Everlume — Privacy Policy

Last updated: July 28, 2026

Effective date: July 24, 2026

This Privacy Policy explains how Avix Ventures LLC ("Avix Ventures," "we," "us," or "our"), a limited liability company organized under the laws of the State of Florida, collects, uses, discloses, and protects information in connection with the Everlume mobile application (the "App") and any related websites, support channels, and services (together, the "Services").

By downloading, accessing, or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, do not use the App.

Contact: support@everlumeapp.com Mailing address: 5379 Lyons Rd #1636, Coconut Creek, FL 33073-2810

1. Summary (plain English)

• Everlume is a food-and-product ingredient scanner. You scan a barcode or search a product, and we show you its ingredients and a "cleanliness" assessment.
• We do not require you to create a traditional account, and we do not ask for your name, email, or password to use the core scanning features.
• We do not sell your personal information and we show no advertising inside Everlume.
• We do measure whether our own ads work, using Apple's privacy-preserving SKAdNetwork together with a measurement provider (AppsFlyer). It tells us a campaign produced installs; it does not tell us who you are.
• Everlume asks your permission, once, to use Apple's advertising identifier (IDFA) for that measurement. If you decline, nothing about the App changes and no advertising identifier is ever read. You can change your answer at any time in iOS Settings under Privacy & Security → Tracking.
• Your scan history is stored on your device. The barcodes and product descriptions you look up are sent to our backend and trusted data providers to retrieve product information, and looked-up products are stored in a shared, anonymous product catalog that benefits all users.
• If you subscribe, Apple processes your payment — we never receive your full payment card number. If you choose Sign in with Apple to restore a subscription, we receive a unique Apple-provided identifier.

The rest of this policy provides the detail required by law.

2. Information we collect

2.1 Information you provide

• Product searches and scans. When you scan a barcode or type a product description, that barcode/description is processed to look up the product.
• Product correction reports. If you use the "report incorrect ingredients" feature, we collect the report contents and the related barcode.
• Support communications. If you contact us (e.g., by email), we receive the information you include.

2.2 Information collected automatically

• Camera input (on-device). The App uses your device camera only to detect a barcode. Camera frames are processed on your device and are not uploaded to our servers. We extract only the decoded barcode number.
• Device and app information. Basic technical information necessary to operate the App and diagnose problems may be processed (e.g., app version, operating system version, device model, general error/diagnostic information, and approximate region/country derived from device settings to prefer locally-sold products). We do not collect precise GPS location.
• On-device storage. Your scan history, viewed products, and app settings are stored locally on your device. We do not have access to your on-device history unless you submit it to us (e.g., in a report).
• Marketing measurement data. To understand which of our own marketing campaigns bring people to Everlume, our measurement provider receives a per-device identifier it generates, your device model and operating system version, and your IP address (used to derive an approximate country). This is paired with a small set of app milestones: reaching the subscription screen, starting a trial, subscribing, redeeming a workbook code, and completing your first scan. It is not paired with anything you scan, search for, or plan in the app.

2.3 Subscription and account information

• Purchases. Subscriptions are sold and processed through Apple's In-App Purchase system. Apple handles the transaction and your payment method. We do not receive or store your credit/debit card number or full payment details. We may receive and validate subscription status and transaction identifiers from Apple to confirm and restore your subscription.
• Sign in with Apple. If you use "Already have an account? Sign in with Apple," Apple provides us with a unique, app-specific identifier for you, and (only if you choose) a name and a private relay email address. We use this solely to associate and restore your subscription across your devices. We never receive your Apple ID password.

2.4 Information we do not collect

• We do not knowingly collect your real name, home address, government ID, precise location, contacts, photos (other than transient on-device camera frames used to read a barcode), health records, or biometric identifiers.

3. How we use information

We use information to:

• Identify scanned/searched products and retrieve their ingredients, images, and category;
• Compute and display ingredient flags, scores, and "cleaner alternative" suggestions;
• Maintain and improve a shared, anonymous product catalog so that a product looked up once is available instantly to all users (this is core to keeping the Services affordable);
• Operate, maintain, secure, debug, and improve the Services;
• Process, validate, and restore subscriptions through Apple;
• Respond to your reports and support requests;
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues;
• Comply with legal obligations and enforce our Terms of Service.

Legal bases (for users in the EEA/UK). Where the GDPR or UK GDPR applies, we process information based on: performance of a contract (providing the Services you request and your subscription), our legitimate interests (operating, securing, and improving the Services and maintaining the shared catalog), your consent (e.g., camera access), and compliance with legal obligations.

4. How information is shared

We share information only as described here. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4.1 Service providers and data sources

To look up products and run the App, the barcode or product description you submit (and, for the shared catalog, the resulting product data) may be sent to and processed by:

• Cloud hosting and backend infrastructure providers — host our database, storage, and serverless functions;
• Content-delivery (image) providers — deliver product images and host our website;
• Subscription-management providers — manage and validate your auto-renewing subscription and entitlement (they receive your purchase/subscription data and an anonymous app identifier, never your name or card number);
• Third-party product-information databases — queried by barcode or name to retrieve ingredients and product details;
• Web-search and AI providers — used to find product listings and to extract a product's name and ingredients from the retrieved results. What we send is limited to the barcode, the product name or description you typed, and public product-listing text. We never send your identity, account, email, device identifier, scan history, saved lists, or Plan entries to an AI provider, and none of what we send is used to train or improve any AI model. Ingredient scores and ratings are calculated by our own rules, not generated by AI;
• Apple — for App distribution, In-App Purchases, and Sign in with Apple.

We do not name specific vendors here to avoid disclosing our technical implementation; the categories above describe every type of provider that may process this information.

These providers process the information only to perform services for us. We do not authorize them to use it for their own independent marketing.

4.2 The shared product catalog

When a product is successfully looked up, its product data (barcode, name, ingredients, category, image) is stored in our shared catalog so all users benefit. This catalog contains product information, not information about you — it is not linked to your identity, name, or device.

4.3 Legal, safety, and business transfers

We may disclose information if we believe in good faith it is necessary to: comply with applicable law, regulation, legal process, or governmental request; enforce our Terms; protect the rights, property, or safety of Avix Ventures, our users, or the public; or detect and prevent fraud or security issues. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

4.4 Data sources and attribution

Product names, ingredient lists, and product images come in part from Open Food Facts and Open Beauty Facts, made available under the Open Database License (ODbL); product images are available under the Creative Commons Attribution ShareAlike licence. openfoodfacts.org · openbeautyfacts.org

5. Third-party services and data sources

Marketing measurement. We use AppsFlyer to attribute app installs to our own marketing campaigns. AppsFlyer receives the measurement data described in section 2.2, and the advertising identifier if you allowed it, and acts as our service provider, processing it on our behalf and not for its own purposes. It does not receive your scans, searches, product history, or anything from the Plan feature.

The App relies on third-party product-information databases, web-search and AI providers, and infrastructure and commerce providers (including Apple). Their data and services are governed by their own terms and privacy policies, and we do not control and are not responsible for their content, accuracy, or practices. Ingredient data originates from these third parties and from manufacturer/retailer sources and may be incomplete, outdated, or incorrect (see our Terms of Service health disclaimer).

6. Data retention

• On-device data (scan history, settings) remains on your device until you delete it in the App or uninstall the App.
• Shared catalog product data is retained to provide the Services to all users for as long as the catalog is operated.
• Reports and support communications are retained as long as needed for the purposes described, to comply with law, resolve disputes, and enforce agreements.
• Subscription/Sign-in-with-Apple identifiers are retained while your subscription is active and as needed to validate, restore, and account for purchases, and to meet legal/tax obligations.

7. Security

We use commercially reasonable administrative, technical, and organizational measures designed to protect information, including transport encryption (HTTPS/TLS) and access controls on our backend. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You use the Services at your own risk.

8. Children's privacy

The App is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at support@everlumeapp.com and we will take appropriate steps to delete it. The App is rated for a general audience but presents food-additive and health-related information intended for adults making purchasing decisions.

9. Your privacy rights

Depending on where you live, you may have rights regarding your personal information. Because the core App does not collect information that identifies you, in most cases we hold little or no information tied to your identity. Where applicable rights exist:

9.1 California (CCPA/CPRA)

California residents may request to know, access, delete, and correct personal information we hold about them, and to opt out of "sale" or "sharing." We do not sell or share personal information as those terms are defined. We do not discriminate against you for exercising your rights. To make a request, contact support@everlumeapp.com; we may need to verify your request.

Categories of personal information that may be processed: identifiers (e.g., a Sign-in-with-Apple identifier or relay email, if you use it; subscription/transaction identifiers), internet/app activity (the products you look up), and limited device/diagnostic information. We do not process sensitive personal information for the purpose of inferring characteristics.

9.2 EEA / UK (GDPR)

You may have the right to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise these rights, contact support@everlumeapp.com.

9.3 Account / subscription data

Because there is no traditional account, deleting your data primarily means deleting your on-device history (in the App) and canceling your subscription through Apple. If you used Sign in with Apple, you may request that we delete the associated identifier by contacting support@everlumeapp.com, and you can also stop the connection in your Apple ID settings (Sign in with Apple).

10. International users and data transfers

We operate in the United States, and our providers may process information in the United States and other countries. If you use the Services from outside the U.S., you understand your information may be transferred to, stored, and processed in the U.S. and other jurisdictions that may not provide the same level of data protection as your home country. Where required, we rely on appropriate safeguards for such transfers.

11. "Do Not Track" and tracking

We show no advertising inside Everlume, and we do not sell or share your information for anyone else's advertising.

We do advertise Everlume elsewhere, and we measure whether those ads work. That measurement runs through Apple's SKAdNetwork, which is designed so that Apple, not us, controls what is reported and returns results that cannot be tied back to an individual, together with the app milestones listed in section 2.2.

The permission we ask for. Once, during setup, the App presents Apple's standard "Allow tracking" prompt. Under Apple's definition this permission covers using your device's advertising identifier (IDFA) to match your installation of Everlume to an advertisement you saw, which is measurement that involves data held by the company that showed you the ad. That is the only purpose we use it for.

If you allow it, we learn which campaign brought you to Everlume. If you decline, the advertising identifier is never read, and everything in the App works exactly the same way. Either way we do not build an advertising profile of you, we do not follow you around other apps or websites, and none of your scans, searches, product history, or Plan data is ever used for advertising. You can change your answer at any time in iOS Settings under Privacy & Security → Tracking.

We do not respond to "Do Not Track" browser signals, because Everlume is an app and does not perform cross-site browsing tracking.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date and, for material changes, provide additional notice (e.g., in-app). Your continued use of the Services after an update constitutes acceptance of the revised policy.

13. Contact us

Avix Ventures LLC Attn: Privacy — Everlume 5379 Lyons Rd #1636, Coconut Creek, FL 33073-2810 Email: support@everlumeapp.com