Privacy Policy
This policy explains what information CheckPeak collects, how we use it, and what rights you have over your data. We've written it in plain English because we think you deserve to actually understand it.
Information We Collect
Information you provide directly
When you create an account, we collect your email address and any profile information you choose to provide. If you contact us for support, we retain those communications to help resolve your issue.
Images you upload for scanning
When you use CheckPeak to scan a supplement or nutrition label, the image is transmitted to our servers for optical character recognition (OCR) processing. We do not permanently store your uploaded images. Images are processed in memory and discarded immediately after the scan result is returned to you. We do not use your label images to train AI models.
Scan results and usage data
We retain anonymised scan result data — the ingredients detected and their risk classifications — to improve the accuracy of our ingredient database. This data is not linked to your identity or account. We also collect standard usage analytics such as pages visited, features used, and session duration to understand how people use CheckPeak.
Saved stacks and preferences
If you use the SmartStack feature and save products to your account, we store those associations (your email address and the product IDs you have saved) to sync your preferences across devices.
Technical and device data
We automatically collect standard technical information including your IP address, browser type, device type, operating system, and referring URLs. This information is used for security, debugging, and aggregate analytics only.
How We Use Your Information
To provide the service
We use your information to operate CheckPeak — processing scans, returning results, syncing your saved stacks, and authenticating your account.
To improve accuracy
Anonymised scan data helps us expand and improve our ingredient database so CheckPeak gets more accurate over time. No personal information is involved in this process.
To communicate with you
We may send you transactional emails (account confirmations, password resets) and, if you opt in, occasional product updates. You can unsubscribe from marketing emails at any time.
To protect the service
We use technical data to detect abuse, prevent fraud, enforce our Terms of Service, and maintain the security and integrity of CheckPeak.
Your Rights
Access and correction
You can access and update your account information at any time from your account settings. If you need help correcting inaccurate data we hold about you, contact us and we will assist promptly.
Deletion
You can delete your CheckPeak account at any time. Deleting your account removes your email address, saved stacks, and all personally identifiable information from our active systems within 30 days. Anonymised, non-identifiable scan data is retained to support database accuracy.
Data portability
You can request a copy of the personal data associated with your account in a machine-readable format. Contact us at the email below to make this request.
European and California residents
If you are located in the European Economic Area, UK, or California, you have additional rights under GDPR and CCPA respectively, including the right to object to processing and the right to non-discrimination. Contact us to exercise any of these rights.
Data Security
How we protect your data
We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and strict access controls. Only a small number of authorised personnel have access to production systems.
No system is perfect
Despite our best efforts, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us responsibly at our support email before disclosing it publicly.
Children's Privacy
Age requirement
CheckPeak is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
Changes to This Policy
How we notify you
If we make material changes to this Privacy Policy, we will notify you by email (to the address associated with your account) and by posting a prominent notice on the CheckPeak website at least 14 days before the changes take effect. Continued use of CheckPeak after the effective date constitutes your acceptance of the revised policy.
Questions about this policy?
We're happy to explain anything in more detail. Reach out and a real person will respond — not an automated form letter.
hello@checkpeak.app