Privacy

Updated 27 September 2026.

In this policy, “Stickler”, “we” and “us” mean the people who run the Stickler app and this website.

There is no sign-up account. The names or nicknames you enter for profiles are kept on your device.

What stays on your device#

Profile names, ages, allergy choices, food rules, shopping lists and fuel diary entries are stored on your device. Scoring runs there. The app does not upload those profiles, your personal scores or per-rule verdicts.

Your saved scan history stays on your device. Looking up a product still sends its barcode to the service; searching sends the search text. Those requests are needed to return the data you asked for.

Taking a photo does not upload it. Choosing Upload and read, after agreeing to the photo disclosure, does.

What is sent to the service#

• Product lookups and searches send the barcode or search text needed to find a record.
• Lookup events retain the barcode, time, result source or failure, and response duration to measure catalogue coverage and service performance. These database events do not include a profile, contributor identifier or personal score.
• Uploads send the label photos and their panel type. The service stores the photos and sends them to Anthropic for text extraction.
• Corrections, product reports and photo reports send the text you enter and the relevant product or photo reference. Do not include personal or medical information in free-text submissions.
• A random installation identifier and a private contribution credential associate submitted content with the installation that sent it. The app creates them the first time you open a product, because the plain-English summary it requests is limited per installation, and sends the credential with those requests and with anything you contribute. They enable ownership checks, rate limits, blocking and removal requests. They are not derived from your name, advertising identifier or profile details. Submitted records linked to that identifier are not anonymous.
• Hosting services process network information such as IP addresses and request/error logs to operate and protect the service. Requests may be rate limited.

New per-person scan telemetry has been removed. Existing field-test scan records are subject to the retention process below.

Photo reading and publication#

Anthropic reads the photos you choose to upload. The app asks for your agreement before that transfer. The result may be incomplete or wrong; it is a reading of the supplied image.

Your provisional reading is returned to you. Shared catalogue changes and photo publication require review. Label text approved for publication becomes product information that other people can retrieve.

Service providers#

• Anthropic processes uploaded photos for label extraction and may generate explanations from product label data. Profile details and allergy rules are not sent for those explanations.
• Cloudflare R2 stores uploaded photos.
• Neon stores catalogue records and submissions.
• Vercel hosts the API and public pages. The API is configured for Sydney; providers may process operational data in other locations.

We do not sell personal data or share it with advertisers, brands or data brokers. There are no adverts, advertising identifiers or tracking SDKs in the app.

Retention and removal#

Published factual label information is kept as part of the catalogue. Photos supporting approved label readings are kept with those readings; a front photo still needs separate approval before publication. Published photos are kept while needed for that service. A published photo that someone reports is hidden straight away and kept until a person reviews it, who either restores or deletes it. Scheduled cleanup removes other unapproved uploads and pending or rejected label/barcode submissions after thirty days; reported photos and recall review records are handled separately.

Open the profile menu, then About, privacy and support, to remove contributions associated with the current installation. You can also reach this page through Settings. This removes uploaded photo files and the installation's contribution records and revokes its credential. Already published factual label information may remain in the catalogue. Provider backups and operational logs follow their retention schedules.

A minimal credential-revocation record and temporary rate-limit counters remain to prevent deleted credentials from writing again. Cached AI label extractions are removed with the associated uploads, and the scheduled cleanup expires other extraction cache entries after thirty days.

Older field-test records that predate installation credentials require a support request. Include the product barcode; do not send medical information.

Scheduled cleanup removes legacy scan records and lookup events older than twelve months. Removing the app clears its local storage, but does not itself send a deletion request to the service. Request removal of uploaded contributions before uninstalling if you want them removed.

Children#

The app is for the person doing the shopping. Child profiles can be created on the device; their names, ages and allergy rules are not uploaded by the app.

This website#

The example on the home page runs in your browser. It does not create an account or send your choices to us. The site does not use analytics, advertising pixels or cookies. Its hosting provider processes network information and request logs to deliver and protect the pages.

If you use the contact form, we receive the topic you pick, your email address, your message, any barcode or product name you add, and which page you came from. We store it in our database, where a person reads it. We use it to reply and to handle your request. We delete messages 12 months after we've dealt with them, and sooner if you ask. The form sets no cookies.

If you contact us by email, we receive your email address and the information you send. We use that information to respond and handle your request. Please leave medical information out of support messages.

Contact#

Email support@getstickler.com, or use the contact form.

You can ask about data we hold, request a correction or removal, or raise a privacy concern. See Support and Terms of use.