Privacy Policy

Minzo LLC ('Minzo', 'we', 'us', 'our') operates the Minzo mobile app and is the data controller for the personal data processed through it.

This Privacy Policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have.

It applies to the Minzo app on iOS and Android and to the services behind it.

Please read it together with our Terms and Conditions.

Last updated: October 5, 2026.

Questions? Contact us at info@minzoapp.com.

Account data: your email address, name, date of birth, country and preferred language, and, if you choose to add them, a profile photo, gender, phone number and city. If you sign in with Google or Apple, we receive your name and email address from them.

Product activity: the products you scan (scan history), your favorites, your baskets (including confirmed baskets used for the Health tab) and the quantities you enter.

Alert settings and preferences: the alerts you turn on, such as allergens you avoid, palm oil, additive risk level, processing level, and Health Score or Nutri-Score goals. Allergen and dietary choices can say something about your health; we use them only to personalise the app for you.

Family account: if you create or join a family, we store the family name and its members. For family members you add without their own account (for example children), we store only the name or nickname, picture, child setting and alert settings you enter — such as allergies — after you confirm that you are their parent or guardian or that they agreed. Members of a family see each other's names, profile photos and alert settings; scans, baskets and favorites are never shared. We also store family invites (a one-time code, valid for 7 days).

Minzo AI: the questions you ask the chat and the AI insights generated for you. Your chat history is stored only on your device and is deleted when you sign out; on our servers we only keep a daily count of your AI requests to apply plan limits.

Subscription data: your plan and subscription status, received from Apple through our subscription provider RevenueCat. We never receive your card or payment details.

Notifications: if you allow notifications, your device push token, time zone and notification preferences.

Contributions and support: product photos you contribute (front and back of the package), and the messages and email address you send through the in-app support form.

We do NOT collect your location, contacts, photos (other than the ones you choose to contribute) or camera images — the camera is used only to read barcodes on your device. We do not use advertising, tracking or analytics SDKs.

Contract: to create your account and provide the app — scanning, scores, history, favorites, baskets, the Health tab, subscriptions and support.

Consent: for your alert settings (including allergens and dietary preferences), for using them to personalise Minzo AI answers and insights, and for push notifications. You can change or turn these off at any time in the app; this does not affect processing that took place before.

Legitimate interests: to keep the service secure, prevent abuse (for example daily limits on AI features) and improve our product database.

Legal obligations: where we must keep or disclose data under applicable law.

An account is required to use Minzo.

To provide the app: identify scanned products, show nutrition information, Nutri-Score, Health Score, processing level and additive information, and keep your history, favorites and baskets in sync across your devices.

To personalise the app: warn you about products that trip your alerts, rank healthier alternatives, and tailor Minzo AI chat answers and insights to your alert settings.

To check products for the members of your family against their alert settings, and to notify the family owner when someone joins.

To show content for your country and language, such as food safety news and the language of product summaries.

To send the notifications you allowed, such as your daily insight or food safety alerts.

To manage your subscription and apply the limits of your plan.

To answer your support requests and review product contributions.

We never sell your data and never use it for advertising.

We do NOT sell, rent or trade your personal data.

Supabase: hosts our database, authentication, file storage and server functions. Your account and app data are stored there.

Google Gemini (AI): when you use Minzo AI (the chat and AI insights), your question, the product or basket data, and your saved alert settings (for example allergens or palm oil you avoid) are sent to Google's Gemini API to generate the answer. The chat may also use your first name. Your email and other account details are not sent.

Google Gemini (product search and images): when a scanned product is not in our database, its barcode and name are used to search the web and to prepare a product image. No personal data is included. The resulting product information is added to our shared product database without any link to you.

Apple and Google: for Sign in with Apple and Google sign-in, if you use them, and Apple for in-app purchases.

RevenueCat: processes your subscription status on our behalf. It receives an app user ID and purchase information from Apple, not your payment details.

Expo (and Apple/Google push services): deliver push notifications to your device using your push token.

Open Food Facts: we use their open product database as a data source; your scans are not shared with them.

Legal reasons: we may disclose data if required by law or to protect the rights and safety of users and of Minzo. If Minzo is merged or acquired, your data may be transferred under the same protections, and we will inform you.

All data between the app and our servers is encrypted in transit (TLS).

Access to data is restricted by database security rules, so each user can only access their own data.

Passwords are handled by our authentication provider and are never stored in plain text.

AI and payment providers receive only the data described in this policy.

Some data is also cached on your device for speed and offline use; it is removed when you sign out.

No system is 100% secure. Please use a strong, unique password and keep your device protected.

We keep your account data for as long as your account exists.

When you delete your account in the app, your account and the personal data linked to it are deleted: profile, history, favorites, baskets, alert settings, insights, notification data, support messages, product contributions (including their photos) and your customer record at our subscription provider RevenueCat.

Family data: a family profile is deleted when the owner removes it, deletes the family or deletes their account. When you leave a family or delete your account, your membership is removed; your own data stays with your account.

Chat history is stored only on your device and is deleted when you sign out.

Product information in our shared product database (for example a product found by web search) is not personal data and is kept.

Support messages are kept while your account exists, as long as needed to handle your request. An App Store subscription is managed by Apple and is not cancelled by deleting your account — cancel it in your Apple ID settings.

We may keep certain data longer if the law requires it or to resolve disputes.

Access: ask for a copy of the personal data we hold about you.

Rectification: correct inaccurate data — most of it you can edit directly in the app.

Erasure: delete your account and data in the app at any time, or ask us to do it.

Portability: receive your data in a structured, machine-readable format.

Restriction and objection: ask us to limit processing, or object to processing based on our legitimate interests.

Withdraw consent: turn off alerts, personalisation or notifications in the app at any time.

To exercise your rights, email info@minzoapp.com.

You can also lodge a complaint with your data protection authority — in Poland, the President of the Personal Data Protection Office (UODO).

Minzo is intended for users aged 16 and over.

Children cannot create an account. A parent or guardian can add a child as a family profile in a family account; we then store only the name or nickname, picture, child setting and alert settings the parent enters, and the parent can change or delete the profile at any time.

If you are under 16, please do not create an account.

If you believe a child under 16 has given us personal data, contact us at info@minzoapp.com.

We will delete such data.

Minzo LLC is based in Baku, Azerbaijan.

Our service providers (such as Supabase, Google, Apple, RevenueCat and Expo) may process data in the United States and other countries.

Where data from the EEA is transferred outside it, we rely on the safeguards offered by these providers, such as the EU Standard Contractual Clauses or an adequacy decision.

You can contact us for more information about these safeguards.

Minzo does not use cookies, advertising identifiers or tracking across other apps and websites.

We do not use third-party analytics or advertising SDKs.

We do not show ads.

Data stored on your device (caches, chat history) stays on your device and is removed when you sign out.

We may update this Privacy Policy when the app or the law changes.

We will inform you in the app about important changes.

The 'Last updated' date above shows when it was last revised.

If you continue to use Minzo after an update, the updated policy applies.

Data controller: Minzo LLC

Address: Baku, Azerbaijan,

Email: info@minzoapp.com

For privacy requests, write to the same address with the subject 'Privacy'.

We will answer within the time limits set by applicable data protection law.

You also have the right to complain to your local data protection authority.