the Service.

A note on scope: Unpaq scores are informational exposure-potential estimates — not medical advice, laboratory measurements of your specific product, or regulatory determinations. See our Terms of Use for details.

2. Information we collect

Unpaq is designed to work without an account. We collect only what each feature requires, in four categories:

2.1 Information you provide directly

• Scan inputs. Barcode numbers, product URLs, typed product names or ingredient lists, and photos of products or labels that you choose to submit for analysis.
• Profile details. An optional display name and username you may set in the app, plus optional preferences (e.g., rooms you assign products to, quest progress).
• Support correspondence. If you email us or use in-app feedback, we receive your email address, message contents, and any attachments you send.
• Waitlist or contact forms. If this site offers a form (e.g., an Android waitlist), we collect the email address you submit.

2.2 Information collected automatically

• Anonymous device identifier. A random identifier generated on first launch, used to enforce the free daily analysis quota and to associate synced reports. It is not derived from your Apple ID, Google account, IDFA, or any advertising identifier, and it is hashed on our servers.
• Usage counters. The number of analyses run per day (for quota enforcement) and coarse app events such as feature opens. We do not build behavioral advertising profiles.
• Subscription state. An entitlement flag (free or premium), an anonymous subscriber ID, product purchased, trial status, and renewal metadata from our subscription provider.
• Diagnostics. Crash reports and performance diagnostics that may include device model, OS version, app version, and error stack traces.
• Push-notification token. If you enable notifications (e.g., streak or quest reminders), the app registers a device push token so our provider can deliver them. You can disable notifications at any time in the app or your device settings, which stops delivery.
• Website logs. Our hosting provider may log standard request metadata (IP address, browser user-agent, timestamps) for security and operations. This site uses no advertising trackers or third-party analytics cookies.

2.3 Information we receive from third parties

• App stores. Apple and Google confirm purchase and entitlement status. They do not send us your payment card details.
• Product data providers. When you scan, we receive product identities (name, brand, ingredients, packaging, images) from public and licensed databases. These responses contain product data, not data about you.

2.4 Information we do not collect

• Your real name, email, phone number, or contacts (unless you email us first).
• Precise or coarse location.
• Payment card numbers or bank details.
• Advertising identifiers (IDFA/GAID) or cross-app tracking.
• Health data. Unpaq does not ask about diagnoses, and scan data is not health data.

3. How the app processes your inputs

Each scan type follows a different path:

• Barcode scans are decoded on-device and looked up against Open Food Facts / Open Beauty Facts / Open Products Facts and UPC services. Only the barcode number leaves your device.
• Link scans are parsed on-device where possible; the product URL may be fetched to read its public metadata (JSON-LD, Open Graph).
• Photo scans are uploaded to our backend, which runs a vision model to extract a product identity (name, materials, ingredients). Photos are processed in memory to produce the extraction and are not retained beyond what is needed to return your result.
• Text scans (typed descriptions or pasted ingredient lists) are matched against hazard databases.
• Scoring is deterministic. The 0–100 score is computed on-device by a versioned ruleset — machine learning is used only to extract product information from photos, never to invent a score.

4. How we use information

• Provide the Service: resolve scans, compute scores, render reports and alternatives.
• Maintain your scan history, exposure index, streaks, and quest progress.
• Enforce the free-tier daily analysis quota.
• Validate and deliver Premium entitlements and restore purchases.
• Debug, secure, and improve the Service, including product-matching accuracy.
• Respond to support, rights, and deletion requests.
• Produce aggregate, de-identified statistics (e.g., most-scanned categories).
• Comply with law and enforce our Terms.

We do not sell or rent your personal information, share it with data brokers, or use your scan history to build advertising audiences.

5. Legal bases (EEA/UK/Swiss users)

Where GDPR-style laws apply, we process data under:

• Contract — to deliver the scans, history, and subscription you asked for.
• Legitimate interests — service security, diagnostics, and product improvement, balanced against your rights.
• Consent — camera/photo access and any optional communications; withdrawable at any time in your device settings.
• Legal obligation — where retention or disclosure is required by law.

6. Who we share information with

We share data only with service providers acting on our behalf, under contract, limited to what they need:

• Backend hosting & vision processing — our API infrastructure and the machine-learning provider that extracts product data from photos you submit.
• Subscription infrastructure — Superwall / RevenueCat, which manages entitlements between the app and the stores using an anonymous subscriber ID.
• App stores — Apple App Store and Google Play process billing under their own privacy policies.
• Product & hazard databases — Open Food Facts family, PubChem, EPA CompTox, UPCitemdb, and Go-UPC receive the barcode or identifier being looked up, never your identity.
• Email & support tooling — processes messages you send us.
• Legal & safety — we may disclose data to comply with law, protect rights, or in a merger, acquisition, or asset sale (with notice where required).

7. Data retention

• On-device reports persist until you delete them in History or uninstall the app.
• Synced scan records are kept while the app is installed and deleted on request (see Section 9).
• Submitted photos are discarded after extraction completes.
• Subscription records are retained as long as your entitlement is active, plus the period required for accounting and tax purposes.
• Support emails are retained for up to 24 months.
• Aggregate, de-identified statistics may be retained indefinitely since they cannot be linked back to you.

8. Security

Traffic between the app and our backend uses TLS encryption, device identifiers are hashed at rest, and photo payloads are processed transiently rather than stored. Reports live on your device, which is protected by your own passcode and OS encryption. No method of transmission or storage is perfectly secure; we minimize what we hold so there is less to protect. If we learn of a breach that affects you, we will notify you as required by law.

9. Your rights and choices

Everyone can:

• Delete individual scans from History, or everything by uninstalling.
• Request deletion of synced records — email [email protected] with the device ID shown under Profile so we can locate them.
• Revoke camera/photo permission in device settings (photo scans will stop working).
• Decline optional fields — none are required.

EEA, UK, and Swiss users may also have rights to access, rectification, erasure, portability, restriction, and objection, and to lodge a complaint with a supervisory authority.

California residents (and residents of states with similar laws) have rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information as defined by the CCPA/CPRA, and we do not use or disclose sensitive personal information. Because Unpaq data is keyed to an anonymous device identifier, include it with any request so we can verify and locate your records.

To exercise any right, email [email protected]. We will respond within the timeframe required by applicable law, and we will never discriminate against you for exercising your privacy rights.

10. Children’s privacy

The Service is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal information. The app requires no account and collects no direct identifiers. If you believe a child has provided us data, contact us and we will delete it.

11. International data transfers

We are based in the United States and our providers may process data there and in other countries with different data-protection laws. Where required, transfers from the EEA/UK/Switzerland rely on appropriate safeguards such as standard contractual clauses.

12. Third-party links and retailers

Safer-swap suggestions and product links open third-party stores and sites we do not control. Their privacy practices are governed by their own policies. Some links may be affiliate links.

13. Do Not Track

This website does not respond to Do Not Track signals because it performs no cross-site tracking to begin with.

14. Changes to this policy

We may update this policy as the Service evolves. The date at the top reflects the latest version; for material changes we will note the update in the app’s release notes or on this site, and where required, seek your consent. Continued use after an update means you accept the revised policy.

15. Contact

To Go Green, LLC — Unpaq team
Email: [email protected]
Web: unpaq.togogreen.eco