Privacy Policy

This Privacy Policy explains how Scout ("Scout," "the App," "we," "us," or "our") collects, uses, discloses, and protects information when you use our mobile application and related services (collectively, the "Service"). Scout is a toolkit for people living with Alpha-gal Syndrome (AGS) that helps identify possible mammal-derived ingredients in food and non-food products.

By downloading, accessing, or using Scout, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect the information necessary to set it up and secure it, such as:

• Email address and password (if you register directly), or
• Basic profile information provided by Google or Apple if you sign in using "Sign in with Google" or "Sign in with Apple" (such as your name, email address, and a unique identifier).

1.2 Health & Sensitivity Information

Scout is built around your individual alpha-gal sensitivity, so we collect health-related information that you choose to provide, including:

• Your sensitivity profile and reaction severity settings (e.g., mild to super-reactor)
• Foods and products you have tried and logged, along with your notes on how you reacted
• Your scan history

This is sensitive health information. We treat it with additional care as described in Section 5 below. You control what you put into your reaction log, and you may edit or delete this information at any time in the App.

1.3 Camera, Photos & Scans

Scout uses your device's camera to scan ingredient labels, product barcodes, and restaurant menus. Captured images are processed to extract text and identify ingredients (see Section 4 regarding our OCR/scanning service provider). We do not use scanned images for any purpose other than providing the scanning, ingredient-analysis, and swap-suggestion features, and improving the accuracy of that functionality.

1.4 Usage & Device Information

We automatically collect certain technical information when you use Scout, including device type and operating system, app version, crash logs and diagnostic data, and general usage/interaction data (e.g., which features you use). This information is collected via analytics and crash-reporting tools described in Section 4.

1.5 Subscription & Payment Information

If you purchase a subscription, your payment is processed entirely by Apple's App Store or Google Play. We do not receive or store your full payment card details. We may receive limited, non-financial information from Apple/Google confirming your subscription status (e.g., active, expired, trial) so we can unlock the correct features in the App.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and personalize the App's core features (scanning, menu decoding, swap suggestions, reaction tracking)
• Create and maintain your account
• Process subscription purchases and manage entitlements
• Improve the accuracy of our ingredient-detection and OCR systems
• Diagnose technical problems and improve app stability and performance
• Communicate with you about your account, the Service, or support requests you send to us
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information, and we do not use your health or sensitivity information for advertising or marketing purposes.

3. How We Share Your Information

We do not sell your data. We share information only in the following limited circumstances:

• Service Providers: With vendors who perform services on our behalf, such as cloud hosting, OCR/image-scanning processing, analytics, and crash reporting (see Section 4 for categories of providers). These providers are contractually restricted to using your information only to provide services to us.
• Platform Providers: With Apple and Google to the extent necessary to operate sign-in, cloud backup (if applicable), and subscription billing.
• Legal Requirements: If required to do so by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Scout, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With Your Consent: For any other purpose disclosed to you at the time you provide the information, or with your consent.

3.1 Categories of Third-Party Service Providers

Scout currently uses third-party providers in the following categories:

• Cloud-based OCR / image-recognition services, to read and interpret ingredient labels and menus you photograph
• Analytics services, to help us understand feature usage and improve the App
• Crash reporting / diagnostics services, to identify and fix technical issues
• Authentication providers (Google, Apple), if you choose social sign-in
• App store billing platforms (Apple App Store, Google Play), to process subscription payments

We will update this list as our vendors change. If you'd like the current names of specific sub-processors, you can contact us at the email below.

4. Sensitive Health Data - Additional Disclosures

Because Scout collects information about your health condition (Alpha-gal Syndrome) and your reactions to specific products, certain U.S. state laws give you extra protections and rights, including laws such as the Washington My Health My Data Act, the California Consumer Privacy Act (as amended by the CPRA), and other applicable state consumer health data laws. Consistent with these laws, we commit to the following:

• We collect health-related information only with your knowledge, because you choose to enter it into your profile or reaction log.
• We do not sell your health information.
• We do not use geofencing around healthcare facilities to collect information, send notifications, or target advertising, and we do not target advertising based on your health information.
• We limit access to health information to employees, contractors, and service providers who need it to operate the App, and require them to protect it.
• You may withdraw consent to our collection of health data and request deletion of your account and associated health data at any time (see Section 6).

5. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate information
• Deletion: Request that we delete your account and associated data
• Portability: Request your data in a portable format
• Withdraw Consent: Withdraw consent for optional data collection, which may limit certain features
• Opt-out of "sale" or "sharing": We do not sell or share personal information for cross-context behavioral advertising, so no opt-out is required for that purpose

You can exercise most of these rights directly within the App (Settings > Account/Privacy), including deleting your account, which removes your profile, reaction log, and scan history from our active systems. You may also submit a request by emailing us at the address in Section 12. We will verify your request and respond within the time required by applicable law.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may also have rights under the GDPR or UK GDPR, and you may lodge a complaint with your local data protection authority.

6. Data Retention

We retain your account and health-related information for as long as your account is active, or as needed to provide the Service. If you delete your account, we will delete or de-identify your personal information within a reasonable period, except where we are required to retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Scout is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the applicable minimum age in your jurisdiction) without parental consent. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. International Users & Data Transfers

Scout is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate, which may have different data protection laws than your home jurisdiction.

10. Third-Party Links and Services

The App may reference or link to third-party products, restaurants, or resources. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy policies separately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means, and update the "Effective Date" above. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your information, please contact us:

Email: scout@thealphagalapp.com

13. Medical Disclaimer

Scout is an educational tool only. It is not a substitute for professional medical advice, diagnosis, or treatment. Always verify ingredients on product packaging yourself and consult your healthcare provider regarding your condition, diet, and any suspected reactions. Do not disregard professional medical advice or delay seeking it because of information provided by the App.