Legal

Privacy Policy

Applies to the Wheat mobile application  ·  Last updated: April 2026

Plain-language summary: Wheat stores your account credentials and shared ingredient research in the cloud. Your personal scan history never leaves your device. We use AI services to research ingredient safety. We do not sell your data.

01 Who We Are

Wheat is a mobile application published by H5 STUDIO, LLC, a limited liability company registered in the State of Washington, USA.

Contact: [email protected]

02 What We Collect

Information you provide

  • Email address — collected when you create an account
  • Password — stored as a secure hash by Firebase Authentication; we never see it in plaintext

Information stored in your account profile

When you configure the app, the following preferences are stored in your cloud account so they persist across devices:

  • Allergen filters you have enabled
  • Shopping country

Anonymized shared research data

When you scan a product barcode, Wheat looks up ingredient safety information. The research results are cached in our database indexed by barcode and ingredient name — not by your identity. This shared cache benefits all users and is not linked to your account.

What stays on your device only

  • Your scan history (which products you scanned and when)
  • Locally cached product data for offline access

This data is stored in a local database on your phone. We cannot access it, and it is permanently deleted when you uninstall the app.

Camera

Wheat uses your device camera solely to scan product barcodes. Camera images are processed on-device and are never transmitted to our servers.

What we do not collect

  • Location data
  • Device identifiers or advertising IDs
  • Your personal eating habits or dietary history
  • Payment information

03 How We Use Your Data

  • Account authentication — to verify your identity and secure your account
  • Preference sync — to restore your allergen filters and shopping country across devices
  • Ingredient research — barcodes and ingredient names are used to look up and cache safety data in our shared database
  • Service improvement — aggregate, anonymized usage data may be used to improve research quality

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

04 Third-Party Services

Wheat uses the following third-party services. By using Wheat, you acknowledge that data may be processed by these providers in accordance with their own privacy policies.

Service Provider Purpose Data shared
Firebase Authentication Google LLC Account creation and sign-in Email address
Cloud Firestore Google LLC Cloud database for research cache and account preferences Account preferences; anonymized product/ingredient data
Cloud Functions Google LLC Server-side ingredient parsing and research orchestration Product barcodes and ingredient text
Claude AI Anthropic PBC AI synthesis of ingredient health research Ingredient names and scientific literature excerpts
Gemini AI Google LLC Ingredient parsing and research retrieval Ingredient names and text
Open Food Facts Open Food Facts (nonprofit) Product database lookup by barcode Product barcode
USDA FoodData Central U.S. Department of Agriculture Nutritional data fallback Product name and barcode
Pinecone Pinecone Systems, Inc. Vector database for ingredient research corpus Ingredient search terms

Google's privacy policy: policies.google.com/privacy
Anthropic's privacy policy: anthropic.com/privacy

05 Data Retention

  • Account data — retained until you delete your account
  • Account preferences — deleted when you delete your account
  • Shared research cache — retained indefinitely; it is anonymized and not linked to any account
  • Scan history — stored only on your device; deleted when you uninstall the app or delete individual entries

You can delete your account at any time in the app under Settings → Account → Delete Account. Deletion permanently removes your email from our authentication system and your account preferences from our database.

06 Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (right to be forgotten)
  • Object to or restrict certain processing
  • Data portability

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

California residents (CCPA): You have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

EU/EEA residents (GDPR): The legal basis for processing your email address is contract performance (providing the service you signed up for). Preferences are processed on the basis of legitimate interest in providing a consistent experience. You may withdraw consent at any time by deleting your account.

07 Children's Privacy

Wheat is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us at [email protected] and we will delete it promptly.

08 No Medical Advice

Wheat is an information tool, not a medical service. Ingredient scores and health summaries are based on publicly available research and AI analysis. They are not a substitute for professional medical advice, diagnosis, or treatment. Always verify ingredient information on the physical product label, especially if you have allergies or specific health conditions.

09 Changes to This Policy

We may update this policy from time to time. We will notify users of material changes via an in-app notice or email. Continued use of Wheat after changes take effect constitutes acceptance of the revised policy.

This policy was last updated in April 2026.

10 Contact

For privacy questions, data requests, or concerns:

This agreement is governed by the laws of the State of Washington, USA.