Privacy Policy

The short version

PureCheck works because of public data, not personal data. We collect what the app needs to show your scores and your history, and nothing that would let us build an advertising profile of you.

• We do not sell or rent personal information.
• We do not run advertising and do not use third-party ad trackers.
• We do not ask for or store your precise location.
• You can delete your history, and your account, from inside the app.

What we collect

Account information

If you sign in with Apple, we receive a stable identifier and the name and email address you choose to share. Apple’s Private Relay is fully supported: if you hide your email, we only ever see the relay address.

Activity you create in the app

• Products you scan or search, and the scores returned for them.
• ZIP codes you look up in the water check, and the reports returned.
• Items you save to your history, and the preferences you set during onboarding.

A ZIP code identifies a public water system covering thousands of people. It is not a home address, and we do not combine it with device location.

Technical and diagnostic data

PureCheck does not currently include third-party analytics, advertising, or crash-reporting SDKs. Apple, Google, or your operating system may provide platform-level diagnostics under your device and store settings. If you contact support, we process the technical information you choose to include so we can investigate the issue.

Purchases

PureCheck is a paid app. Purchases are processed by the Apple App Store or Google Play. We receive confirmation of your entitlement from the store. We never see or store your card number, billing address, or any payment credential.

What we never do

• Sell, rent, or trade personal information to third parties.
• Share your scan or water history with advertisers or data brokers.
• Track you across other apps or websites.
• Use your data to make automated decisions with legal or similarly significant effects.

How we use data

• To return a score for the product or ZIP code you asked about.
• To store your history and preferences locally on your device.
• To tailor Today’s picks and alternatives to the categories you selected.
• To investigate support requests, prevent abuse of our proxy, and improve the scoring method.
• To meet legal, tax, and accounting obligations.

Where the law requires a lawful basis (for example the UK and EU GDPR), we rely on performance of our contract with you to run the app, our legitimate interest in keeping it secure and reliable, and your consent where consent is requested.

Data sources and processors

Product and water information comes from public sources:

• Open Food Facts — packaged product labels, ingredients and additives.
• USDA FoodData Central — reference nutrition data for fresh and generic foods.
• EPA SDWIS — public water system records, reported violations and open issues.
• ZipCheckup — the API PureCheck uses to retrieve EPA SDWIS-derived reports by ZIP code.

Looking up a product or a ZIP code may send that barcode, search term, or ZIP code to these services or to our own servers. It is never sent with your name attached.

Our service providers are Apple for Sign in with Apple, iOS distribution, and purchases; Google for Android distribution and purchases; Expo for app build and submission tooling; and Vercel for website hosting and the USDA lookup proxy. PureCheck does not currently use a hosted account database, third-party analytics service, or third-party crash-reporting SDK.

Storage and retention

Your profile, Apple sign-in record, preferences, and scan and water history are stored locally on your device. We do not sync this information to a PureCheck-hosted account database. Deleting an item removes it from local history, and deleting your account in the app removes the locally stored account, profile, and history records.

Product and ZIP lookups are processed by the providers named above. Vercel processes our proxy requests in the United States by default, and these providers may process request and service data in the United States or other countries where they and their subprocessors operate. If you use PureCheck outside the United States, this may involve an international transfer. Where applicable, transfers are handled under the contractual and legal safeguards offered by those providers. Provider logs and transaction records are retained under each provider’s own terms and legal obligations.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal information, to object to certain processing, and to withdraw consent. Residents of the EU and UK have these rights under the GDPR; residents of California have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

Most of these are available directly in the app under Profile. For anything else, email support@purecheck.fit and we will respond within the period required by your local law. You may also complain to your local data protection authority.

Children

PureCheck is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will delete it.

Security

Data is encrypted in transit. Access to production systems is restricted to the people who need it. No service can promise perfect security, but we work to keep the amount of data we hold small enough that a breach would expose very little about you.

Changes to this policy

We will update this page when our practices change and revise the “last updated” date above. Material changes will be announced in the app before they take effect.

Contact

PureCheck · support@purecheck.fit