Last updated: August 25, 2026
The short version. DirektLabel has no accounts and no sign-up. When you scan a label, the photo is sent to our server and passed to Google's Gemini AI to read the ingredients; we don't keep the photo. Your scan history, settings, and ingredient alerts stay on your phone — we can't see them. We don't run any analytics SDK, we don't know your name or email unless you write to us, and we don't sell data. Free users see ads from Google AdMob.
This policy explains how DirektLabel ("we," "our," "us") handles information in the DirektLabel mobile app (the "App") for iOS and Android. By using the App you agree to the practices described here.
This section describes the technical flow, because it determines everything else in this policy.
The App keeps a short-lived cache on your device that maps an image to its result, so re-scanning the same photo does not make another network request. That cache is local to your device.
Processed as described in Section 1, for the sole purpose of returning your analysis. Not stored by us and not associated with any identity beyond the anonymous identifier described below.
The App signs in anonymously to our backend on first launch. This creates a random identifier that is not connected to your name, email address, phone number, Apple Account, or Google account. We use it for one purpose: counting how many scans and comparisons an installation has performed on a given day, so the free-tier daily limit can be enforced. We store, per identifier: the date, the action type, and a count.
To prevent abuse of our API, the App may ask the operating system to vouch that it is a genuine, unmodified copy — Apple's App Attest / DeviceCheck on iOS, Google's Play Integrity on Android. Our backend stores the resulting attestation key reference and, where verification fails, a short reason code. These signals identify the app installation, not you.
If you subscribe to DirektLabel Pro, the purchase is made and validated through the App Store (iOS) or Google Play (Android). We receive whether an entitlement is active. We never receive or store your card details, billing address, or store account credentials.
Google AdMob serves ads in the free version and may access your device's advertising identifier and approximate location derived from IP address. See Section 5.
If you email us, we receive your email address and whatever you choose to include, and keep it for as long as needed to resolve your issue.
The following are stored locally on your phone and are not uploaded to us:
Because this data never reaches us, we cannot retrieve it, back it up, or restore it. Uninstalling the App deletes it.
To be explicit, DirektLabel does not:
Supabase, Inc. hosts our backend — the Edge Function that relays scans and the database holding anonymous usage counts and attestation records. Supabase acts as our processor. See the Supabase Privacy Policy.
Label images are sent to Google's Gemini API to extract and identify ingredients. This is the paid Gemini API accessed with our own key from our server; your device never contacts Google directly for this. Google's handling is governed by the Gemini API Additional Terms of Service and the Google Privacy Policy.
Subscriptions are sold and processed by Apple or Google depending on your platform. Their respective privacy policies apply to the payment itself.
Used for the anti-abuse checks described in Section 2.3.
Serves advertising to free users. AdMob may collect and use data for ad delivery, frequency capping, and measurement. See how Google uses information from sites or apps that use its services.
The free version displays ads from Google AdMob. These may be personalised using your device's advertising identifier, coarse location derived from IP address, and your activity in the App.
On iOS, the App asks for permission through Apple's App Tracking Transparency prompt before any tracking identifier is used. If you decline, ads are served without it. You can change this later under Settings → Privacy & Security → Tracking.
On Android, you can reset or delete your advertising ID under Settings → Google → Ads.
DirektLabel Pro removes all advertising.
All traffic between the App and our backend uses TLS. Our API key for the AI provider is held only on the server and never ships inside the App. The database tables holding usage and attestation data are locked down with row-level security and are reachable only by our backend service role. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
DirektLabel is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at support@direktlabel.app and we will delete it.
Our backend and the AI provider operate infrastructure in multiple countries, including the United States. When you scan a label, the image and extracted text may be processed outside your country of residence. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for these transfers.
We may update this policy. Material changes will be reflected here with a revised "Last updated" date. Continued use of the App after a change constitutes acceptance of the revised policy.
Questions about this policy or our data practices: support@direktlabel.app
If you are a resident of California or another US state with a comprehensive privacy law, you may have the right to know what personal information is collected, to request deletion or correction, to opt out of sale or sharing, and not to be discriminated against for exercising these rights.
We do not sell personal information and do not share it for cross-context behavioural advertising as those terms are defined by the California Consumer Privacy Act. To exercise any right, email support@direktlabel.app. Note the practical limit described in Section 9: with no account, we may be unable to associate a request with a specific individual.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights of access, rectification, erasure, restriction, objection, and data portability, and the right to lodge a complaint with your supervisory authority.
Our legal bases for processing are:
To exercise these rights, email support@direktlabel.app, keeping in mind the identification limit noted in Section 9.