Privacy Policy

Nutra Detective LLC

Effective Date: November 3^rd, 2025
Last Updated: November 3^rd, 2025

1. INTRODUCTION

1.1 Overview

Nutra Detective LLC, an Oklahoma limited liability company (“NutraDetective,” “Company,” “we,” “us,” or “our”), is committed to protecting the privacy and security of your personal information. This Privacy Policy (“Policy”) describes how we collect, use, disclose, store, and protect information when you use our mobile application (the “App”), website located at https://nutradetective.com (the “Website”), and related services, features, and functionality (collectively, the “Services”).

This Policy is incorporated into and is subject to our Terms of Service. By accessing or using the Services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this Policy, you must not access or use the Services.

1.2 Information Controller

For purposes of applicable data protection laws, Nutra Detective LLC is the data controller responsible for your personal information. Our contact information is provided in Section 13 of this Policy.

1.3 Scope of This Policy

This Policy applies to information collected through:

(a) The NutraDetective mobile application available on iOS and Android devices;
(b) The NutraDetective website at https://nutradetective.com;
(c) Email, text message, and other electronic communications between you and NutraDetective;
(d) Your interactions with our advertising and applications on third-party websites and services; and
(e) Any other means through which you interact with the Services.

This Policy does NOT apply to:

(a) Information collected by third parties, including third-party websites, applications, or online services that may link to or be accessible from the Services;
(b) Information collected offline or through any other means not specified above; or
(c) Information you provide directly to third parties, even if accessed through the Services.

1.4 Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Policy, we will notify you by:

(a) Posting the updated Policy on this page with a revised “Last Updated” date;
(b) Providing prominent notice within the App;
(c) Sending an email notification to the email address associated with your account; and/or
(d) Such other means as required by applicable law.

Your continued use of the Services following notice of changes constitutes your acceptance of the modified Privacy Policy. We encourage you to review this Policy periodically. If you do not agree with any changes, you must cease using the Services and may request deletion of your account as described in Section 8.

1.5 Questions and Concerns

If you have questions, comments, or concerns about this Privacy Policy or our data practices, please contact us using the information provided in Section 13.

—

2. INFORMATION WE COLLECT

We collect several types of information from and about users of the Services, including:

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

(a) Create an Account:

– Email address (required)
– Name or display name (optional)
– Password (encrypted)
– Profile information (optional)
– Demographic information (optional)
– Date of birth (for age verification purposes only)

(b) Subscribe to Premium Services:

– Payment information is collected and processed by third-party payment processors (Apple, Google, RevenueCat). We do NOT directly collect, store, or process credit card numbers, bank account information, or other financial account details.
– Subscription tier and billing history
– Transaction records and purchase confirmations

(c) Use the Services:

– Barcode Scan Data: Barcodes of products you scan, timestamps, scan frequency, and scan history
– User Preferences: Dietary preferences, allergen alerts, health goals, and customization settings
– Product Interactions: Products favorited, products flagged, notes or comments on products
– Search Queries: Search terms and filters you use within the App
– Family Account Data: If you create a family account, information about family members you invite, including names and email addresses

(d) Communicate with Us:

– Correspondence content when you contact customer support
– Survey responses, feedback, and testimonials
– Information provided in connection with contests, promotions, or sweepstakes

(e) User-Generated Content:

– Product reviews or ratings (if applicable)
– Comments, notes, or annotations you add to scanned products
– Any other content you submit, upload, or transmit through the Services

2.2 Information Collected Automatically

When you access and use the Services, we and our third-party service providers automatically collect certain information about your device and usage of the Services:

(a) Device Information:

– Device type, model, and manufacturer
– Operating system and version (iOS/Android)
– Mobile device identifiers (such as device ID, advertising ID)
– Screen resolution and display settings
– Mobile carrier and network information
– Device settings and preferences
– Battery level and charging status
– Available storage space

(b) Usage Information:

– Features and functions you access within the App
– Time spent on different screens or sections
– Navigation paths and click patterns
– Session duration and frequency
– Date and time of access
– Actions taken within the App (e.g., number of scans, products viewed, settings changed)
– Error logs, crash reports, and diagnostic data

(c) Location Information:

– Precise Location (GPS): We do NOT currently collect precise geolocation data. If we implement location-based features in the future, we will update this Policy and obtain your express consent before collecting precise location information.
– Approximate Location: We may infer approximate location from your IP address for analytics purposes and to provide region-appropriate content.

(d) Camera and Photo Access:

– When you use the barcode scanning feature, we access your device’s camera to scan product barcodes. We do NOT store photographs or images captured by the camera. Only the barcode data is extracted and stored.
– We do NOT access your photo library unless you explicitly grant permission for a specific feature that requires it.

(e) Internet and Network Information:

– IP address
– Internet service provider (ISP)
– Browser type and version (for Website users)
– Referring/exit pages and URLs
– Connection type (WiFi, cellular)
– Time zone and language settings

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

(a) Product Database Providers:

– Open Food Facts: We retrieve product information (nutritional data, ingredient lists, images, manufacturer information) from the Open Food Facts database based on barcodes you scan. Open Food Facts is a community-driven, crowdsourced database. We do not control the accuracy or completeness of information provided by Open Food Facts.
– USDA FoodData Central: We retrieve nutritional information from the USDA FoodData Central database for certain products.
– FDA and USDA Recall Databases: We retrieve food recall information from publicly available FDA and USDA databases based on product barcodes.

(b) Payment Processors:

– RevenueCat: Our payment processor provides us with limited subscription and transaction information, including subscription status, renewal dates, and transaction IDs. RevenueCat does NOT share your payment method details (such as credit card numbers) with us.
– Apple and Google: When you purchase subscriptions through the Apple App Store or Google Play Store, Apple and Google provide us with limited information about your subscription, including subscription ID, status, and expiration date, in accordance with their respective privacy policies.

(c) Authentication Providers (if applicable):

If we implement social media login features in the future, we may receive information from authentication providers (such as Facebook, Google, or Apple) in accordance with your privacy settings on those platforms. We will update this Policy and obtain your consent before implementing such features.

(d) Analytics and Advertising Partners:

We use third-party analytics services (such as Google Analytics) that may collect information about your use of the Services. These providers may use cookies, web beacons, and other tracking technologies to collect usage data. See Section 10 for more information about cookies and tracking.

2.4 Aggregated and De-Identified Information

We may create aggregated, anonymized, or de-identified data from the information we collect. This data does not identify you personally and is used for analytics, research, and improving the Services. For example:

– Aggregated statistics about popular products, common allergens, or scanning trends
– Anonymized usage patterns and feature engagement metrics
– De-identified data for research purposes or public health insights

Once information is aggregated or de-identified in a manner that cannot reasonably be used to identify you, it is no longer considered personal information and may be used and disclosed for any purpose without restriction.

2.5 Sensitive Information

We do NOT intentionally collect sensitive personal information such as:

– Social Security numbers or other government-issued identification numbers
– Financial account numbers or payment card information (handled by payment processors)
– Precise geolocation data (GPS coordinates)

– Genetic or biometric data
– Health insurance information
– Medical records or detailed health diagnoses

However, certain information you provide may be considered sensitive under applicable laws:

(a) Health-Related Information:

– Your scan history and dietary preferences may reveal information about your health conditions, dietary restrictions, or allergies. For example, if you scan products for diabetes management or gluten-free diets, this may infer health conditions.
– Allergen alert settings may reveal food allergies or sensitivities.
– We treat such information with heightened security and confidentiality.

(b) Children’s Information:

We do not knowingly collect personal information from children under the age of 13. See Section 6 for our Children’s Privacy Policy.

2.6 Information We Do NOT Collect

For transparency, we want to clarify information we do NOT collect:

– We do NOT access your contacts, text messages, or phone call logs
– We do NOT access your photo library without your explicit permission
– We do NOT track your precise geolocation (GPS) without your explicit consent
– We do NOT record audio or video without your explicit permission
– We do NOT collect information from your calendar, email, or other personal apps
– We do NOT scan or collect information from other apps on your device
– We do NOT directly collect payment card information (handled by payment processors)

—

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 Provide and Operate the Services

(a) Core Functionality:

– Process and fulfill barcode scan requests
– Retrieve and display product information from databases
– Generate health scores, grades, and product analysis
– Detect allergens and provide personalized allergen warnings
– Display food recall alerts based on scanned products
– Suggest healthier alternative products
– Store and manage your scan history
– Synchronize data across your devices (if applicable)
– Maintain your account and preferences

(b) Premium Features:

– Provide access to Legend Detective Tier features for subscribers
– Manage family account sharing and permissions
– Enforce usage limitations for free tier users
– Track subscription status and renewal dates

3.2 Process Transactions and Billing

– Process subscription purchases and renewals
– Verify payment information and authorization
– Send payment confirmations and receipts
– Handle billing inquiries and disputes
– Prevent fraud and unauthorized transactions
– Comply with financial record-keeping requirements

3.3 Communicate with You

(a) Transactional Communications (You cannot opt out of these):

– Account creation and verification emails
– Subscription renewal reminders and payment confirmations
– Responses to customer support inquiries
– Important updates about the Services or your account
– Notices of changes to this Privacy Policy or Terms of Service
– Security alerts and account notifications
– Legal notices and policy updates

(b) Promotional Communications (You can opt out):

– Marketing emails about new features or services
– Promotional offers and discounts
– Newsletters and product updates
– Surveys and feedback requests
– Tips, recommendations, and educational content

You may opt out of promotional communications by following the “unsubscribe” instructions in the email or by adjusting your account settings. Note that even if you opt out of promotional emails, you will still receive transactional communications necessary for your use of the Services.

3.4 Personalization and Improvement

– Personalize your experience based on your preferences and usage patterns
– Recommend products or alternatives based on your scan history
– Customize allergen warnings and dietary preference filters
– Remember your settings and preferences across sessions
– Provide relevant content and features based on your interests

3.5 Analytics and Service Improvement

– Analyze usage patterns and trends to improve the Services
– Identify and fix technical issues, bugs, and errors
– Conduct research and development for new features
– Test new features and functionality
– Measure the effectiveness of our Services
– Understand user behavior and preferences
– Generate statistical and aggregated data for business intelligence

3.6 Security and Fraud Prevention

– Verify user identity and prevent unauthorized access
– Detect, investigate, and prevent fraudulent activity
– Protect against security threats, hacking, and malicious activity
– Monitor for violations of our Terms of Service
– Enforce our policies and legal agreements
– Protect the rights, property, and safety of NutraDetective, our users, and the public

3.7 Legal Compliance and Protection

– Comply with applicable laws, regulations, and legal processes
– Respond to lawful requests from government authorities and law enforcement
– Enforce our Terms of Service and other policies
– Protect our legal rights and interests
– Resolve disputes and enforce agreements
– Prevent harm or illegal activity
– Establish, exercise, or defend legal claims

3.8 Marketing and Advertising

– Deliver targeted advertising based on your interests (with your consent where required)
– Measure the effectiveness of advertising campaigns
– Market our Services to potential users
– Conduct market research and competitive analysis
– Promote the Services through third-party platforms

You may opt out of targeted advertising by adjusting your device settings or following opt-out instructions in Section 8.6.

3.9 Aggregated Research and Public Health

– Create anonymized, aggregated data for research purposes
– Contribute to public health insights (e.g., food consumption trends, allergen prevalence)
– Share anonymized data with researchers or public health organizations
– Publish aggregated statistics and trends reports

3.10 Other Purposes with Your Consent

We may use your information for other purposes with your explicit consent. You may withdraw consent at any time by contacting us, though withdrawal does not affect the lawfulness of processing before consent was withdrawn.

—

4. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the limited circumstances described below:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf, including:

(a) Cloud Storage and Infrastructure:

– Supabase: Provides cloud database and storage services. Supabase stores account information, scan history, and user preferences on secure servers. Supabase’s privacy practices are governed by their privacy policy, available at https://supabase.com/privacy

(b) Payment Processing:

– RevenueCat: Processes subscription payments and manages subscription status. RevenueCat receives limited account and transaction information but does NOT receive your full payment card details.
– Apple and Google: Process in-app purchases through their respective platforms. Payment information is governed by Apple’s and Google’s privacy policies.

(c) Product Data Providers:

– Open Food Facts: We query Open Food Facts’ database using product barcodes you scan. Open Food Facts may log API requests but does not receive personally identifiable information about you.
– USDA FoodData Central: We query USDA databases for nutritional information.
– FDA and USDA: We query public recall databases.

(d) Analytics and Performance Monitoring:

– Google Analytics (if applicable): Collects usage data to help us understand how users interact with the Services. Google’s use of data is governed by Google’s Privacy Policy.
– We may use other analytics providers to monitor app performance, crashes, and usage metrics.

(e) Customer Support:

– Customer support tools and platforms (if we implement them) that help us respond to your inquiries and provide assistance.

(f) Email and Communication Services:

– Email service providers (when implemented) that send transactional and promotional emails on our behalf.

Important: These service providers are contractually obligated to:

– Use your information only for the purposes we specify
– Implement appropriate security measures
– Comply with applicable data protection laws
– Not disclose your information to unauthorized third parties
– Delete or return your information when no longer needed for the specified purposes

4.2 Legal Requirements and Protection

We may disclose your information to government authorities, law enforcement, or other third parties if required or permitted by law, including to:

(a) Comply with a subpoena, court order, legal process, or other legal obligation;
(b) Respond to lawful requests from government authorities or law enforcement;
(c) Enforce our Terms of Service, Privacy Policy, or other agreements;
(d) Protect the rights, property, safety, or security of NutraDetective, our users, or the public;
(e) Detect, prevent, or address fraud, security issues, or technical problems;
(f) Prevent imminent harm to persons or property;
(g) Investigate potential violations of law or our policies;
(h) Establish, exercise, or defend legal claims or rights.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, sale of assets, or other business transaction or negotiation involving NutraDetective, your information may be transferred to a successor entity or third party. We will notify you via email and/or prominent notice within the Services

before your information becomes subject to a different privacy policy.

4.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that does not identify you personally with:

– Researchers and academic institutions
– Public health organizations
– Business partners and affiliates
– The public through published reports or studies
– Other third parties for any lawful purpose

This data cannot reasonably be used to identify you and is not subject to this Privacy Policy.

4.5 With Your Consent

We may share your information with third parties when you provide explicit consent to do so. For example:

– Sharing product recommendations on social media (if you choose to share)
– Participating in surveys or research studies
– Entering contests or promotions with third-party sponsors

You may withdraw consent at any time, though withdrawal does not affect prior sharing.

4.6 Family Account Sharing

If you are part of a family account on the Legend Detective Tier:

– The primary account holder can view family members’ names and email addresses
– Family members’ individual scan histories and personal preferences remain private and are NOT shared with other family members unless explicitly shared by the user
– Account administrators have access to subscription and billing information

5. DATA STORAGE AND SECURITY

5.1 Data Storage Locations

Your information is stored and processed in the United States on servers maintained by our service providers, primarily Supabase. By using the Services, you consent to the transfer, storage, and processing of your information in the United States and other jurisdictions where our service providers operate.

Local Device Storage:

Certain information is stored locally on your device using secure local storage (AsyncStorage). This may include:

– Recent scan history (limited to the most recent scans)
– User preferences and settings
– Cached product information for offline access
– Authentication tokens

You can delete locally stored data by uninstalling the App or clearing the App’s data through your device settings.

Cloud Storage:

Account information, complete scan history, and user data for Legend Detective Tier subscribers are stored in cloud-based databases maintained by Supabase. This enables:

– Data synchronization across multiple devices
– Data backup and recovery
– Family account data sharing
– Long-term storage of scan history

5.2 Security Measures

We implement commercially reasonable administrative, technical, and physical security measures designed to protect your information from unauthorized access, use, disclosure, alteration, and destruction. These measures include:

(a) Technical Security:

– Encryption in Transit: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS) encryption.
– Encryption at Rest: Sensitive data stored on our servers is encrypted at rest using AES-256 encryption or equivalent.
– Secure Authentication: Passwords are encrypted using industry-standard hashing algorithms (bcrypt or equivalent) and are never stored in plain text.
– Secure APIs: API endpoints are protected with authentication tokens and rate limiting to prevent unauthorized access.
– Regular Security Updates: We regularly update our software, systems, and dependencies to patch security vulnerabilities.

(b) Administrative Security:

– Access Controls: Access to personal information is restricted to authorized employees and service providers who need access to perform their job functions.
– Principle of Least Privilege: Personnel are granted the minimum level of access necessary to perform their duties.
– Confidentiality Agreements: Employees and contractors with access to personal information are bound by confidentiality obligations.
– Security Training: Personnel receive training on data protection and security best practices.
– Vendor Management: Third-party service providers are carefully vetted and required to maintain appropriate security standards.

(c) Physical Security:

– Data Center Security: Our cloud service providers (such as Supabase) maintain physical security controls at data center facilities, including access controls, surveillance, and environmental protections.
– Device Security: We implement secure development practices and code signing to protect the integrity of the App on your device.

(d) Monitoring and Incident Response:

– Security Monitoring: We monitor systems for suspicious activity, unauthorized access attempts, and security incidents.
– Intrusion Detection: Automated systems detect and alert us to potential security threats.
– Incident Response Plan: We maintain an incident response plan to promptly address security incidents and data breaches.
– Vulnerability Assessments: We conduct periodic security assessments and penetration testing to identify vulnerabilities.

5.3 Limitations of Security

IMPORTANT NOTICE:

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You acknowledge and accept the inherent risks of transmitting information over the Internet and storing data electronically.

You are responsible for:

– Maintaining the confidentiality of your account credentials
– Using a strong, unique password
– Enabling device security features (passcode, biometric authentication)
– Logging out of your account on shared devices
– Promptly notifying us of any unauthorized access or security concerns

5.4 Data Breach Notification

In the event of a data breach that affects your personal information, we will:

(a) Notify affected users without unreasonable delay, consistent with applicable law;
(b) Provide information about the nature of the breach, data affected, and steps we are taking to address it;
(c) Offer guidance on steps you can take to protect yourself;
(d) Notify relevant regulatory authorities as required by law; and
(e) Take appropriate remedial actions to prevent future breaches.

Notification will be provided via email to the address associated with your account and/or through prominent notice within the App.

—

6. CHILDREN’S PRIVACY

6.1 Age Restrictions

THE SERVICES ARE NOT INTENDED FOR USE BY CHILDREN UNDER THE AGE OF 13.

We do not knowingly collect, use, or disclose personal information from children under 13 years of age without verifiable parental consent, in accordance with the Children’s Online Privacy Protection Act (“COPPA”).

6.2 Minimum Age Requirement

To use the Services, you must be:

– At least 18 years of age; OR
– At least 13 years of age with verifiable parental or guardian consent and supervision.

By using the Services, you represent and warrant that you meet these age requirements.

6.3 Parental Consent for Users Age 13-17

If you are between 13 and 17 years of age, you may use the Services only with the involvement, consent, and supervision of a parent or legal guardian who agrees to be bound by our Terms of Service and this Privacy Policy. Parents or guardians who permit minors to use the Services accept full responsibility for:

– The minor’s use of the Services
– Monitoring the minor’s access and activities
– Ensuring the minor’s compliance with these policies
– Any costs, charges, or liabilities incurred

6.4 No Intentional Collection from Children Under 13

We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will:

(a) Delete such information from our systems as soon as reasonably practicable;
(b) Terminate the child’s account;
(c) Not use the information for any purpose; and
(d) Not disclose the information to third parties.

6.5 Parental Rights

If you are a parent or guardian and believe that your child under 13 has provided personal information to us without your consent, please contact us immediately at contact@nutradetective.com. Upon verification of your parental status, we will:

– Provide you with access to the personal information we have collected from your child;
– Allow you to request deletion of your child’s personal information;
– Allow you to refuse further collection or use of your child’s information;
– Provide information about the types of personal information we collected, how we used it, and whether we disclosed it to third parties.

6.6 Verification of Parental Consent

If we implement features specifically designed for children under 13 in the future, we will:

(a) Obtain verifiable parental consent before collecting personal information from children;
(b) Implement age-gating mechanisms to prevent children under 13 from accessing the Services without consent;
(c) Provide clear notice to parents about our information practices regarding children;
(d) Update this Privacy Policy with detailed children’s privacy provisions; and
(e) Comply with all COPPA requirements.

Current Status: As of the Last Updated date of this Policy, we do not offer features specifically directed to children under 13 and do not knowingly collect information from children under 13.

—

7. DATA RETENTION

7.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of information and the purposes for which it is used:

(a) Account Information:

– Active Accounts: Retained for the duration of your account relationship with us.
– Closed Accounts: Retained for up to twelve (12) months after account closure, or longer if required by law, to comply with legal obligations, resolve disputes, enforce agreements, and prevent fraud.

(b) Scan History:

– Detective Tier (Free): Scan history may be limited to the most recent 50 scans and stored locally on your device. Older scans may be automatically deleted.
– Legend Detective Tier (Premium): Complete scan history is retained for the duration of your subscription. After subscription termination or cancellation, scan history may be retained for up to twelve (12) months for potential reactivation, unless you request deletion.

(c) Transaction and Billing Records:

– Retained for at least seven (7) years to comply with financial record-keeping requirements, tax laws, and accounting standards.

(d) Communications:

– Customer support inquiries and correspondence are retained for up to three (3) years to provide consistent service and maintain records of interactions.

(e) Usage Data and Analytics:

– Raw usage logs and analytics data are typically retained for twelve (12) to twenty-four (24) months.
– Aggregated, anonymized analytics data may be retained indefinitely.

(f) Security and Fraud Prevention:

– Security logs, fraud

detection records, and incident reports are retained for at least three (3) years or longer as required to investigate incidents and comply with legal obligations.

(g) Legal and Compliance:

– Information required for legal compliance, litigation, or regulatory investigations is retained for as long as necessary to fulfill those purposes.

7.2 Deletion of Data

We will delete or anonymize your personal information when:

(a) It is no longer needed for the purposes for which it was collected;
(b) You request deletion and we have no legal obligation to retain it;
(c) Your account is deleted and applicable retention periods have expired; or
(d) Required by applicable law.

Important: Deletion may not be immediate due to:

– Technical limitations and backup systems
– Legal, regulatory, or contractual obligations to retain certain data
– The need to resolve disputes or enforce agreements
– Fraud prevention and security requirements

Even after deletion, some information may persist in:

– Backup systems for a limited period (typically 30-90 days)
– Archived records required for compliance
– Aggregated, anonymized data that cannot identify you

7.3 Data Retention After Account Deletion

When you delete your account or request data deletion:

(a) Your account will be deactivated and you will lose access to the Services;
(b) We will delete or anonymize your personal information in accordance with this Policy and applicable law;
(c) Certain information may be retained as described in Section 7.1; and
(d) Anonymized, aggregated data derived from your information may be retained indefinitely.

—

8. YOUR PRIVACY RIGHTS AND CHOICES

Depending on your jurisdiction, you may have certain rights regarding your personal information. This section describes your rights and how to exercise them.

8.1 Access to Your Information

You have the right to request access to the personal information we hold about you. You can:

(a) Access Your Information Through the App:

– View and manage your account information, preferences, and scan history directly within the App under Settings > Account.

(b) Request a Copy of Your Information:

– Submit a request to contact@nutradetective.com to receive a copy of your personal information in a structured, commonly used, and machine-readable format (e.g., CSV or JSON).
– We will respond to verified requests within thirty (30) days, or as required by applicable law.

8.2 Correction and Update

You have the right to correct inaccurate or incomplete personal information.

(a) Update Information Directly:

– You can update your account information, preferences, and settings directly within the App under Settings > Account.

(b) Request Correction:

– If you are unable to correct information yourself, contact us at contact@nutradetective.com with details of the information you wish to correct.

8.3 Deletion of Your Information

You have the right to request deletion of your personal information, subject to certain exceptions.

(a) Delete Your Account:

– Navigate to Settings > Account > Delete Account within the App; OR
– Send a deletion request to contact@nutradetective.com with your account email address and a clear statement that you wish to delete your account.

(b) What Happens When You Delete Your Account:

– Your account will be permanently deactivated;
– Your personal information will be deleted or anonymized in accordance with our data retention policies;
– Some information may be retained as described in Section 7;
– Deletion cannot be undone.

(c) Exceptions to Deletion:

We may retain certain information if necessary to:

– Complete transactions or provide services you have requested;
– Comply with legal obligations (e.g., tax records, financial reporting);
– Resolve disputes or enforce agreements;
– Detect, prevent, or investigate fraud, security issues, or illegal activity;
– Exercise or defend legal claims;
– Maintain business records for legitimate purposes.

8.4 Opt-Out of Marketing Communications

(a) Email Marketing:

You may opt out of receiving promotional emails by:

– Clicking the “unsubscribe” link at the bottom of any marketing email; OR
– Adjusting your communication preferences in Settings > Notifications within the App; OR
– Sending an opt-out request to contact@nutradetective.com.

(b) Push Notifications:

You may disable push notifications by:

– Adjusting notification settings within the App under Settings > Notifications; OR
– Disabling notifications for the App in your device settings.

(c) Important: Even if you opt out of marketing communications, you will still receive:

– Transactional communications (e.g., subscription renewal reminders, payment confirmations);
– Important service announcements (e.g., changes to Terms of Service or Privacy Policy);
– Account security notifications;
– Customer support responses.

8.5 Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another service provider.

To Request Data Portability:

Send a request to contact@nutradetective.com specifying:

– Your account email address
– The specific data you wish to export
– Your preferred format (CSV, JSON, etc.)

We will provide your data within thirty (30) days of verifying your request.

8.6 Opt-Out of Targeted Advertising

(a) Device-Level Opt-Out:

iOS Devices:

– Go to Settings > Privacy > Tracking > Disable “Allow Apps to Request to Track”
– Go to Settings > Privacy > Apple Advertising > Disable “Personalized Ads”

Android Devices:

– Go to Settings > Google > Ads > Opt out of Ads Personalization
– Go to Settings > Privacy > Ads > Delete Advertising ID

(b) Industry Opt-Out Tools:

– Network Advertising Initiative (NAI): http://www.networkadvertising.org/choices/
– Digital Advertising Alliance (DAA): http://www.aboutads.info/choices/

Note: Opting out of targeted advertising does not mean you will stop seeing ads. You will still see advertising, but it may be less relevant to your interests.

8.7 Do Not Sell My Personal Information (California Residents)

We do NOT sell your personal information to third parties for monetary or other valuable consideration.

If you are a California resident, you have the right to opt out of the “sale” or “sharing” of your personal information as defined by the California Consumer Privacy Act (CCPA). While we do not sell personal information, if you wish to exercise this right or have questions, contact us at contact@nutradetective.com.

8.8 Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing before consent was withdrawn.

To Withdraw Consent:

8.9 Object to Processing

You have the right to object to certain types of processing of your personal information, including processing for direct marketing purposes and processing based on legitimate interests.

To Object:

Contact us at contact@nutradetective.com with details of the processing you object to. We will review your objection and respond within thirty (30) days.

8.10 Lodge a Complaint

If you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with a supervisory authority.

United States:

– Federal Trade Commission (FTC): https://www.ftc.gov/
– State Attorneys General: Contact your state’s Attorney General office.

European Union:

– Contact your local Data Protection Authority. A list is available at: https://edpb.europa.eu/about-edpb/board/members_en

8.11 Verification of Requests

To protect your privacy and security, we must verify your identity before processing requests to access, correct, delete, or export your personal information.

Verification Process:

– You must provide your account email address and other identifying information;
– We may send a verification email to your registered email address;
– For sensitive requests (e.g., account deletion), we may require additional verification steps;
– If we cannot verify your identity, we may decline your request.

8.12 Authorized Agents

You may designate an authorized agent to submit privacy rights requests on your behalf. To do so:

(a) Provide written authorization signed by you authorizing the agent to act on your behalf; OR
(b) Provide a valid power of attorney under applicable law; AND
(c) Verify your own identity directly with us.

We may deny requests from agents who cannot provide adequate proof of authorization.

8.13 Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not be:

– Denied access to the Services
– Charged different prices or rates
– Provided a different level or quality of service
– Subjected to retaliation or other adverse treatment

Exception: We may charge different prices or provide different levels of service if the difference is reasonably related to the value provided by your personal information.

—

9. INTERNATIONAL DATA TRANSFERS

9.1 Transfer to the United States

The Services are operated from the United States. Your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using the Services, you expressly consent to the transfer of your information to the United States and other countries where our service providers operate.

9.2 European Economic Area (EEA) and

United Kingdom

If you are located in the EEA or United Kingdom, the transfer of your personal information to the United States may be subject to additional protections under the General Data Protection Regulation (GDPR).

Transfer Mechanisms:

Where required by law, we rely on the following mechanisms for international data transfers:

(a) Standard Contractual Clauses (SCCs): We enter into Standard Contractual Clauses approved by the European Commission with our service providers to ensure adequate protection of your information.

(b) Your Consent: By using the Services and accepting this Privacy Policy, you consent to the transfer of your information to the United States and other countries.

(c) Adequacy Decisions: We may rely on adequacy decisions issued by the European Commission recognizing certain countries as providing adequate data protection.

9.3 Additional Rights for EEA and UK Residents

If you are located in the EEA or United Kingdom, you have additional rights under the GDPR, including:

– Right to withdraw consent at any time
– Right to object to processing based on legitimate interests
– Right to restrict processing in certain circumstances
– Right to lodge a complaint with a supervisory authority
– Right not to be subject to automated decision-making, including profiling

To exercise these rights, contact us at contact@nutradetective.com.

9.4 Legal Basis for Processing (GDPR)

If you are located in the EEA or United Kingdom, we process your personal information based on the following legal grounds:

(a) Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the Services you requested).

(b) Consent: You have given explicit consent for specific processing activities (e.g., marketing communications, certain data sharing).

(c) Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of third parties, provided such interests are not overridden by your rights and freedoms. Legitimate interests include:

– Improving and developing the Services
– Fraud prevention and security
– Network and information security
– Analytics and business intelligence
– Marketing and advertising our Services

(d) Legal Obligation: Processing is necessary to comply with legal obligations under applicable law.

(e) Vital Interests: Processing is necessary to protect your vital interests or those of another person (e.g., emergency situations).

9.5 Other Jurisdictions

If you are located in other jurisdictions with data protection laws (e.g., Canada, Brazil, Australia), similar protections may apply. Contact us at contact@nutradetective.com with questions about your specific rights.

10. COOKIES AND TRACKING TECHNOLOGIES

10.1 Overview

We and our third-party service providers use cookies, web beacons, pixels, software development kits (SDKs), and similar tracking technologies (collectively, “Tracking Technologies”) to collect information about your use of the Services. This section describes the types of Tracking Technologies we use, the purposes for which they are used, and your choices regarding them.

10.2 What Are Tracking Technologies?

(a) Cookies:

Cookies are small text files placed on your device by websites or applications you visit. Cookies allow websites and apps to recognize your device and remember information about your visit, such as your preferences, login status, and other settings.

Types of cookies:

– Session Cookies: Temporary cookies that expire when you close your browser or app. These are used to maintain your session and enable certain features.
– Persistent Cookies: Cookies that remain on your device until they expire or you delete them. These are used to remember your preferences across sessions.
– First-Party Cookies: Cookies set by us directly.
– Third-Party Cookies: Cookies set by third-party service providers on our behalf.

(b) Web Beacons (Pixels):

Web beacons, also known as pixel tags or clear GIFs, are tiny graphics with unique identifiers embedded in web pages, emails, or apps. They are used to track user activity, measure the effectiveness of campaigns, and collect usage statistics.

(c) Software Development Kits (SDKs):

SDKs are code packages integrated into mobile applications that enable third-party service providers to collect data about app usage, crashes, performance, and user behavior.

(d) Local Storage:

Local storage technologies (such as HTML5 local storage and AsyncStorage) allow apps to store data locally on your device. We use local storage to cache data, store preferences, and enable offline functionality.

(e) Device Identifiers:

Mobile device identifiers, such as Apple’s Identifier for Advertising (IDFA) or Google’s Advertising ID (AAID), are unique identifiers assigned to mobile devices that can be used for tracking and advertising purposes.

10.3 How We Use Tracking Technologies

We use Tracking Technologies for the following purposes:

(a) Essential/Strictly Necessary:

These Tracking Technologies are essential for the Services to function properly and cannot be disabled without severely affecting the functionality of the Services. They include:

– Authentication and session management
– Security features and fraud prevention
– Load balancing and performance optimization
– Remembering your preferences and settings
– Enabling core features of the App

(b) Analytics and Performance:

These Tracking Technologies help us understand how users interact with the Services, identify technical issues, and improve performance. They collect information such as:

– Pages viewed and features used
– Time spent on different sections
– Navigation paths and user flows
– Error rates and crash reports
– Device and browser information
– App performance metrics

Third-Party Analytics Services:

We use Google Analytics and other analytics providers to collect and analyze usage data. These providers use cookies and similar technologies to collect information about your use of the Services and other websites/apps.

Google Analytics:

Google Analytics collects information such as how often users visit the App, what features they use, and what other sites they visited before coming to our App. We use this information to improve the Services and understand user behavior.

Google Analytics uses cookies and may collect your IP address, but Google does not associate your IP address with any other data held by Google. Google’s ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Use and Google Privacy Policy.

For more information about Google Analytics, visit: https://www.google.com/policies/privacy/partners/

To opt out of Google Analytics:
– Install the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
– Adjust your mobile device settings (see Section 10.5)

(c) Functionality and Personalization:

These Tracking Technologies enable enhanced functionality and personalization, such as:

– Remembering your language and region preferences
– Customizing content based on your usage patterns
– Providing personalized product recommendations
– Remembering items in your scan history
– Enabling social media features and integrations

(d) Advertising and Marketing (If Applicable):

Currently, we do not display third-party advertising within the Services. However, we may use Tracking Technologies for our own marketing purposes, such as:

– Measuring the effectiveness of marketing campaigns
– Retargeting users who have visited our Website or App
– Delivering personalized marketing messages
– Tracking conversions and attributions

If we implement third-party advertising in the future, we will update this Privacy Policy and provide you with appropriate notice and opt-out mechanisms.

10.4 Third-Party Tracking Technologies

Third-party service providers may use Tracking Technologies to collect information about your use of the Services and other websites or apps. We do not control these third-party Tracking Technologies or their data collection practices.

Third Parties That May Use Tracking Technologies:

(a) Supabase:

Our cloud infrastructure provider may use cookies and similar technologies for authentication, session management, and service delivery.

(b) RevenueCat:

Our payment processor may use cookies and device identifiers to manage subscriptions and prevent fraud.

(c) Apple and Google:

When you download the App from the Apple App Store or Google Play Store, or make in-app purchases, Apple and Google may use Tracking Technologies in accordance with their respective privacy policies.

– Apple Privacy Policy: https://www.apple.com/legal/privacy/
– Google Privacy Policy: https://policies.google.com/privacy

(d) Analytics Providers:

Google Analytics and other analytics providers use Tracking Technologies as described in Section 10.3(b).

10.5 Your Choices Regarding Tracking Technologies

You have several options to manage Tracking Technologies:

(a) Browser Settings:

Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies or alert you when cookies are being sent. However, disabling cookies may affect the functionality of the Services.

Browser-specific instructions:

– Google Chrome: Settings > Privacy and security > Cookies and other site data
– Safari: Preferences > Privacy > Manage Website Data
– Firefox: Options > Privacy & Security > Cookies and Site Data
– Microsoft Edge: Settings > Privacy, search, and services > Cookies and site data

(b) Mobile Device Settings:

iOS Devices (iPhone/iPad):

– Limit Ad Tracking:
– Go to Settings > Privacy & Security > Tracking
– Disable “Allow Apps to Request to Track”

– Reset Advertising Identifier:
– Go to Settings > Privacy & Security > Apple Advertising
– Tap “Reset Advertising Identifier”

– Disable Personalized Ads:
– Go to Settings > Privacy & Security > Apple Advertising
– Disable “Personalized Ads”

Android Devices:

– Opt Out of Ads Personalization:
– Go to Settings > Privacy > Ads
– Enable “Opt out of Ads Personalization”

– Reset Advertising ID:
– Go to Settings > Privacy > Ads
– Tap “Reset advertising ID”

– Delete Advertising ID:
– Go to Settings > Privacy > Ads
– Tap “Delete advertising ID”

(c) Industry Opt-Out Tools:

– Network Advertising Initiative (NAI): http://www.networkadvertising.org/choices/
– Digital Advertising Alliance (DAA): http://www.aboutads.info/choices/
– European Interactive Digital Advertising Alliance (EDAA): http://www.youronlinechoices.eu/

(d) Do Not Track (DNT) Signals:

Some web browsers have a “Do Not Track” (DNT) feature that signals to websites that you do not want to have your online activities tracked. Currently, there is no industry standard for how to respond to DNT signals, and we do not respond to DNT signals at this time. If a standard is established in the future, we will reassess our practices and update this Privacy Policy accordingly.

10.6 Consequences of Disabling Tracking Technologies

If you disable or block Tracking Technologies, certain features of the Services may not function properly, and you may experience:

– Inability to stay logged in
– Loss of saved preferences and settings
– Reduced functionality and personalization
– Difficulty accessing certain features
– Degraded user experience

10.7 Changes to Tracking Technologies

We may add, modify, or remove Tracking Technologies as needed to improve the Services, comply with legal requirements, or integrate new third-party services. Material changes to our use of Tracking Technologies will be disclosed through updates to this Privacy Policy.

—

11. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

11.1 Applicability

This section applies to California residents and describes rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA” or “California Privacy Law”).

11.2 Categories of Personal Information We Collect

In the preceding twelve (12) months, we have collected the following categories of personal information from California residents:

address, device identifiers, IP address, account username | ✅ YES |
| B. Personal Information (Cal. Civ. Code § 1798.80(e)) | Name, email address | ✅ YES |
| C. Protected Classifications | Age, date of birth (for age verification only) | ✅ YES |
| D. Commercial Information | Subscription history, purchase records, transaction data | ✅ YES |
| E. Biometric Information | N/A | ❌ NO |
| F. Internet/Network Activity | Browsing history, search history, usage data, device information | ✅ YES |
| G. Geolocation Data | Approximate location (inferred from IP address only; NOT precise GPS) | ✅ YES |
| H. Sensory Information | Barcode scan data (extracted barcode numbers, NOT photos or images) | ✅ YES |
| I. Professional/Employment Information | N/A | ❌ NO |
| J. Education Information | N/A | ❌ NO |
| K. Inferences | Preferences, dietary patterns, allergen profiles derived from usage | ✅ YES |
| L. Sensitive Personal Information | See Section 11.3 below | ✅ YES |

11.3 Sensitive Personal Information

Under the CCPA, certain types of personal information are classified as “Sensitive Personal Information” and subject to additional protections. We collect the following categories of Sensitive Personal Information:

(a) Account Login Credentials:

– Email address and password (encrypted)
– Purpose: Authentication and account access

(b) Precise Geolocation (If Enabled):

– Currently, we do NOT collect precise geolocation (GPS coordinates)
– If we implement location-based features in the future, we will obtain explicit consent and update this Policy

(c) Health Information:

– Your scan history, allergen profiles, and dietary preferences may reveal information about health conditions, dietary restrictions, or food allergies
– Purpose: Providing personalized allergen warnings, dietary recommendations, and product analysis

Use and Disclosure of Sensitive Personal Information:

We use and disclose Sensitive Personal Information only for the purposes disclosed in this Privacy Policy and as permitted by the CCPA, including:

– Performing services you requested (providing the Services)
– Security and fraud prevention
– Debugging and error correction
– Short-term, transient use
– Quality and safety verification
– Providing customer service
– Processing transactions

Right to Limit Use of Sensitive Personal Information:

You have the right to direct us to limit our use of your Sensitive Personal Information to only those uses necessary to perform the Services or as otherwise permitted by the CCPA. To exercise this right, contact us at contact@nutradetective.com.

11.4 Sources of Personal Information

We collect personal information from the following sources:

– Directly from you (account registration, app usage, communications)
– Automatically from your device (usage data, device information)
– Third-party databases (Open Food Facts, USDA, FDA)
– Payment processors (subscription and transaction information)
– Analytics providers (usage statistics and performance data)

11.5 Purposes for Collecting Personal Information

We collect and use personal information for the business and commercial purposes described in Section 3 of this Privacy Policy, including:

– Providing, maintaining, and improving the Services
– Personalizing your experience
– Processing transactions and subscriptions
– Communicating with you
– Security, fraud prevention, and legal compliance
– Analytics and research
– Marketing (with your consent)

11.6 Categories of Personal Information Disclosed

In the preceding twelve (12) months, we have disclosed the following categories of personal information for business purposes to the following categories of third parties:

Business Purposes for Disclosure:

We disclose personal information to third parties for the following business purposes:

– Cloud storage and infrastructure services (Supabase)
– Payment processing and subscription management (RevenueCat, Apple, Google)
– Analytics and performance monitoring (Google Analytics)
– Customer support and communications
– Security, fraud prevention, and legal compliance

11.7 Sale and Sharing of Personal Information

We do NOT sell your personal information to third parties for monetary or other valuable consideration.

We do NOT share your personal information with third parties for cross-context behavioral advertising.

In the preceding twelve (12) months, we have NOT sold or shared personal information as defined by the CCPA.

11.8 Retention of Personal Information

We retain personal information for as long as necessary to fulfill the purposes described in Section 7 (Data Retention) of this Privacy Policy, or as required by law. Retention periods vary depending on the type of information and purpose for which it is used.

11.9 Your California Privacy Rights

California residents have the following rights under the CCPA:

(a) Right to Know:

You have the right to request that we disclose:

– The categories of personal information we collected about you
– The categories of sources from which we collected personal information
– The business or commercial purposes for collecting, selling, or sharing personal information
– The categories of third parties to whom we disclosed personal information
– The specific pieces of personal information we collected about you

(b) Right to Delete:

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal compliance, fraud prevention, security).

(c) Right to Correct:

You have the right to request correction of inaccurate personal information we maintain about you.

(d) Right to Opt-Out of Sale/Sharing:

You have the right to opt out of the “sale” or “sharing” of your personal information. However, we do not sell or share your personal information, so this right does not currently apply.

(e) Right to Limit Use of Sensitive Personal Information:

You have the right to limit our use of Sensitive Personal Information to only those uses necessary to perform the Services or as permitted by law.

(f) Right to Non-Discrimination:

You have the right not to be discriminated against for exercising any of your CCPA rights. We will not:

– Deny you access to the Services
– Charge different prices or rates
– Provide a different level or quality of service
– Suggest that you will receive different pricing or service

Exception: We may charge different prices or provide different levels of service if the difference is reasonably related to the value provided by your personal information.

11.10 How to Exercise Your California Privacy Rights

To exercise your rights under the CCPA, you may submit a verifiable consumer request by:

(a) Email: contact@nutradetective.com
(b) Mail:

Nutra Detective LLC
Attn: Privacy Rights Request
9905 S Pennsylvania Ave, Suite A
Oklahoma City, OK 73159

(c) In-App: Navigate to Settings > Privacy > Submit Privacy Request

Information You Must Provide:

To process your request, you must provide:

– Your full name
– Email address associated with your account
– Specific right(s) you wish to exercise
– Sufficient information to verify your identity
– Description of the information you are requesting (for Right to Know requests)

Verification Process:

To protect your privacy, we must verify your identity before processing requests to know, delete, or correct personal information. We may:

– Send a verification email to your registered email address
– Request additional identifying information
– Ask you to log into your account
– For sensitive requests, require additional verification steps

We will respond to verified requests within forty-five (45) days of receipt, or notify you if we require an extension (up to an additional 45 days).

Authorized Agents:

You may designate an authorized agent to submit requests on your behalf. To do so, the agent must:

– Provide written authorization signed by you; OR
– Provide a valid power of attorney under California Probate Code sections 4000-4465; AND
– Verify their own identity and authority

We may require you to verify your identity directly with us and confirm you authorized the agent.

11.11 Notice of Financial Incentive

Currently, we do not offer financial incentives or price differences related to the collection, retention, or sale of personal information. If we offer such programs in the future, we will provide a separate Notice of Financial Incentive describing the material terms, how to opt-in, and how to withdraw.

11.12 California “Shine the Light” Law

California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes. If you have questions, contact us at contact@nutradetective.com.

11.13 Minors Under 16

We do not sell or share personal information of consumers we know to be under 16 years of age. As stated in Section 6, we do not knowingly collect information from children under 13, and users between 13 and 17 may only use the Services with parental consent.

—

12. OTHER U.S. STATE PRIVACY

RIGHTS

12.1 Virginia Consumer Data Protection Act (VCDPA)

If you are a Virginia resident, you have the following rights under the VCDPA:

(a) Right to Access: Confirm whether we are processing your personal data and access such data.

(b) Right to Correct: Correct inaccuracies in your personal data.

(c) Right to Delete: Delete personal data you provided to us.

(d) Right to Data Portability: Obtain a copy of your personal data in a portable and readily usable format.

(e) Right to Opt-Out: Opt out of:
– Targeted advertising (we do not currently engage in targeted advertising)
– Sale of personal data (we do not sell personal data)
– Profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling)

To exercise these rights, contact us at contact@nutradetective.com.

Appeals: If we decline your request, you have the right to appeal by contacting us at contact@nutradetective.com within a reasonable time period. We will respond to your appeal within sixty (60) days.

12.2 Colorado Privacy Act (CPA)

If you are a Colorado resident, you have rights similar to those described in Section 12.1 under the Colorado Privacy Act. To exercise these rights or submit an appeal, contact us at contact@nutradetective.com.

12.3 Connecticut Data Privacy Act (CTDPA)

If you are a Connecticut resident, you have rights similar to those described in Section 12.1 under the Connecticut Data Privacy Act. To exercise these rights or submit an appeal, contact us at contact@nutradetective.com.

12.4 Utah Consumer Privacy Act (UCPA)

If you are a Utah resident, you have the following rights under the UCPA:

(a) Right to Access: Confirm whether we are processing your personal data and access such data.

(b) Right to Delete: Delete personal data you provided to us.

(c) Right to Data Portability: Obtain a copy of your personal data.

(d) Right to Opt-Out: Opt out of:
– Targeted advertising (we do not currently engage in targeted advertising)
– Sale of personal data (we do not sell personal data)

To exercise these rights, contact us at contact@nutradetective.com.

12.5 Other States

Additional U.S. states may enact comprehensive privacy laws in the future. If you are a resident of a state with a privacy law not listed here, you may have similar rights. Contact us at contact@nutradetective.com to inquire about your rights.

—

13. CONTACT INFORMATION

13.1 How to Contact Us

If you have any questions, comments, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below:

Nutra Detective LLC

Mailing Address:
9905 S Pennsylvania Ave, Suite A
Oklahoma City, OK 73159
United States of America

Email Address:
contact@nutradetective.com

Privacy-Specific Inquiries:
contact@nutradetective.com

Data Protection Officer:
contact@nutradetective.com

California Privacy Rights Requests:
contact@nutradetective.com
Subject Line: “California Privacy Rights Request”

CCPA/CPRA Requests:
California residents may submit requests as described in Section 11.10.

General Inquiries:
For general questions about the Services, visit: https://nutradetective.com

13.2 Response Time

We will respond to your inquiries and requests within a reasonable time period, and no later than:

– CCPA Requests: 45 days (may extend up to 90 days total with notice)
– GDPR Requests: 30 days (may extend up to 60 days total with notice)
– Other Requests: 30 days under most circumstances

13.3 Complaints

If you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with a supervisory authority:

United States:

– Federal Trade Commission (FTC)
Website: https://www.ftc.gov/
Consumer Response Center
600 Pennsylvania Avenue, NW
Washington, DC 20580
Phone: 1-877-FTC-HELP (1-877-382-4357)

– State Attorney General
Contact your state’s Attorney General office. Find your state AG: https://www.naag.org/find-my-ag/

European Union (if applicable):

Contact your local Data Protection Authority. A list is available at:
https://edpb.europa.eu/about-edpb/board/members_en

California Residents:

You may also contact the California Attorney General’s Office:

California Department of Justice
Office of the Attorney General
1300 I Street
Sacramento, CA 95814
Phone: (916) 445-9555
Website: https://oag.ca.gov/contact

—

14. ACKNOWLEDGMENT AND CONSENT

14.1 Acceptance of Privacy Policy

By accessing, downloading, installing, or using the Services, you acknowledge that:

(a) You have read and understood this Privacy Policy in its entirety;

(b) You agree to the collection, use, disclosure, storage, transfer, and processing of your personal information as described in this Privacy Policy;

(d) You consent to the transfer of your information to the United States and other countries where we or our service providers operate, which may have different data protection laws than your country of residence;

(e) You understand that you have the right to withdraw consent or exercise other privacy rights as described in this Privacy Policy;

(f) If you are between 13 and 17 years of age, you have obtained parental or guardian consent to use the Services and your parent or guardian has read and agreed to this Privacy Policy;

(g) If you are a parent or guardian providing consent for a minor between 13 and 17, you accept full responsibility for the minor’s use of the Services and compliance with this Privacy Policy.

14.2 Affirmative Consent for Sensitive Data Processing

By using the Services, you provide affirmative consent for us to process Sensitive Personal Information (as defined in Section 11.3) for the purposes described in this Privacy Policy, including:

– Health-related information inferred from scan history and allergen profiles
– Account login credentials
– Dietary preferences and restrictions

You may withdraw this consent at any time by deleting your account or contacting us at contact@nutradetective.com, though withdrawal may limit or prevent your use of certain features.

14.3 Electronic Communications Consent

By creating an account and providing your email address, you consent to receive electronic communications from us, including:

– Transactional emails (account notifications, subscription renewals, security alerts)
– Service announcements and updates
– Policy changes and legal notices
– Customer support responses
– Marketing communications (you may opt out as described in Section 8.4)

You agree that all agreements, notices, disclosures, and other communications we provide electronically satisfy any legal requirement that such communications be in writing.

14.4 Agreement to Terms

This Privacy Policy is incorporated into and governed by our Terms of Service. By agreeing to the Terms of Service, you also agree to this Privacy Policy. In the event of a conflict between this Privacy Policy and the Terms of Service, this Privacy Policy shall control with respect to privacy matters.

14.5 Voluntary Provision of Information

You acknowledge that:

(a) Providing personal information to us is voluntary;

(b) You are not required to provide personal information, but failure to provide certain information may prevent you from accessing or using certain features of the Services;

(c) You have the right to request deletion of your information as described in Section 8.3, though such deletion may result in termination of your access to the Services;

(d) You are responsible for ensuring that all information you provide is accurate, current, and complete.

14.6 Children’s Privacy Acknowledgment

By using the Services, you represent and warrant that:

(a) You are at least 18 years of age, OR

(b) You are between 13 and 17 years of age and have obtained verifiable parental or guardian consent to use the Services, OR

(c) You are a parent or guardian providing consent for a minor between 13 and 17 years of age, and you accept full responsibility for the minor’s use of the Services.

If you are a parent or guardian and believe your child under 13 has provided us with personal information without your consent, contact us immediately at contact@nutradetective.com to request deletion.

14.7 Updates and Changes

You acknowledge that:

(a) We may update this Privacy Policy from time to time as described in Section 1.4;

(b) Continued use of the Services following notice of changes constitutes your acceptance of the updated Privacy Policy;

(d) If you do not agree with any changes, you must cease using the Services and may request account deletion.

14.8 No Waiver of Rights

Nothing in this Privacy Policy is intended to waive, limit, or restrict any rights you may have under applicable data protection laws, including the CCPA, GDPR, or other privacy laws. If any provision of this Privacy Policy conflicts with applicable law, that provision shall be interpreted to the extent possible in a manner consistent with applicable law, or if that is not possible, such provision shall be severed and the remainder of this Privacy Policy shall remain in full force and effect.

—

15. EFFECTIVE DATE AND VERSION HISTORY

Current Version: 1.0
Effective Date: [INSERT DATE]
Last Updated: [INSERT DATE]
Formation Date of Company: October 16, 2025

This Privacy Policy was prepared in accordance with applicable United States federal and state privacy laws, including but not limited to:

– Children’s Online Privacy

Protection Act (COPPA)
– California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)
– Virginia Consumer Data Protection Act (VCDPA)
– Colorado Privacy Act (CPA)
– Connecticut Data Privacy Act (CTDPA)
– Utah Consumer Privacy Act (UCPA)
– General Data Protection Regulation (GDPR) (EU)
– Other applicable data protection laws and regulations

Version History:

| Version | Date | Description of Changes |
|———|——|————————|
| 1.0 | [INSERT DATE] | Initial Privacy Policy effective upon launch of Services |

—

16. LEGAL DISCLAIMERS

16.1 No Legal Advice

This Privacy Policy is not intended to provide legal advice to users. It describes our data practices and your privacy rights. If you have legal questions about your privacy rights, you should consult with an attorney licensed to practice in your jurisdiction.

16.2 No Guarantee of Security

While we implement commercially reasonable security measures as described in Section 5, we cannot and do not guarantee absolute security of your information. No method of transmission over the Internet or electronic storage is 100% secure. You acknowledge and accept the inherent risks of providing information online.

16.3 Third-Party Practices

We are not responsible for the privacy practices, terms of service, or content of third-party websites, applications, databases, or services, even if linked to or accessible through the Services. Third-party privacy practices are governed by their own privacy policies.

16.4 Interpretation

This Privacy Policy shall be interpreted in accordance with the laws of the State of Oklahoma, United States, without regard to its conflict of law principles. In the event of any ambiguity or inconsistency, the interpretation most protective of user privacy rights shall prevail to the extent permitted by law.

16.5 Language

This Privacy Policy is drafted in English. To the extent any translated version conflicts with the English version, the English version shall control.

—

END OF PRIVACY POLICY

—

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY.

—

Document Prepared: January 2025
Legal Jurisdiction: Oklahoma, United States
Applicable Laws: COPPA, CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, GDPR
Company Formation Date: October 16, 2025

—

For questions about this Privacy Policy, contact:
contact@nutradetective.com

Physical Address:
Nutra Detective LLC
9905 S Pennsylvania Ave, Suite A
Oklahoma City, OK 73159
United States of America

—

Last Updated: November 3^rd, 2025
Effective Date: November 3^rd, 2025
Version: 1.0