Privacy Policy

Who we are

UPF Reset is provided by Royal Nation LLC of 539 W Commerce St, Dallas, TX 75208-1953, United States ("we", "us"). For anything about your privacy, contact admin@royalnationllc.com.

This policy explains what UPF Reset collects, why, who it is shared with, and the choices you have. UPF Reset is available worldwide, and this policy is written to meet the Australian Privacy Principles, the EU and UK General Data Protection Regulation, and US state privacy and consumer-health-data laws. The sections near the end set out what applies where you live.

What we collect

Your food log and your wellbeing ratings are health information, which the law treats as sensitive. We collect it only because you enter it, we use it only to show it back to you inside the app, and we will not use it for any other purpose without asking you first. Recording how you feel is always optional.

What we do not collect

• Your location.
• Photos. The camera reads the barcode number and nothing else; no image is stored or sent anywhere.
• Your contacts, advertising identifiers, or anything from other apps.
• Payment details. Purchases go through Apple or Google, and we never see your card.

We don't use advertising or tracking tools, and we don't track you across other apps or websites. The usage and crash data described above is the only measurement we do, and it never includes what you scan, log or type.

Who we share it with

We use a small number of service providers to run UPF Reset. Each receives only what it needs:

• Clerk runs sign-in. It holds your email address and password — the password only in hashed form — and sends the one-time codes that confirm your email address and reset your password. Our own servers receive a sign-in token from Clerk, not your password.
• Convex stores your account and everything you log, so the app works across sessions and devices.
• Open Food Facts, a non-profit food database, receives a product's barcode number, or the product name you search for, so we can look up its ingredients. That request is made by our server, not your phone, so Open Food Facts never receives your identity, your account, your device or your IP address. We keep no record linking you to what you searched for.
• Anthropic, OpenAI and Google each may receive a product's name and ingredient list, including a list you type in yourself, so it can be classified; we use more than one AI provider so the app keeps working if one is unavailable. This also happens on our server, and none of them receives who scanned it, your account or your device.
• Google Firebase (Analytics and Crashlytics) receives the usage and crash data described above, if you allow it. It is identified only by a random ID for your installation: we set no user ID, so it receives neither your email address nor your account, and never a barcode, product name, ingredient list, food log entry or wellbeing rating. It does not receive your advertising identifier, and we don't use it for advertising. Google may also use aggregated, de-identified Analytics statistics for benchmarking and to improve its own services.
• OneSignal sends push notifications. It receives data only if you turn notifications on in Settings: a notification token and a random ID for your device, your device model, operating system version, language and time zone, and how you interact with notifications (delivered, opened) and the app (number and length of sessions). It is not linked to your account or email address, and never receives what you scan, log or type.
• RevenueCat receives your subscription status and an account identifier, so a subscription keeps working if you reinstall the app.
• Apple and Google process your payments under their own privacy policies.

We do not sell your personal information, and we never share your food log or wellbeing ratings with anyone.

We are based in the United States, and so are several of the providers above. Your information is therefore stored and processed outside Australia, mainly in the United States. We choose providers that protect it to a standard comparable to the Australian Privacy Principles.

What we don't do with it

UPF Reset does not compare your wellbeing ratings against your diet score, and it does not generate "insights" from them. On one person's data, a claim like "your sleep is better on low-UPF days" wouldn't be reliable, and we would rather show you nothing than something that sounds right but isn't.

Your choices and rights

• Usage and crash data: turn it off or on at any time in Settings → Share usage and crash data. If you live in the European Union, the wider European Economic Area, the United Kingdom or Switzerland, it stays off until you turn it on. Turning it off also clears what hasn't been sent yet and resets the random ID.
• Notifications: off until you turn them on in Settings → Notifications, and you can turn them off there at any time. Nothing is sent to OneSignal while they are off.
• See it: everything UPF Reset holds about you is visible in the app.
• Correct it: you can edit or delete any item you've logged and any check-in.
• Delete it: you can delete your account from Settings. This permanently removes your account, food log, scores, challenge progress and check-ins straight away. Our database provider may keep encrypted backups for a short period before they expire.
• Ask us: contact admin@royalnationllc.com to ask for a copy of your information or to raise a concern.
• Complain: if you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

How long we keep it

We keep your information for as long as you have an account. When you delete your account, it is removed as described above.

We also keep a shared cache of product information — barcodes, ingredient lists and our classifications. That describes groceries, not people, contains nothing about you, and is kept so that products someone has already scanned load instantly for everyone.

Asking before we store health information

Before UPF Reset stores anything from your food log or your wellbeing ratings, it asks for your explicit permission on a screen of its own, separate from creating your account. Nothing is pre-selected. The app can't keep a food log without that permission, because the log is what your score is made from.

You can withdraw your permission at any time by deleting your account in Settings, which erases that information along with everything else. If we ever change what we ask permission for, we'll ask you again.

If you're in the European Union, EEA or United Kingdom

• Controller: Royal Nation LLC, at the address above.
• Why we're allowed to use your information: to provide the account and any subscription you ask for (GDPR Article 6(1)(b)); your explicit consent for your food log and wellbeing ratings, which are health data (Article 9(2)(a)); and our legitimate interest in keeping the service secure (Article 6(1)(f)).
• Your rights: to access, correct, erase, restrict or object to our use of your information, to receive a copy in a portable form, and to withdraw consent at any time without affecting what happened before you withdrew it. Contact admin@royalnationllc.com; most of this you can also do in the app.
• International transfers: we and several of our providers are in the United States. Where your information leaves the EU, EEA or UK, those transfers rely on the providers' Standard Contractual Clauses or the EU–US Data Privacy Framework, as applicable.
• Complaints: you can complain to your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).

If you're in the United States

• We do not sell personal information and do not share it for cross-context behavioral advertising, targeted advertising or profiling.
• Depending on the state you live in, you may have the right to know what we hold about you, to access it, to correct it and to delete it. Contact admin@royalnationllc.com, or delete your account in Settings. We won't treat you differently for exercising these rights.

Consumer health data

This section is our consumer health data privacy policy under Washington's My Health My Data Act, Nevada's consumer health data law and similar state laws. It is also published on its own page.

• What we collect: the foods you log (by scanning or by hand) and, if you choose to record them, your daily energy, sleep and digestion ratings.
• Why: only to show them back to you inside the app — your daily and weekly score, your history and your challenge progress.
• Where it comes from: only from you.
• Consent: we ask for your explicit consent before collecting any of it.
• Who receives it: only Convex, which stores it on our behalf. We never sell consumer health data and never share it with anyone else. (The AI providers named above receive product ingredient lists, never your log.)
• Your rights: to confirm whether we hold your consumer health data, to see it, to withdraw consent and to have it deleted — delete your account in Settings or contact admin@royalnationllc.com. If we refuse a request, you can appeal by replying to our response.

Children

UPF Reset is not designed for children under 16 and we don't knowingly collect their information.

Not medical advice

UPF Reset describes what's in packaged food using the NOVA classification. It is not medical or dietary advice and doesn't diagnose or treat anything. Please talk to a doctor or an accredited practising dietitian about your own health.

Changes to this policy

If we make a significant change, we'll tell you in the app before it takes effect. This version applies from the date shown on the store listing.