Privacy Policy
How we collect, use, and protect your information
How we collect, use, and protect your information
SpillScam ("we," "our," or "us") is a product compliance scanner app that helps you understand whether food, cosmetic, and household products meet safety regulations across 7 global markets: the European Union, United States, India, China, Australia, United Kingdom, and Canada.
This Privacy Policy explains what information we collect when you use the SpillScam mobile application on iOS and Android, how we use it, and the choices you have.
SpillScam is operated by KheniTech, a sole proprietorship of Dharmesh Tulshibhai Kheni (GSTIN 24CAFPK6077E1ZR, Udyam UDYAM-GJ-22-0445790), 3rd Floor, Plot 15, Sangana Row House, P-1, Shyam Dham Chowk, Punagam, Surat, Gujarat 395006, India, the data controller for the personal data described here. Contact: contact@khenitech.com.
When you sign in with Google or Apple, we receive and store the following:
| Data | Source | Purpose |
|---|---|---|
| Email address | Google / Apple | Account identification |
| Display name | Google / Apple | Personalisation |
| Profile photo URL | Google / Apple | Profile display |
| User ID (UID) | Firebase Auth | Linking your data |
Every product you scan is recorded in your private scan history (visible only to you):
Products you save to your shopping list are stored privately and include the same fields as your scan history plus the category.
Your personalisation choices are stored locally on your device and optionally synced to the cloud if you are signed in:
When you scan a product, the product's details (name, brand, ingredients, barcode, compliance analysis) are saved to a shared global database that all SpillScam users benefit from. This product data is not linked to your identity in the shared database.
If you submit a mismatch report or flag incorrect information, your user ID is recorded alongside the report to prevent abuse.
When you upvote or downvote a compliance result, your vote is stored linked to your user ID and the product. Votes are used to surface inaccurate results for admin review.
To understand how the app is used and to fix problems, we collect:
We do not collect your device's advertising identifier (IDFA on iOS, Advertising ID on Android).
To keep AI features free and prevent abuse, our server counts how many AI requests are made each day — per account if you are signed in, or per pseudonymised IP address if you are not. The IP address is never stored: we store only a salted one-way hash of it. These daily counters are deleted automatically after about two days.
| Permission | Why We Need It |
|---|---|
| Camera | Scanning product barcodes and photographing labels for AI analysis |
| Photo Library (Read) | Selecting existing product images from your library for analysis |
| Photo Library (Write) | Saving scanned product images if you choose to |
| Permission | Why We Need It |
|---|---|
| CAMERA | Barcode scanning and label photo capture |
| INTERNET | Fetching product data, AI analysis, Firebase sync |
| READ_MEDIA_IMAGES (Android 13+) | Selecting photos from your library |
| READ_EXTERNAL_STORAGE (Android ≤12) | Selecting photos from your library (legacy) |
| VIBRATE | Haptic feedback when a barcode is detected |
When you use the barcode scanner, the camera feed is processed entirely on your device to detect the barcode. No video or images are recorded or uploaded during barcode scanning — only the detected barcode string (e.g. "0885446128994") is sent to our servers for product lookup.
If a product cannot be found in any database, you can photograph its label for AI analysis:
You can choose to use your phone's camera or select an existing photo from your library. Submitting a photo is always optional.
SpillScam relies on the following third-party services. Each has its own privacy policy.
We use Firebase Authentication, Firestore (database), Storage, Cloud Functions, Analytics and Crashlytics. All data is processed and stored on Google infrastructure. Firebase Privacy Policy
Used for account creation. We receive your name, email, and profile photo. Google's sign-in library may also collect device and usage information, such as an app-specific device identifier and approximate location derived from your IP address, to run and secure the sign-in service. Google Privacy Policy
Used for account creation on iOS. Apple may provide a private relay email. Apple Privacy Policy
Product compliance analysis and ingredient explanations. Our server sends product information (name, brand, ingredients, barcode) and, only if you choose to submit one, a product label photo to Google's Gemini models through Google Cloud Vertex AI. No account details are sent. Nothing is sent until you allow it: the app asks before the first AI analysis, and you can turn "AI data sharing" off or on at any time on the Scan screen or in Profile. With it off, products already in SpillScam's database still show their results. Google Cloud Privacy Notice
Product lookup via web search. When a product is not found in the public databases below, Gemini searches the web with Google Search to identify it. Only the product barcode is sent as the search query. Google Privacy Policy
App install measurement for our advertising on Facebook and Instagram. The Meta SDK sends app install and app launch events with device and app information (such as device model, OS version, IP address and an app-specific device identifier generated by the SDK) to Meta. Advertising-identifier collection is turned off, and on iOS the app does not request tracking permission, so Meta cannot use your device's advertising identifier or track you across other companies' apps and websites. We do not show ads in the app and do not send your account details, scans or product data to Meta. Meta Privacy Policy
We use Slack, a workplace messaging service, to alert our own team about events that need attention. Alerts contain your user ID when an account is created, the sign-in method (Google or Apple) when an account is created or deleted, and, when you report a wrong result, the product, the issue you chose and the note you wrote. We never send your name, email address, photos or scan history to Slack. Alerts are seen only by the SpillScam team. Slack Privacy Policy
| Service | Data Sent | Purpose |
|---|---|---|
| Open Food Facts | Barcode number | Food product lookup |
| Open Beauty Facts | Barcode number | Cosmetics product lookup |
| Open Products Facts | Barcode number | General product lookup |
| USDA FoodData Central | Barcode number | US branded food lookup |
| UPC Item DB | Barcode number | General barcode lookup |
All public database lookups send only the barcode number — no personal information is transmitted.
Your data is stored in the following locations:
All communication between the app and our servers uses HTTPS (TLS) encryption. Our servers access the AI services with Google Cloud service credentials; no AI access keys are included in the app.
We do not store payment information. SpillScam is a free app with no in-app purchases.
We share data only in the following limited circumstances:
| Data Type | Retention Period |
|---|---|
| Account profile (email, name, photo) | Until you delete your account |
| Scan history | Until you delete your account |
| Shopping list | Until you delete your account or remove items |
| Preferences (market, allergens) | Until you delete your account or clear them |
| Device cache (localStorage) | Until you sign out or clear app data |
| Label photos you submit for analysis | Not stored — used for the analysis request only |
| Global product database | Indefinitely (community resource) |
| Compliance analysis results | Indefinitely (community resource) |
| Mismatch reports | Indefinitely (admin review integrity) |
When you delete your account, all personal data (profile, scan history, shopping list) is permanently deleted. Global product and compliance data you contributed to the shared database is retained for community benefit but is not linked to your identity after deletion.
Depending on your location, you may have the following rights regarding your personal data:
EU/UK users (GDPR): You have all the rights above. Our legal basis for processing is legitimate interest (product safety information) and consent (account creation).
California users (CCPA): You have the right to know what data we collect, to delete it, and to opt out of sale (we do not sell data).
To exercise any of these rights, contact us at the email address below.
You can delete your account at any time directly within the app:
Can't use the app? Follow the steps at spillscan-94412.web.app/delete-account to request deletion by email. For help, see Support.
Upon deletion, we permanently remove:
Issue reports you filed are kept for moderation with your account ID and email address removed.
SpillScam is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child under 13 has created an account, please contact us immediately at contact@khenitech.com and we will delete the account and associated data promptly.
For users in the European Union, the minimum age is 16 unless local law specifies otherwise.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes, we may also notify you within the app.
Your continued use of SpillScam after any changes constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests about this Privacy Policy or your personal data, please reach out to us.
contact@khenitech.comKheniTech, a sole proprietorship of Dharmesh Tulshibhai Kheni (GSTIN 24CAFPK6077E1ZR, Udyam UDYAM-GJ-22-0445790), 3rd Floor, Plot 15, Sangana Row House, P-1, Shyam Dham Chowk, Punagam, Surat, Gujarat 395006, India.