Android-specific privacy policy. This policy applies only to PlateGuard package com.ryantinklepaugh.plateguard. It does not change the iOS app’s privacy policy or receipt history.
Scope and controller
Uncommon Weather LLC controls the processing described here. Contact team@uncommonweather.com. PlateGuard is an ingredient-label checking aid for selected dietary preferences and intolerances.
Information handled
- selected dietary rules and custom terms
- ingredient text, scans, and check history
- optional camera images and OCR results
- purchase entitlement and legal-choice evidence
Camera access is optional and used only when you choose to scan a label. OCR and rule matching can be incomplete or wrong; always inspect the physical packaging.
Local product data
The app keeps ordinary product records on your device unless a feature explicitly says otherwise. Android, device backups, files, keyboards, speech providers, share targets, and other services you choose may process information under their own settings and policies. We do not sell product data or use it for cross-context behavioral advertising.
On-device scanning and SDK diagnostics
PlateGuard uses Google's bundled ML Kit text-recognition SDK. Label images and recognized ingredient text are processed on your device and are not sent to Google, Uncommon Weather, Supabase, or RevenueCat by this scanning feature. Dietary profiles, custom rules, and saved check history also remain local. Full raw OCR text is saved locally only when you enable its retention in Privacy settings; a saved result still keeps the extracted ingredients and declaration evidence needed to explain its findings.
On-device recognition does not mean that the SDK sends no data. ML Kit sends Google operational information including device and app characteristics, installation-scoped identifiers, timing and error information, and API configuration, usage-event and input/output-size metadata. Google uses these metrics to diagnose, maintain, improve, and protect the SDK. These metrics are distinct from the contents of a label or your dietary profile and travel over HTTPS. PlateGuard does not offer an in-app switch to disable the SDK's operational metrics. You can use manual ingredient entry without starting a camera scan.
For Google's description of this processing, see ML Kit data disclosures, ML Kit Terms and Privacy, and Google's Privacy Policy.
Legal-choice evidence and abuse prevention
To preserve your choice and prevent forged receipts, the app may send privacy-minimal evidence to Supabase-hosted services: package ID, document versions and hashes, acceptance or withdrawal state, coarse adult age band and role, timestamps, a random installation identifier, request identifiers, an Android Keystore public-key proof, and—when configured—Google Play Integrity verdict material. We also process connection metadata such as IP address, user agent, response status, and rate-limit state for security, reliability, and abuse prevention. We do not send your ordinary product records with legal-choice evidence.
Purchases
Google Play and RevenueCat process purchase history, transaction and purchase-token data, an app-scoped customer identifier, and entitlement or offering state to validate purchases, restore access, and report purchase activity. Ordinary use does not require you to give PlateGuard a name or email address. An isolated store-review identity may be provisioned by the developer solely for review access; it does not change customer subscriptions. We do not receive your full payment-card number.
Retention and deletion
Delete ordinary local records with app controls or by removing the app, subject to Android behavior and any copy you exported. Server-side legal evidence is retained to prove and honor the choice, withdrawal, integrity, and retry history it records. Security logs are retained only as reasonably needed for fraud prevention, troubleshooting, and legal compliance. Google and RevenueCat process their SDK and purchase records under their respective service policies; removing local app data does not automatically delete those provider records or legal-choice evidence. Contact us to request access or deletion; we may retain evidence where necessary to establish, exercise, or defend legal claims.
Choices and rights
You can deny optional Android permissions, decline or withdraw legal consent, manage purchases where applicable, and request privacy help. Depending on where you live, you may have rights to access, correct, delete, restrict, object, or appeal. We do not discriminate for exercising a privacy right.
Age boundary
The app is not directed to anyone under 18. We do not knowingly collect a precise birth date through the legal-choice flow.
Security and transfers
We use reasonable technical and organizational safeguards, but no device, network, or storage system is guaranteed secure. Providers may process information in the United States or other countries subject to applicable safeguards.