Who We Are
Dtoxify ("we", "us", "our") is a food transparency service operated as a WhatsApp-based bot. We help users understand the health implications of the products they consume by providing science-backed analysis of product ingredients. Our service is accessible at dtoxify.life and via WhatsApp.
What Data We Collect
We collect the minimum data necessary to provide and improve our service. Here is exactly what we store and why:
| Data | Source | Why We Collect It | Retention |
|---|---|---|---|
| Phone number | Automatic via WhatsApp | Required to send and receive messages. This is your unique identifier. | Until you request deletion |
| Name | WhatsApp profile | To personalize your experience | Until you request deletion |
| Email address | Voluntarily provided | Health tips, updates, re-engagement. Earn +50 points. | Until you request deletion |
| Language preference | Selected during onboarding | To deliver scan results in your chosen language | Until you request deletion |
| Allergy profile | Voluntarily provided | To warn you about allergens in scanned products | Until you request deletion |
| Scan history | Your scans | To show your history and track points usage | Until you request deletion |
| Product photos | Sent by you | To detect barcodes and extract ingredient text. Photos are processed and not stored permanently. | Deleted after processing |
| Points balance | Calculated | To manage your free/earned scans | Until you request deletion |
How We Use Your Data
We use your data exclusively to provide, improve, and communicate about the Dtoxify service. Specifically, we use it to deliver scan results and health analysis, match your allergy profile against product ingredients, send you scan results in your preferred language, track your points balance and scan history, send health tips and updates (only if you provided your email), and improve our scoring algorithms based on aggregate, anonymized usage patterns.
What We Do NOT Do
We do not sell your data to third parties — ever. We do not share your personal data with advertisers, data brokers, or marketing companies. We do not use your scan history for targeted advertising. We do not retain product photos after barcode detection is complete. We do not track your location beyond what WhatsApp provides.
Third-Party Services
To provide our service, we share limited data with the following third parties:
- Meta (WhatsApp Business API): Your messages are transmitted through WhatsApp's infrastructure. Meta's privacy policy applies to the messaging layer.
- Google Cloud Vision API: Product photos are sent to Google's API for barcode detection and text extraction. Photos are processed in transit and not stored by Google for our account.
- OpenAI API: Product data (not your personal data) is sent to generate natural language analysis. No personally identifiable information is included in API calls.
- Open Food Facts: Product barcode lookups query the Open Food Facts database (open source, ODbL license). No personal data is sent.
Your Rights
Under GDPR (EU/EEA/UK)
If you are in the European Economic Area or United Kingdom, you have the right to access all personal data we hold about you, rectify any inaccurate data, erase your data ("right to be forgotten"), restrict processing, port your data to another service, object to processing, and withdraw consent at any time.
Under DPDPA 2023 (India)
If you are in India, you have the right to access a summary of your personal data, correct or update inaccurate data, erase your data, and receive grievance redressal.
Under CCPA/CPRA (California, USA)
If you are in California, you have the right to know what personal information we collect, delete your personal information, and opt out of the sale of personal information (we do not sell personal information).
How to Exercise Your Rights
You can exercise any of these rights by messaging "delete my data" on WhatsApp to request complete data deletion, sending "clear allergies" to remove your allergy profile, or contacting us at the email below for any data access, rectification, or portability requests. We will respond within 30 days.
Data Security
Your data is stored on encrypted servers with SSL/TLS in transit. Access is restricted to the service operator. Our database uses SQLite with file-system level permissions. We do not store passwords (WhatsApp handles authentication).
Data Retention
We retain your data for as long as you use the service. If you request deletion, all personal data is removed within 30 days. Anonymized, aggregate statistics (total scans, popular products) may be retained indefinitely as they contain no personal information.
Children's Privacy
Dtoxify is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
International Data Transfers
Your data may be processed in servers located outside your country of residence. Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses or other approved transfer mechanisms to ensure adequate protection.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes through the WhatsApp bot or on this page. The "Last updated" date at the top indicates when the policy was last revised.
Contact Us
For any privacy-related questions, data requests, or concerns, please contact us on WhatsApp at +91 9360 765 428 or by visiting dtoxify.life.