Privacy Policy - Is This Healthy?

Privacy Policy Is This Healthy? Extension

We're committed to protecting your privacy. Learn how we handle your data when you use our AI-powered browser extension.

Effective Date: 05/23/2025

Last Updated: 05/23/2025

1. Introduction

Is This Healthy? ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Chrome extension.

2. Information We Collect

2.1 Automatically Collected Information

  • Chrome Email Address: We collect your Chrome profile email address for user authentication and identification
  • Chrome User ID: We collect your Chrome profile ID as a unique identifier
  • Product Information: When you analyze a product, we collect:
    • Ingredient lists from product pages
    • Product titles and URLs
    • Analysis timestamps

2.2 Information We Do NOT Collect

  • First names or last names
  • Personal addresses or phone numbers
  • Credit card information (payments handled by Stripe)
  • Browsing history outside of analysis requests
  • Personal files or documents

3. How We Use Your Information

We use the collected information to:

  • Authenticate users through Chrome's identity system
  • Provide ingredient analysis services
  • Cache analysis results for improved performance (3 days maximum)
  • Manage subscription services
  • Improve our AI analysis algorithms

4. Data Storage and Retention

4.1 Temporary Storage

  • Analysis results are cached locally in your Chrome browser for up to 1 hour for faster access
  • Analysis results are stored on our servers for up to 3 days for performance optimization

4.2 User Data

  • Email addresses and Chrome IDs are stored securely on our servers
  • We retain user accounts as long as the extension is actively used
  • Users can request account deletion at any time

5. Data Sharing

We do NOT sell, trade, or share your personal information with third parties, except:

  • Stripe: For payment processing (they handle all payment data directly)
  • Legal Requirements: When required by law or to protect our rights

6. Data Security

We implement industry-standard security measures including:

  • HTTPS encryption for all data transmission
  • Secure server infrastructure
  • Limited access to personal data
  • Regular security audits

7. Your Rights (GDPR Compliance)

If you are in the European Union, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Receive your data in a structured format
  • Objection: Object to processing of your personal data

To exercise these rights, contact us at isthishealthy.ai@gmail.com

8. International Data Transfers

Your data may be processed on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

9. Children's Privacy

Our extension is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy periodically. Users will be notified of significant changes through the extension or our website. Continued use constitutes acceptance of the updated policy.

11. Third-Party Services

11.1 Chrome Identity API

We use Google Chrome's Identity API for authentication. Google's privacy policy applies to their services.

11.2 Stripe

Payment processing is handled by Stripe. Stripe's privacy policy governs payment data handling.

12. Contact Information

For privacy-related questions or requests:

13. Legal Basis for Processing (GDPR)

We process personal data based on:

  • Consent: You consent to use our extension
  • Contract: To provide the analysis service you requested
  • Legitimate Interest: To improve our services and prevent fraud

14. Data Protection Officer

For GDPR-related inquiries in the EU:

Email: isthishealthy.ai@gmail.com (if applicable)

This privacy policy is designed to comply with GDPR, CCPA, and other major privacy regulations. Users in different jurisdictions may have additional rights under local laws.