Privacy Policy

Last updated: October 28, 2026

Onelabel AI Ltd ("we," "our," and/or "us") values your privacy and is committed to protecting your personal information. This Privacy Policy (the "Privacy Policy") explains how we collect, use, share, and protect information from users of our Service ("Users") or their devices.

This Privacy Policy applies to our mobile application, website, and related services (collectively, the "Service"). By using or accessing the Service, you agree to the collection, use, disclosure, and procedures described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

We encourage you to read this Privacy Policy carefully. If you have any questions, please contact us using the information provided in the "Contact Information" section below. Your use of the Service is also subject to our Terms of Service.

Quick Summary: We collect information you provide directly to us, information we collect automatically when you use our Service, and information from third parties. We use this information to provide, maintain, and improve our Service, communicate with you, and comply with legal obligations. We share information with service providers, analytics partners, and as required by law. You have rights regarding your personal information, including the right to access, correct, delete, and port your data. We implement security measures to protect your information, but no system is 100% secure.

Information We Collect

We collect information that you provide directly to us, information we collect automatically when you use our Service, and information we receive from third parties. We only collect information that is necessary for the purposes described in this Privacy Policy and in accordance with the principle of data minimization.

A. Information You Provide to Us

Registration and Account Information.

When you register for the Service, we can ask for your name, email, member password. If you sign up using a social media account, we may also receive information from that social media service.

Communications.

When you communicate with us, we may receive additional information about you. For example, when you communicate with our Customer Support Team, we will receive information such as your name, email address, the contents of a message or attachments that you may send to us, and other information you choose to provide. If you respond to one of our surveys, we may receive your name, email address, date of birth, zip code. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.

Payment Information.

If you make a purchase through the Service, such as when you pay for additional features or upgrade to a different usage tier, your payment-related information, such as credit card or other financial information, is collected by our third-party payment processor on our behalf.

B. Information We Collect When You Use the Service

Device Information.

We receive information about the device you use to access the Service, including, internet protocol ("IP") address, web browser type, operating system version, and information about your device.

Usage Information.

To help us understand how you use the Service and to help us improve them, when you use the Service, we automatically receive information about your interactions with the Service, including information about your use of the App, such as time spent using the App, how you interact with elements of the App, the products you scan or save, and lists you create.

Location Information.

When you use the Service, we infer the general physical location of your device and the geographic regions our Users come from. For example, your IP address may indicate your general geographic region.

Camera Access.

When you use the Service, we will request access to your device's camera to enable you to scan product barcodes, upload product photos, or use other features of our Service.

Information from Cookies and Similar Technologies.

We and third-party partners collect information using cookies, pixel tags, web beacons, and similar technologies (collectively, "Cookies"). Cookies are small text files that are placed on your device when you visit our Service.

Types of Cookies We Use:

Essential Cookies: These cookies are necessary for the Service to function and cannot be switched off. They are usually set in response to actions you take, such as setting privacy preferences or logging in.
Analytics Cookies: These cookies help us understand how visitors interact with our Service by collecting and reporting information anonymously (e.g., Google Analytics).
Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences.
Advertising Cookies: These cookies are used to deliver relevant advertisements and track the effectiveness of our advertising campaigns.

Cookie Management: You can control and manage cookies in several ways:

Browser Settings: Most browsers allow you to refuse or accept cookies, or to delete existing cookies. Please refer to your browser's "Help" section for instructions.
Opt-Out Tools: You can opt-out of certain third-party cookies through the Network Advertising Initiative (http://optout.networkadvertising.org/) or the Digital Advertising Alliance (http://optout.aboutads.info/).
Mobile Device Settings: You can manage cookie preferences through your mobile device settings.
Do Not Track: Some browsers offer a "Do Not Track" feature. While we do not currently respond to "Do Not Track" signals, we respect your privacy choices.

Please note that if you disable or delete cookies, some features of the Service may not function properly, and your experience may be less personalized.

Third-Party Cookies: Our third-party partners, such as analytics and advertising partners, may use cookies to collect information about your online activities over time and across different services. We do not control these third-party cookies, and their use is governed by their respective privacy policies.

User feedback.

We receive information you provide if you share feedback about the accuracy of any data in products, products, food additives, nutriments or ingredients not recognized by us, food and ingredient ratings we make, and our performance.

How We Use the Information We Collect

We use the information we collect:

To provide, maintain, improve, and enhance the Service;
To communicate with you, provide you with updates and other information relating to the Service, provide information that you request, respond to comments and questions, and otherwise provide customer support;
To understand and analyze how you use the Service and develop new products, services, and features;
For marketing purposes, such as communicating updates about the Service that may be of interest to you;
To de-identify and/or aggregate information collected through the Service for our business purposes;
To facilitate transactions and payments;
To find and prevent fraud, and respond to trust and safety issues that may arise;
For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
For other purposes for which we provide specific notice at the time the information is collected.

We may share or otherwise disclose information we collect from or about you as described below or otherwise disclosed to you at the time of collection.

Affiliates.

We may share any information we receive with our corporate affiliates for any of the purposes described in this Privacy Policy.

Service Providers.

We may share your information with service providers, contractors, and other third parties who perform services on our behalf, including:

Cloud Hosting Providers: For data storage and hosting services
Payment Processors: To process payments and transactions
Customer Support Services: To provide customer support and respond to inquiries
Email Service Providers: To send communications and manage email subscriptions
Analytics Providers: To analyze usage patterns and improve our Service
Security Services: To protect against fraud and security threats
AI Providers: To generate the answers of LabelPal, the AI coach in our app. When you use LabelPal, we send our AI provider (currently OpenAI) what the answer needs: your questions and messages, photos you add, your dietary rules and preferences (including health-related ones such as allergies), and the receipt lines and trip and plan figures LabelPal reviews. You can turn AI features off in the app under Profile › AI features.

These service providers are contractually obligated to protect your information and use it only for the purposes for which it was shared. They are not permitted to use your information for their own marketing purposes.

Analytics Partners.

We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/, and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Advertising Partners.

We work with third party advertising partners to show you ads that we think may interest you. These advertising partners may set and access their own cookies, pixel tags and similar technologies on our Services and they may otherwise collect or have access to information about you which they may collect over time and across different online services. Some of our advertising partners are members of the Network Advertising Initiative (http://optout.networkadvertising.org/?c=1#!/) or the Digital Advertising Alliance (http://optout.aboutads.info/?c=2&lang=EN). If you do not wish to receive personalized ads, please visit their opt-out pages to learn about how you may opt out of receiving web-based personalized ads from member companies. You can access any settings offered by your mobile operating system to limit ad tracking, or you can install the AppChoices mobile app to learn more about how you may opt out of personalized ads in mobile apps.

As Required by Law and Similar Disclosures.

We may access, preserve, and disclose information about you if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) comply with requests from auditors, examiners, or other regulators; (c) respond to your requests; or (d) protect your, our, or others’ rights, property, or safety.

Merger, Sale, or Other Asset Transfers.

We may disclose and transfer information about you to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our business or assets.

At Your Direction.

We may disclose information about you to fulfill the purpose for which you provide it.

Consent.

We may also disclose information from or about you or your devices with your permission.

Your Choices

Marketing Communications.

You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.

Do Not Track.

There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.

Deletion of Your Information.

You have the right to request deletion of your personal information. We will honor deletion requests when:

The personal information is no longer necessary for the purpose for which it was collected
You have withdrawn your consent (where processing was based on consent)
You have a valid objection to our use of your personal information
The personal information has been processed unlawfully
We are required to delete the information to comply with a legal obligation

However, we may retain certain information if we have a legitimate business or legal reason to do so, such as:

To comply with legal obligations or respond to legal claims
To detect, prevent, or address fraud, security, or technical issues
To complete transactions or fulfill contractual obligations
To maintain records as required by law

Data Portability. You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format. You may request this information by contacting us using the methods described below.

Opt-Out of Data Sharing. You can opt-out of certain data sharing activities, including:

Targeted advertising: You can opt-out through your device settings or by contacting us
Analytics: You can opt-out of analytics tracking through your device settings
Marketing communications: You can unsubscribe from marketing emails using the link provided in each email

To request deletion, data portability, or to exercise other privacy rights, please contact us:

By email at: info@onelabel.app
By mail at: Onelabel AI Ltd, 75, Prodromou, ONEWORLD PARKVIEW HOUSE, Floor: 4th, 2063 Nicosia, Cyprus
Through the app settings "Contact us" section

We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request to protect your privacy and security.

Third Parties

The Service may contain links to other websites, products, or services that we do not own or operate. Please be aware that this Privacy Policy does not apply to your communications with third parties or your activities on any third-party services or any information you disclose to third parties. We are not responsible for the privacy practices or the content of third parties or third-party sites. If you have any questions about how third parties or third-party sites use information from or about you, you should contact them directly. We encourage you to read their privacy policies before providing any information to them.

Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

Encryption: We use encryption technologies (such as SSL/TLS) to protect data in transit between your device and our servers. We also encrypt sensitive data at rest.
Access Controls: We limit access to personal information to authorized employees, contractors, and service providers who need such information to perform their job functions.
Regular Security Assessments: We conduct regular security audits and assessments to identify and address potential vulnerabilities.
Secure Infrastructure: We use secure cloud infrastructure with industry-standard security controls and monitoring.
Incident Response: We have procedures in place to detect, respond to, and recover from security incidents.

While we implement these security measures, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

If you have reason to believe that your interaction with us is no longer secure, please immediately notify us using the contact information provided in the "Contact Information" section.

Children's Privacy

The Service is not intended for children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no part of the Service is directed to children.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately at info@onelabel.app or through the app settings "Contact us" section. We will take steps to delete such information from our systems as soon as reasonably practicable and in accordance with applicable law, including the Children's Online Privacy Protection Act ("COPPA").

If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly. If you believe we might have any information from or about a child under 13, please contact us using the information provided in the "Contact Information" section.

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA") provide you with certain rights regarding your personal information. This section describes your CCPA/CPRA rights and explains how to exercise those rights.

Categories of Personal Information We Collect. We collect the following categories of personal information:

Identifiers: Name, email address, IP address, and other unique identifiers
Commercial Information: Purchase history, payment information, and transaction records
Internet or Other Electronic Network Activity: Usage data, browsing history, search history, and interactions with our Service
Geolocation Data: General location information derived from IP address
Inferences: Preferences, characteristics, and behavior patterns derived from your use of the Service

Sources of Personal Information. We collect personal information from the following sources:

Directly from you when you register, use the Service, or communicate with us
Automatically from your device when you use the Service
Third-party services, such as social media platforms (if you sign up using social media) and payment processors

Business or Commercial Purpose. We use personal information for the following business or commercial purposes:

To provide, maintain, and improve our Service
To process transactions and payments
To communicate with you and provide customer support
For marketing and advertising purposes
For analytics and research to improve our Service
To detect and prevent fraud
For legal compliance and enforcement of our Terms of Service

Disclosure of Personal Information. We may share personal information with the following categories of third parties:

Service Providers: Companies that provide services on our behalf, such as payment processing, hosting, and customer support
Analytics Partners: Companies that help us analyze how users interact with our Service, such as Google Analytics
Advertising Partners: Companies that help us deliver and measure the effectiveness of advertising
Affiliates: Our corporate affiliates
Legal and Regulatory: As required by law or in connection with legal proceedings

Sale of Personal Information. We do not sell your personal information to third parties. We do not have actual knowledge that we sell the personal information of consumers under 16 years of age.

Your CCPA/CPRA Rights. As a California resident, you have the following rights:

Right to Know: You have the right to request that we disclose certain information about our collection and use of your personal information over the past 12 months, including: (a) the categories of personal information we collected about you; (b) the categories of sources from which we collected your personal information; (c) our business or commercial purpose for collecting or selling that personal information; (d) the categories of third parties with whom we share that personal information; and (e) the specific pieces of personal information we collected about you.
Right to Delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to Opt-Out of Sale: While we do not sell your personal information, you have the right to opt-out of the sale of your personal information if we were to engage in such activity in the future.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

How to Exercise Your Rights. To exercise any of your CCPA/CPRA rights, please contact us:

By email at: info@onelabel.app
By mail at: Onelabel AI Ltd, 75, Prodromou, ONEWORLD PARKVIEW HOUSE, Floor: 4th, 2063 Nicosia, Cyprus
Through the app settings "Contact us" section

We will verify your identity before processing your request. We may ask you to provide additional information to verify your identity. We will respond to your request within 45 days, or inform you if we need additional time (up to 90 days total).

Authorized Agent. You may designate an authorized agent to make a request on your behalf. The authorized agent must provide proof of your written permission to act on your behalf, or proof of power of attorney.

Shine the Light Law. California's "Shine the Light" law (Civil Code Section 1798.83) permits California residents to request information regarding our disclosure of personal information to third parties for their direct marketing purposes. As noted above, we do not sell your personal information to third parties for their direct marketing purposes.

Other State Privacy Rights

Residents of certain other states (including Virginia, Colorado, Connecticut, and Utah) may have similar privacy rights under their state laws. These rights may include:

The right to access your personal information
The right to correct inaccurate personal information
The right to delete your personal information
The right to obtain a copy of your personal information in a portable format
The right to opt-out of certain types of data processing, including targeted advertising and the sale of personal information

To exercise any of these rights, please contact us using the information provided in the "Contact Information" section. We will respond to your request in accordance with applicable state law.

If you are located in the European Economic Area ("EEA"), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation ("GDPR") regarding your personal information:

Right of Access: You have the right to obtain confirmation as to whether we process your personal information and to access your personal information.
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
Right to Erasure: You have the right to request deletion of your personal information under certain circumstances.
Right to Restrict Processing: You have the right to request restriction of processing of your personal information in certain situations.
Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that information to another controller.
Right to Object: You have the right to object to processing of your personal information, including for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

Legal Basis for Processing. We process your personal information based on the following legal bases under GDPR:

Consent: When you provide explicit consent for specific processing activities (e.g., marketing communications)
Contract Performance: To perform our contract with you and provide the Service
Legal Obligation: To comply with legal obligations (e.g., tax and accounting requirements)
Legitimate Interests: For our legitimate business interests, such as improving our Service, preventing fraud, and ensuring security (where such interests are not overridden by your rights and interests)

To exercise any of these rights, please contact us using the information provided in the "Contact Information" section. We will respond to your request within one month, or inform you if we need additional time.

International Data Transfers

Our Service is operated from Cyprus. If you are located outside Cyprus, please note that we may transfer, store, and process your personal information in countries other than your country of residence, including the United States and other countries where our service providers are located.

When we transfer personal information from the EEA, UK, or Switzerland to countries that are not recognized as providing an adequate level of data protection, we implement appropriate safeguards, such as:

Standard contractual clauses approved by the European Commission
Other appropriate safeguards as required by applicable data protection laws

By using our Service, you consent to the transfer of your personal information to countries outside your country of residence, which may have different data protection laws than your country.

Update Information

You can update information your account and profile information by logging in to your account on the Service.

Changes to This Privacy Policy

This Privacy Policy may be revised from time to time. We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective as of the last updated date below. If we materially change the ways in which we use or share information from or about you or your devices previously collected from you through the Service, we will make reasonable efforts to notify you of the changes by sending a notice to the primary email address provided to us and/or by placing a notice on the Service.

Data Retention

We retain your personal information for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need your personal information, we will securely delete or anonymize it, except where we are required to retain it for legal or regulatory purposes.

The retention period for different types of information varies based on the purpose for which it was collected:

Account Information: Retained for as long as your account is active, plus a reasonable period thereafter for legal and business purposes
Transaction Records: Retained for at least 7 years as required by tax and accounting laws
Usage Data: Retained in aggregated and anonymized form for analytics purposes
Marketing Communications: Retained until you opt-out or request deletion

Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you and relevant authorities as required by applicable law. We will notify you via email to the address associated with your account, or through other reasonable means, within the timeframes required by applicable law (typically within 72 hours where required). Our notification will include information about the nature of the breach, the types of information that may have been compromised, and steps you can take to protect yourself.

Your Rights to Access and Correct Information

You have the right to access and review the personal information we hold about you. You also have the right to request correction of any inaccurate or incomplete personal information. To exercise these rights:

You can update your account and profile information by logging into your account on the Service
For other requests, contact us using the information provided in the "Contact Information" section below

When you request access to your personal information, we will provide you with:

A copy of the personal information we hold about you
Information about the sources of the information
Information about how we use and share your information
Information about the retention period for your data

We will respond to your request within a reasonable timeframe and in accordance with applicable law (typically within 30 days, or 45 days for complex requests).

Automated Decision-Making. We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. If we implement such processes in the future, we will notify you and provide you with the right to object to such processing.

Contact Information

If you have any questions, comments, or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us:

Onelabel AI Ltd
75, Prodromou
ONEWORLD PARKVIEW HOUSE
Floor: 4th
2063 Nicosia
Cyprus

Email: info@onelabel.app

You may also contact us through the app settings "Contact us" section.

For privacy-related requests, including requests to access, delete, or correct your personal information, or to opt-out of certain data processing activities, please clearly indicate in your communication that you are making a privacy request.

Response Timeframes: We will acknowledge receipt of your request within 10 business days and respond to your request within the timeframes required by applicable law:

GDPR Requests: Within one month (may be extended by two additional months for complex requests)
CCPA/CPRA Requests: Within 45 days (may be extended by an additional 45 days for complex requests)
Other Jurisdictions: In accordance with applicable local laws

If we cannot fulfill your request, we will explain why and provide information about your right to appeal or lodge a complaint with a supervisory authority.