Healthysm – Health Analysis

Privacy Policy

Effective Date: November 10, 2026
Last Updated: November 10, 2026

Application Name: Healthysm
Developer & Data Controller (EU DSA Trader): Advereo Media LLC (a Wyoming Limited Liability Company)
Privacy & Support Email: info@advereomedia.com

Welcome to Healthysm (“Healthysm,” “we,” “us,” or “our”). Healthysm is owned, developed, and operated by Advereo Media LLC, a limited liability company registered in the State of Wyoming, United States.

This Privacy Policy explains how Advereo Media LLC collects, uses, discloses, and safeguards your information when you use the Healthysm mobile application (available on the Apple App Store and Google Play Store), our website, and our related services (collectively, the “Services”). By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

  • Account & Authentication Data: When you create an account or sign in (including via Sign in with Apple, Google Sign-In, email authentication, or guest session authentication), we collect your unique user ID, email address, display name (if provided), and encrypted authentication tokens.
  • Product Scans, Photos & Search Queries: When you scan a product barcode, capture or upload a photo of a food or personal care product or ingredient label, or search our database, we process the barcode, product image, extracted text/ingredients, and your saved scan history.
  • User Preferences & Support Communications: We collect your saved favorites, product feedback submissions, notification settings, and any inquiries you send to info@advereomedia.com.

1.2 Information Collected Automatically

  • Device & Technical Identifiers: We collect your device model, operating system and version, unique device identifiers, app version, language, country/region locale setting (used to retrieve region-specific product ingredient formulations), IP address, and network status.
  • Usage & Analytics Data: We collect interaction metrics such as screens viewed, features accessed, onboarding completion, scan counts, and session duration.
  • Crash & Diagnostic Logs: We collect crash reports, stack traces, and technical diagnostic logs to identify and fix software bugs.
  • Subscription & Billing Status: All in-app subscriptions are processed directly by Apple (App Store) or Google (Google Play Billing). We do not collect or store your payment card numbers; we receive only transaction receipt identifiers, subscription tier status, trial status, and renewal timestamps.
  • Advertising & Attribution Identifiers: Subject to your consent and device settings (such as iOS App Tracking Transparency), we collect mobile advertising identifiers (IDFA on iOS and Google Advertising ID on Android) and attribution events (such as app installs, trial starts, and subscription events) to measure our marketing campaigns.

2. Device Permissions (Camera & Photo Library)

  • Camera Permission (android.permission.CAMERA / iOS Camera): Healthysm requires access to your device’s camera so you can scan product barcodes and capture photos of food or cosmetic packaging and ingredient labels for instant analysis. Camera images are transmitted securely to our analysis pipeline only when you initiate a scan.
  • Photo Library / Media Access: Used only when you choose to select an existing product photo from your gallery for analysis or when you choose to save a generated 3:4 product share card to your device.
  • Revoking Permissions: You may revoke Camera or Photo Library permissions at any time in your iOS or Android device settings, though doing so will disable camera scanning features.

3. How We Use Your Information

Advereo Media LLC processes your data for the following purposes:

  1. To Provide and Sync the Services: Authenticate your account, manage your subscription entitlements, sync your scan history and favorites across devices, and determine your country/region to look up regional product formulations.
  2. To Perform AI Product & Ingredient Analysis: Analyze barcodes, product photos, and ingredient/INCI lists using artificial intelligence and our deterministic scoring algorithms to generate health scores, Quick Overview markers, flagged ingredient explanations, and cleaner product alternatives.
  3. To Communicate With You: Deliver push notifications, recall or investigative lab report alerts, and promotional offers (in accordance with your notification preferences), and respond to support requests.
  4. To Improve Stability and Security: Monitor app performance, debug crashes, prevent abuse or automated scraping of our database, and expand our product catalog.
  5. To Measure Marketing & Attribution: Measure the effectiveness of our advertising campaigns on third-party platforms (such as Meta and TikTok) and prevent attribution fraud.

4. Third-Party Service Providers & SDKs

We do not sell your personal information to data brokers. We share necessary technical and operational data only with the following third-party service providers (“Processors”) that power our Services:

  • Supabase (Database, Authentication & Cloud Storage): Hosts our backend database, user authentication accounts, saved scan history, and cloud storage assets.
  • Google Gemini API (AI Vision & Ingredient Research): When you perform a photo scan or analyze a product not yet cached in our database, the product image, product/brand name, and country code are sent to Google’s Gemini API to extract ingredients and verify safety markers.
  • Google Firebase (Firebase Analytics & Firebase Cloud Messaging): Provides aggregated usage analytics and delivers push notifications to your device.
  • Sentry (Crash Reporting & Diagnostics): Collects real-time crash logs and error diagnostics so our engineering team can resolve technical issues.
  • Meta SDK (Facebook / Instagram) & TikTok SDK: Used for mobile ad attribution, campaign measurement, and ad optimization. Subject to your device permissions and consent where required by law, these SDKs may collect device identifiers, IP addresses, and in-app conversion events (such as app install, trial start, or subscription).
  • Apple App Store & Google Play Billing: Process your in-app subscription transactions and verify subscription status.

5. Data Retention & How to Delete Your Account and Data

We retain your personal information only for as long as your account remains active or as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Account & Data Deletion Instructions (In-App & Web Request)

You have the right to permanently delete your Healthysm account and all associated personal data (including your email address, authentication records, and saved scan history) at any time using either of the following methods:

  1. In-App Instant Deletion: Open the Healthysm app, navigate to Settings / Profile > Privacy, Terms & Data, and select Delete Account & Data.
  2. Web / Email Deletion Request (No App Access Required): Send an email to info@advereomedia.com with the subject line “Account Deletion Request” and include the email address or User ID associated with your account. We will permanently delete your account and associated personal data within 30 days (and typically within 7 business days), retaining only anonymized transaction records where strictly required by tax or accounting laws.

6. Your Privacy Rights (EEA / UK GDPR, California CCPA/CPRA & US State Laws)

Depending on your jurisdiction, you have specific statutory rights regarding your personal data:

  • Right to Access, Portability & Correction: Request a copy of the personal data we hold about you or ask us to correct inaccurate information.
  • Right to Deletion (“Right to Erasure”): Request permanent deletion of your personal data as outlined in Section 5 above.
  • Right to Opt Out of “Sharing” / Cross-Context Behavioral Advertising (US State Laws): While we never sell personal data for money, transmitting attribution events and advertising IDs via the Meta SDK and TikTok SDK may constitute “sharing” under the California Consumer Privacy Act (CCPA/CPRA) and similar US state laws. You can opt out at any time by revoking tracking permissions on your device (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Google > Ads > Delete advertising ID) or by emailing info@advereomedia.com.
  • GDPR Legal Bases (EEA, UK & Switzerland): If you reside in the European Economic Area, the UK, or Switzerland, Advereo Media LLC acts as the Data Controller and processes your data under the following GDPR legal bases:
    • Performance of a Contract (Art. 6(1)(b) GDPR): Processing your scans, searches, and account data to deliver the core Healthysm app features.
    • Legitimate Interests (Art. 6(1)(f) GDPR): Crash diagnostics (Sentry), security, fraud prevention, and improving our product database.
    • Consent (Art. 6(1)(a) GDPR): Optional push notifications, camera access, and advertising/attribution SDK tracking where consent is required under the EU ePrivacy Directive and GDPR. You may withdraw consent at any time.
  • Supervisory Authority: EEA and UK users have the right to lodge a complaint with their local data protection supervisory authority.

7. International Data Transfers

Advereo Media LLC is headquartered in the United States, and our servers and service providers operate primarily in the United States. When we transfer personal data from the EEA, UK, or Switzerland to the United States, we rely on European Commission-approved Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework (where applicable to our certified sub-processors) to safeguard your data.

8. Children’s Privacy

The Services are not directed to children under the age of 13 (or under the age of 16 in the EEA/UK). We do not knowingly collect personal information from children. If we discover that a child has provided us with personal data without verifiable parental consent, we will immediately delete such information. Contact info@advereomedia.com if you believe a child has submitted personal data.

9. Data Security

We implement industry-standard technical and organizational security controls, including TLS/HTTPS encryption in transit, encrypted cloud storage, and row-level security policies. However, no electronic transmission or storage system can be guaranteed to be 100% secure.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated “Last Updated” date, and material changes will be communicated via the app where required by law.

11. Contact Us

If you have any questions about this Privacy Policy, our data practices, or your privacy rights, please contact our Privacy Officer at:

Advereo Media LLC
Email: info@advereomedia.com

Powered by CookieAdmin