Legal

Privacy Policy

Effective and last updated: September 4, 2026

This policy explains how LabelKin, operated by Xiaoyue Labs as an independent developer (“LabelKin”, “we”, “us”), handles information when you use the LabelKin mobile application, website, and related services.

Information stored on your device

Household profile names, custom rules, extracted OCR text, scan results, settings, usage counters, and optional local image references are stored in the app’s device sandbox. You can export or delete this local data from Settings. Package images and profile photos are not uploaded for ingredient analysis.

Cloud analysis

Cloud analysis is optional. When enabled, LabelKin sends extracted ingredient text, enabled rule terms and notes, priorities, locale, selected data region, and a pseudonymous scan identifier. Global-region requests are processed with Google Gemini; Mainland China-region requests are processed with DeepSeek. LabelKin does not automatically send a request to the other region if the selected provider is unavailable.

The LabelKin service does not store ingredient text, rule text, or the AI response in its application database. Providers may process request content under their own service terms and retention controls. Avoid entering unrelated sensitive information in ingredient rules.

Purchases and service entitlement

Apple processes payment details. RevenueCat helps verify purchases and subscription status. We receive product identifiers, transaction and entitlement status, expiration or refund events, and a pseudonymous app installation identifier. We do not receive full card numbers or your Apple password.

Diagnostics, security, and quota data

A random installation identifier is transformed into an irreversible server-side hash for plan limits, entitlement synchronization, abuse prevention, and service reliability. Firebase App Check may provide device and app integrity signals. Server logs contain request IDs, timing, coarse error categories, selected service region, model identifiers, and usage totals; they exclude package images, ingredient text, household names, and custom rule words.

Anonymous product diagnostics are off by default and require opt-in. If enabled, an allowlist records coarse events such as screen name, scan source, duration buckets, provider, subscription product identifier, and success or fallback state. Diagnostic events are normally deleted after 90 days. Turning diagnostics off clears queued events on the device.

Why we process information

We process information to perform requested label analysis, show exact rule matches, maintain plan limits and subscriptions, restore purchases, prevent abuse, secure the service, troubleshoot errors, answer support requests, and comply with legal obligations.

Service providers and international transfers

We use Amazon Web Services for hosting, Google Gemini and DeepSeek for region-selected AI analysis, Firebase App Check for app integrity, RevenueCat for subscription entitlement management, and Apple for distribution and payment. These providers may process data in countries different from yours. We limit information to what is needed for each function and do not sell personal information.

Retention

Ingredient-analysis content is handled transiently by the LabelKin API and is not written to its application database. Pseudonymous quota, transaction, fraud-prevention, and entitlement records are retained as needed to operate the service, resolve disputes, and meet legal obligations. Opt-in diagnostics are normally retained for 90 days. Operational logs and encrypted backups expire under security and backup rotation schedules.

Your choices and rights

You can disable cloud analysis or diagnostics, export local data, delete all local LabelKin data, and manage subscriptions in your Apple account. Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection for information we control by contacting us.

Children

LabelKin is designed for adult household decision-makers and is not directed to children under 13, or the higher minimum age required by local law. Household profiles do not require a child’s account or contact details.

Safety and health information

Custom dietary or allergy rules may reveal health-related preferences. LabelKin keeps these rules on the device unless you request cloud analysis, and does not use them for advertising. LabelKin is not a medical device and cannot certify that a product is safe.

Security

We use encrypted transport, app attestation, restricted server access, pseudonymous identifiers, request-size limits, rate limits, monitoring, and data minimization. No system can guarantee absolute security.

Contact

Privacy and data requests: support@xiaoyuelabs.com. Website: xiaoyuelabs.com/labelkin.