Privacy Policy

Last updated: May 31, 2026

Digestoa is built to be honest — and that includes how we handle your data. We collect the minimum we need to make the app work, we don't sell it, and you can delete it at any time.

Who we are

Digestoa (“Digestoa”, “we”, “us”) operates the Digestoa mobile app and this website at digestoa.com. If you have any question about your privacy or want to exercise your rights, email us at [email protected].

What we collect

• Account details. When you create an account we store your email address, an optional name, and a securely hashed password — we never store your password in readable form. You can also continue as a guest, in which case no account is created.
• Your activity in the app. The products you scan, your saved items, your “how it made me feel” check-ins, and your dietary and allergen preferences — so the app can show your history, your trends, and personalized alerts.
• Subscription status. If you subscribe to Digestoa+, our payments partner (RevenueCat, working with the Apple App Store or Google Play) tells us whether your subscription is active. Your card details are handled by the app store, never by us.
• Technical data. Basic device and diagnostic information needed to run, secure and debug the service, such as app version, device type and crash logs.

How we use it

We use your data to provide and improve the app (scores, verdicts, exposure insights and trends), to operate your account and subscription, to respond to your support requests, and to keep the service secure and working. We process this data to perform the service you asked for, to meet our legal obligations, and — where required — on the basis of your consent, which you can withdraw at any time.

What we don't do

We don't sell your personal data. We don't share it with advertisers, and we don't use it to build advertising profiles of you.

Third parties we rely on

We use a small number of service providers strictly to run Digestoa — for example Open Food Facts for product data, our hosting and infrastructure provider, and RevenueCat for subscription management. They only process data as needed to provide their service to us, under agreements that require them to protect it. Some of these providers may process data outside your country; where they do, we rely on appropriate safeguards for the transfer.

Data retention

We keep your data for as long as your account is active or as needed to provide the service. When you delete your account we delete or anonymize your personal data, except where we're required to keep certain records (for example for tax or to resolve disputes).

Your rights

You can request access to, correction of, a copy of, or deletion of your personal data, and you can object to or restrict certain processing. Depending on where you live (for example under the GDPR or CCPA), you may have additional rights, including the right to lodge a complaint with your local data-protection authority. To exercise any of these, email [email protected] and we'll respond within the time the law requires.

Deleting your account and data

You can delete your account at any time from Settings → Account in the app, which removes your account and associated personal data. You can also email [email protected] with the subject “Delete my account” and we'll take care of it. If you used the app as a guest, your data lives only on your device — uninstalling the app removes it.

Security

We use reasonable technical and organizational measures to protect your data, including hashed passwords and encrypted transport (HTTPS). No method of storage or transmission is ever completely secure, but we work continuously to keep your information safe.

Children

Digestoa is not directed to children under 16, and we don't knowingly collect personal data from them. If you believe a child has provided us data, contact us and we'll delete it.

Changes

We may update this policy from time to time. When we do, we'll post the new version on this page and update the “last updated” date above. Significant changes will be communicated in the app.

Contact

Questions about your privacy? Email [email protected].