This explains what Laddoo collects, why, and what you can do about it. It is written to be read rather than to be defensible.
What you can do without an account
Search the database, read any product page, and read every factual label record we hold. None of that requires an account, and none of it is gated. The label data is the point of the service and gating it would defeat the purpose.
A device that has never signed in gets a small number of scans. We count those against the device, not against a person.
What we collect if you sign in
From Google: your name, your email address, and your profile picture. Nothing else. We do not request access to your Gmail, your contacts, or your Drive, and the consent screen will show you the same three items.
From you: the profiles you create - the allergies and ingredients you have asked us to check for - and the scans you make.
From your scans: the photographs you upload, the fields read from them, and the verdict produced. Photographs are used to extract the label and to let a reviewer check a low-confidence reading.
Health information
An allergy is health information about you, and we treat it as the most sensitive thing in the database. It is used for one purpose: to check a packet against your list and tell you the result. It is not used for advertising, it is not sold, it is not shared with a manufacturer, and it is not used to build a profile of you for any other purpose.
Profiles for children
A profile can be created for a child. Under the Digital Personal Data Protection Act, 2023, a child’s data carries additional obligations, including verifiable parental consent, and a prohibition on behavioural monitoring and on targeted advertising directed at children. Laddoo does not advertise at all, to anyone.
Where the data lives
In India. The database, the object storage holding scan images, and the backups are all hosted in Indian regions.
What you can ask for
A copy of everything we hold about you. Correction of anything that is wrong. Deletion of your account, your profiles and your scan history.
One limit, stated plainly rather than buried: deleting your account removes your profiles, your history and your images. It does not retract label facts that your scans helped confirm, because those facts are now part of a shared public record that other people rely on, and they carry no identifier linking them to you.
Contact
Write to privacy@laddoo.in. We answer within thirty days, which is the statutory period.