Last updated: 3 October 2026
Labels are read on your device, and photos are not uploaded. There is no account and no server of ours for your lists. A barcode lookup sends only the barcode number to Open Food Facts. Optional anonymous usage counts are described below. We do not sell data and we do not use it for advertising or tracking.
The people you add (the names you type), their allergens, intolerance packs and custom words, your “Checked” list (product name and brand, barcode, date, the result and the matched words), your settings, and a cache of product data from Open Food Facts are written to on-device storage on your iPhone or iPad. We never receive them and cannot see them. Deleting the app deletes them.
LabelLight uses the camera to read ingredient labels and barcodes. Text and barcodes are recognized on the device with Apple’s VisionKit and Vision frameworks. Camera frames and photos are not uploaded and are not sent to us or to anyone else. If you choose a photo, the iOS photo picker gives the app only the photo you pick, not your photo library.
When you scan or type a barcode, LabelLight asks Open Food Facts (an open, collaborative food database run by a non-profit) for that product. The request contains the barcode number, the list of product fields the app needs, and the app identifier LabelLight/1.0 (iOS). As with any web request, Open Food Facts’ servers see your device’s IP address; their privacy policy covers that. Nothing about you, the people you shop for, your triggers or your Checked list is sent. The product data that comes back is cached on your device. With Pro, “re-check” repeats the lookup for barcodes you saved, to spot recipe changes.
If “Share anonymous usage counts” is on (it defaults on; turn it off in Settings), LabelLight sends daily totals of a few product events to our own server, at most once a day: app opened, first result shown, paywall shown (and where it was shown), plan selected, paywall closed, and purchases restored. Each total carries a coarse days-since-install bucket. The post also includes the app’s name and version, your device language, and your App Store country. There is no install ID, no advertising identifier, and no names, triggers, products, barcodes or label text. Turning it off deletes any counts not yet sent, and off stays off. Development builds never send.
LabelLight Pro (monthly or annual subscription) and the Lifetime purchase are sold through Apple In-App Purchase. Apple processes the payment and tells the app whether you have Pro. We never see your payment details or your Apple Account.
When an annual free trial starts, the app asks for permission to send notifications and, if you allow it, schedules one reminder on your device 2 days before the trial ends. It is a local notification; nothing is sent to us.
If you share the PDF of what you avoid, iOS hands the file to the app you choose; we receive no copy. “Report a wrong match” opens a draft email to us in your mail app. The draft contains the result (per person, with the names you gave them, when you check for several people), the triggers that were checked, the matched words, the barcode if any, the app version and language, and the text read from the label, so we can fix the word list. You can edit or delete it; nothing is sent unless you send the email.
LabelLight is not directed at children under 13. Parents and caregivers use it to check labels for the people they shop for, including children; a child’s profile is a name and a list of triggers that stays on the parent’s device.
If this policy changes, we will update the date above.