Harmony Food Agent

Harmony Technologies ("we," "us," or "our") operates the Harmony Food Agent mobile application and website at harmonyfoodagent.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account Information
When you create an account, we collect your email address and a hashed password. We use Supabase for secure authentication. We do not store plain-text passwords.

Location Data
With your permission, we collect your device's GPS coordinates or a manually entered ZIP code or address. Location is used solely to find grocery stores near you and is never stored on our servers. It exists only in your current session.

Barcode Scans and Product Searches
When you scan a barcode or search for a product, we look up that product in the Open Food Facts database via our API proxy. Scanned barcodes may be cached temporarily to improve performance. We do not build a permanent profile of what you eat.

Family Profile Data
If you add family member profiles (name, age, dietary restrictions, health goals), that data is stored securely in our database and used exclusively to personalize food safety alerts and recommendations within the app.

Usage Data
We collect anonymized analytics (via Google Analytics 4) including pages visited, features used, and session duration. This data cannot be used to identify you personally.

Device Information
We may collect basic device information (operating system, browser type, app version) for debugging and performance purposes.

2. How We Use Your Information

• To provide and improve the app's core features (scanning, alternatives, store search)
• To personalize food safety alerts for your family members
• To process Pro subscription payments via Stripe
• To respond to support requests
• To send transactional emails (account confirmation, password reset) — never marketing without your consent
• To analyze aggregate usage patterns and improve the product

3. Information We Do Not Collect

• We do not sell your personal data to any third party — ever
• We do not collect social security numbers, financial account numbers, or government IDs
• We do not access your contacts, photos, or files beyond what is needed to scan a barcode
• We do not track your location in the background
• We do not serve behavioral advertising

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Supabase — authentication and database (supabase.com/privacy)
• Stripe — payment processing. We never see or store your full card number (stripe.com/privacy)
• Open Food Facts — product nutrition database (openfoodfacts.org/privacy)
• Kroger API — store location and product pricing (kroger.com/privacy-policy)
• Cloudflare — API hosting and CDN (cloudflare.com/privacypolicy)
• Google Analytics 4 — anonymized usage analytics (policies.google.com/privacy)
• Nominatim / OpenStreetMap — reverse geocoding for location display (osmfoundation.org/Privacy_Policy)

5. Camera Permission

The app requests access to your device camera solely to scan product barcodes. Camera access is only active while you have the scanner open. We do not capture, store, or transmit images or video.

6. Location Permission

Location access is used to find grocery stores and organic alternatives near you. We request location only when you initiate a search. We do not track your location in the background or store your precise coordinates.

7. Data Retention

• Account data: retained until you delete your account
• Family profiles: retained until you delete them or your account
• Cached product data: up to 30 days on our servers, then purged
• Analytics: retained in aggregate, anonymized form per Google's policy

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Opt out of analytics tracking
• Data portability (export your family profiles)

To exercise any of these rights, email us at privacy@harmonyfoodagent.com.

9. Children's Privacy

Harmony Food Agent is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, and access-controlled databases. No system is 100% secure, but we take reasonable steps to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.