Privacy Policy

This policy explains how your personal data is collected, used and protected when you use the Etika mobile app (the “App”). By using the App you accept this policy.

1. Data controller

The App is provided by COMCE (“we”, “us”). For anything related to privacy, our single point of contact is [email protected].

2. Data we process

Account information

When you sign in with Google or Apple, the authentication service may share your name, email address and (to the extent the provider shares it) profile photo. You never create a password. Signing in is optional — you can use the App as a guest.

Profile and preferences

Your allergies, food sensitivities, additive/ingredient preferences and nutrient threshold settings are stored so the App can show warnings that apply to you. When you are signed in these preferences are linked to your account; as a guest they stay on your device only.

Scans, searches and product data

The barcodes you scan or search for and the related product information (name, brand, ingredients, nutrition values, allergen/additive labels, image address, etc.) are used to provide the App’s core function. Catalog data is served from our own database.

Missing barcode reports

When you scan a barcode that is not in the catalog, the barcode number may be stored on our servers (without being linked to your identity) so we can track which products are missing.

Adding a product (user contribution)

When a barcode is not in the catalog you may add the product yourself. This is entirely optional and starts only when you confirm it. Adding a product requires signing in, because the product you add becomes visible to other users and the contribution is linked to your account.

When you submit, the following is stored on our servers and becomes publicly visible to all App users: the barcode, product name, brand, category, ingredients text, nutrition values, allergen labels extracted from the ingredients text, and the front-of-pack photo you took (published as the product’s catalog image). Your ingredients and nutrition-table photos never leave your device; only the text is read from them.

For moderation and abuse prevention, your account email address, device model, operating system version and an installation number generated by the App are attached to the submission. This information is not published and is visible only to us. A contributed product is shown with an “unverified” badge until we verify it.

Favorites

Products you favorite (barcode and a product summary) are stored against your account. As a guest they stay on your device only.

Shopping lists

Shopping lists you create (list name, the barcode and product summary of each item, quantities) are stored against your account and synced across your devices. As a guest they stay on your device only. The list average score and the alternatives suggested to you are calculated on your device; those results are not sent to the server. Your lists are permanently deleted when you delete your account.

If you choose to share a list, a random link is generated for it and anyone holding that link — signed in or not — can see the list name, its items and quantities, and can copy the list into their own account. Your identity is not shared: the link does not reveal your name, email or account. The link shows the current state of the list, so if you change the list, people opening the link see the new version. You can stop sharing at any time from the App and the link immediately stops working (lists already copied stay with the person who copied them). Sharing is off by default and only you can start it.

Scan history

Recently scanned products are stored locally on your device (up to 100 entries). Scan history is never uploaded.

Local cache and offline catalog

For faster startup and offline use, product information may be cached temporarily on your device, and offline catalog files may be downloaded through our content delivery network.

Camera and photos

The camera is used to read barcodes; the camera image is not stored or transmitted — only the decoded barcode number is processed.

Beyond that, a photo is uploaded in two cases, and only with your confirmation:

• When you add a product, the front-of-pack photo you take becomes the product’s catalog image and becomes publicly visible. The ingredients and nutrition-table photos from the same flow are not uploaded and stay on your device.
• When you report an error on an existing product, any photo you attach is used for moderation only, is not public, and is deleted within 60 days of the review being completed.

You can take the photo with the camera or pick it from your gallery; sending a photo is never required.

Label scanning (on-device)

When a product is not in the catalog you can photograph the ingredients list and nutrition table on the pack. Reading happens entirely on your device: no photo is sent to any server for text extraction, and no internet connection is needed.

If you choose not to add the result to the catalog, no data is sent anywhere; the result is shown only on that screen. If you do choose to add it, the “Adding a product” section above applies.

Technical data

Technical data such as device type, operating system version and session information may be processed to operate and secure the App and to troubleshoot problems.

When you submit a product or an error report, the device model, operating system version and a random installation number generated by the App on your device are attached to the report. This number is not an advertising identifier and does not identify you; it exists to prevent abuse (unlimited reports from one device) and to group reports, and it disappears when you uninstall the App.

Crash reports and usage measurement

If the App closes unexpectedly or an error occurs, the technical detail of the error (stack trace), device model, operating system version and app version are sent to Firebase Crashlytics and Sentry. These records exist only to find and fix bugs. No screenshot is taken, and your user id, email address, IP address, the barcodes you scanned and your sensitivity selections are not included. Only technical tags such as app language, whether you are signed in and your subscription status are attached.

We also measure, in aggregate, which parts of the App are used, via Google Analytics for Firebase: which screens open, whether a scan produced a result, whether a search came back empty, and similar events. This measurement does not include the barcodes you scan, your search text, your allergy and sensitivity selections or your email address. It is not used for advertising and we do not track you across apps.

Notifications

With your permission the App may send you notifications (new features, products added to the catalog, campaign announcements). Notifications are delivered via Firebase Cloud Messaging and are sent to groups rather than to individuals: your device is subscribed only to broad topics such as app language and subscription status. We do not keep a notification list matched to your personal identity. You can turn notifications off at any time from Profile → Notifications in the App or in your device settings.

3. Why we use this data

• To create your account and let you sign in
• To fetch product information and provide scores and analysis
• To show personal warnings based on your sensitivities
• To sync your favorites, shopping lists and preferences across devices
• To detect missing products and improve the catalog
• To publish products you contribute so other users can find them
• To develop, secure and troubleshoot the App
• To detect and fix crashes and to measure feature usage in aggregate
• To send notifications and in-app announcements if you allowed them

4. Third-party services

The App may work with the following providers:

• Google / Apple — sign-in (OAuth) authentication
• Supabase — secure storage of account, profile, favorites, shopping list and product catalog data
• Cloudflare — website hosting and delivery of product images and offline catalog files (cdn.etikaapp.com)
• RevenueCat — only when an in-app subscription is purchased; verifying subscription status and recognising it across devices
• Apple App Store / Google Play — subscription payment and billing; your card details never reach us
• Google Firebase — crash reports (Crashlytics), aggregate usage measurement (Analytics), notification delivery (Cloud Messaging) and in-app announcements (In-App Messaging)
• Sentry — monitoring of technical errors and crashes (hosted in the European Union)

These providers’ servers may be located outside Türkiye; to provide the service, your personal data is transferred abroad within the meaning of Turkish data protection law (KVKK) — Supabase and Cloudflare: EU/US; Sentry: EU; Google, Apple and RevenueCat: US.

Each provider’s own privacy policy applies. Etika does not currently send live product queries to third-party open food databases (e.g. Open Food Facts).

5. Advertising and data sales

Etika shows no advertising. We do not sell or rent your personal data to third parties for marketing. We use no advertising SDK and do not track you across apps. The only measurement we do is the aggregate usage and crash measurement described above.

6. Retention

Your data is kept while your account is active. You can delete your account yourself from Profile → Delete account in the App; your account record, favorites, shopping lists and sensitivity settings are permanently deleted at that moment and your scan history is removed from your device. The action cannot be undone and you do not need to send us a request.

Products you contributed and error reports you submitted are catalog data and are not deleted, but they are unlinked from you (your email address is removed from the record). The information and published image of a product you contributed remain in the catalog even after you delete your account — that is now general information about the product, not your personal data. Moderation photos from error reports are deleted from the server within 60 days. Scan history and the local cache can also be removed by clearing the App’s data on your device.

If you cannot use the App, see Account and data deletion.

7. Security

We use encrypted connections (HTTPS) and industry-standard safeguards to protect your data. Please remember that no method of transmission over the internet is 100% secure.

8. Your rights

Under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to access your data, to have it corrected or erased, to restrict processing and to object to processing. Write to [email protected]; we respond to requests within 30 days at the latest.

9. Children’s privacy

The App is not directed at children under 13. We do not knowingly collect personal data from anyone under 13.

10. Medical disclaimer

Etika is for information only; it is not a substitute for medical advice, diagnosis or treatment. Product information comes from catalog sources and may be incomplete, incorrect or out of date. For serious allergies or health conditions, check the packaging label and consult a health professional. The App does not detect cross-contact traces.

11. Changes to this policy

We may update this policy from time to time. For significant changes we update the date above. The current text is always published at etikaapp.com/en/privacy.

12. Contact

For privacy questions: [email protected]