Privacy policy

In short: your settings, history, and saved products stay on your phone unless you sign in to back them up. We never sell your data, show ads, or share what you avoid.

On your phone

Your watchlist, allergies, diets, people you shop for, scan history, and saved products are stored on your phone. Label photos are read on your phone and never uploaded.

Sent to check a product

When you scan, Pumpkin sends the barcode (or the text read from a label) and your watchlist and allergy settings so the result can be matched to you. Your settings aren't kept. We keep an anonymous scan log (the product and the result, nothing about you) to keep the service working. Text read from a label may be kept to add or update that product's record.

If you sign in

We keep your email address, or your Sign in with Apple identifier, and a backup of your settings, history, and saved products so they follow you to a new phone. Delete your account in the app and the backup is deleted.

Reports

If you report a problem with a product or result, we keep what you send to review it.

Usage and crash reports

Pumpkin sends anonymous usage events (for example, that a scan returned a score) and crash reports, never what you scanned or avoid. Turn both off in Profile → Privacy and your data.

Service providers

• Render: hosting (United States)
• PostHog: usage analytics (United States)
• Sentry: crash reports (European Union)
• Resend: sign-in code emails
• Apple: Sign in with Apple
• Open Food Facts: product data. We look up barcodes there; nothing about you is sent.

Your choices

Export or delete everything on your phone, delete your account, or turn off usage and crash reports, all from Profile. Pumpkin isn't directed to children under 13.

Contact

Questions or requests: hello@pumpkinhealth.app. We'll post any changes to this policy here.