Privacy Policy
Last updated: July 14, 2026
No account, no sign-up. No ads, no third-party analytics, and no cross-app tracking. We don't sell your data. Your saved list lives in your own private iCloud — we can't see it. The one thing we do collect is the product photos and barcodes you check, so Pip can read labels and build a shared catalog of verdicts.
This policy explains what “What’s Vegan?” (the “app,” “we,” “us”) — operated by Alan Wizemann, LLC, a Delaware limited liability company — collects, why, and your choices. Questions: pip@whatsvegan.co.
What we collect and why
Product photos you capture
When you scan a package or an ingredients label, the photo is sent to our servers to identify the product and read its ingredients (using automated image analysis). We store product photos to build and verify a shared catalog of verdicts and to improve accuracy. A clear product photo you take may be shown to other users as that product's image. Please don't capture people, faces, or personal information in frame — and you can report any product image from within the app.
What you check
The barcodes and ingredients you look up are used to return a verdict and to grow a shared catalog that makes the next person's scan faster. Catalog entries describe products, not you — they aren't linked to your identity.
Notifications (optional)
If you turn on notifications, we store your device's Apple push token so we can alert you when a product you saved changes verdict. Turn it off any time in iOS Settings.
App integrity
To stop automated abuse of our service, the app uses Apple's App Attest to prove requests come from a genuine install. This is a per-install cryptographic key from Apple — it is not a personal identifier and isn't used to track you.
Technical data
Like any web service, our servers briefly process your IP address to enforce rate limits and protect the service. We don't use it to build a profile of you, and we keep no personal information in our logs.
Your saved list & iCloud
Your saved products and history sync through your own private iCloud account (Apple CloudKit). We do not have access to your iCloud data — it moves between your devices under Apple's control and privacy terms. Deleting the app or signing out of iCloud removes it from that device.
What we do not do
- No accounts, emails, or passwords to use the app.
- No advertising and no ad networks.
- No third-party analytics, tracking SDKs, or App Tracking Transparency prompts — we don't track you across apps or websites.
- We never sell or rent your personal information.
Who processes data for us
We keep the list short. Apple provides the App Store, iCloud sync, push notifications, and App Attest. Cloudflare hosts our service and runs the automated label-reading. Both process data only to provide these functions.
Security
Traffic is encrypted in transit (HTTPS). Access to our service is gated by Apple App Attest, administrative functions require a secret held outside our codebase, and we keep no personal data in logs. No system is perfectly secure, but the safety and integrity of the service are things we take seriously — see our security overview.
Data retention & deletion
Product photos and catalog entries are retained as part of the shared catalog. Push tokens and abuse-prevention records are kept while they're useful and periodically cleaned up. To request deletion of a photo you submitted, report it in the app or email pip@whatsvegan.co and we'll help.
Children
The app isn't directed to children under 13, and we don't knowingly collect their personal information.
Changes
If we change this policy, we'll update the date above and, for material changes, note it in the app or on this page.
This policy is written to reflect how the app actually works today. It is provided in good faith and is not legal advice; as the product evolves (for example, if paid features are added), we'll update it.