Ingredo

Ingredo Data Sharing Agreement

Version 1.0-draft · 2026-10-14

In short

Use Ingredo free by sharing your fridge photos, your label corrections and the dishes you choose. We use them to improve Ingredo and to train food-recognition models that we may license to other companies. Faces and text are removed. You can stop any time.

• What we collect, for each fridge scan that ends with a dish you pick: the photos, the ingredients Ingredo found, your corrections, the four dishes suggested and the one you chose (these dish titles are used only to improve Ingredo and are never licensed), your language, region, season and the day.
• What is removed: before upload, your phone shrinks each photo, blurs faces and text and deletes hidden photo data such as location. If it cannot, nothing is uploaded.
• What a trace never contains: your name, email, Apple ID, Ingredo user ID, diet settings, the time of day or device identifiers.
• How to stop: any time, in Profile > Plan, even after we stop offering the option. Collection stops at once and your shared photos and data are deleted. Models already trained with them are kept.

You accept this agreement by ticking "I am 18 or older" and tapping "I agree". If you tap "Not now", nothing changes and nothing is collected.

Who this agreement is with

This agreement is between you and STRATEGIC DATA ARCHITECTS LLC, 1209 Mountain Road Place NE, Ste R, Albuquerque, NM 87110, United States ("we", "us"). It applies only if you choose "Share your data" in Ingredo. It adds to the Terms of Service and the Privacy Policy.

Who can join

• You must be 18 or older.
• Share only photos of your own fridge, cupboards and food.
• Do not photograph people, documents, letters, medicine or anything private.

What we collect

While you share, Ingredo creates a "trace" each time you scan your fridge and then pick one of the suggested dishes (at most 6 traces a day). A trace contains:

• the fridge photos you took for that scan (at most 4), after the redaction described below;
• the list of ingredients Ingredo detected;
• your corrected list: the ingredients you renamed, removed or added;
• the titles of the four dishes Ingredo suggested, and the one you chose, each marked as AI output;
• your app language, your phone's region setting, the season and the day (the date in UTC, not the time).

What we remove, and what we never collect

Before a photo leaves your phone, Ingredo, on the phone itself:

• shrinks it to at most 1024 pixels on its longest side;
• finds faces and text with Apple's Vision framework, which runs on your phone (the photo is not sent anywhere for this);
• pixelates and blurs every face and every piece of text it finds, such as labels and handwriting, with a margin around each;
• saves it again as a JPEG of at most 300 KB with only the picture: no hidden data such as location, time or camera details.

If detection is not available, fails, or takes longer than 15 seconds, nothing is uploaded for that scan. You still get your meal. Our server checks every photo again and refuses any that still carries hidden data or is larger than 1024 pixels or 300 KB.

Detection is not perfect. A face or some text can be missed, and a photo can show other things about your home. If you think you shared something private, stop sharing: your traces are deleted. You can also write to privacy@ingredo.net.

A trace never contains your name, email, Apple ID, Ingredo user ID, diet settings, the time of day or device identifiers. The time does exist elsewhere: our storage provider records when each photo was uploaded, a few seconds after the meal it belongs to, and our meal records keep that meal's time with your account. Our server logs, which are linked to your account, also record when you joined and when you stopped. Storage keeps the upload time as long as the photo; logs are deleted after a short time.

How traces are kept apart from your account

Traces are stored in private storage, without your user ID. So that you can stop and have your traces deleted, your phone keeps a random contributor key, and our server keeps only a one-way code of that key with your account. Each account has one key; if your phone loses it and you join again, we first delete the traces of the old key. The key is stored in Ingredo's files on your phone, which iOS includes in your iCloud or device backups, and deleting your account removes it from the phone. While your account exists, we can find your traces. They are pseudonymous, not anonymous, and our Privacy Policy treats them as personal data.

What you allow us to do

You give STRATEGIC DATA ARCHITECTS LLC a worldwide, royalty-free, non-exclusive licence to use, copy, store, annotate and modify your traces in order to:

• improve Ingredo;
• train, test and evaluate food-recognition models;
• license, and charge for, those food-recognition models, and services built on them, to other companies.

For models already trained or evaluated with your traces, this licence is perpetual and irrevocable: a trained model cannot be untrained. For the traces themselves, it ends when you stop sharing or 24 months after each trace was collected, whichever comes first, and the traces are then deleted.

The four dish titles in a trace, including the one you chose, are generated by Google's AI model. Each is stored marked as AI output, and the data we can license leaves marked titles out automatically. We use them only to improve Ingredo, and we leave them out of every model and dataset we license to other companies.

We may use service providers, such as cloud storage and computing providers, to do this for us, under contracts that keep them bound by this agreement.

If we sell or transfer Ingredo or our business, or the part of it that holds the traces, the traces and this licence may move to the buyer, on the same terms.

What we will never do

• Sell, rent, license or give away the photos, labels or traces themselves as a dataset. The only exception is a sale or transfer of our business, as described above.
• Share anything that identifies you.
• Try to identify you or anyone else in a photo.
• Use traces for advertising or to build a profile of you.
• License a model that is built to reproduce the photos it was trained on.
• License the dish titles suggested by Ingredo's AI, including the one you chose, or any model trained on them.

What you get

While you share, you do not pay for meals: you get up to 21 meals in any rolling 7 days. If you also have a weekly subscription, the subscription is used first, and the two do not add up: you still get up to 21 meals in any rolling 7 days. You get no money or other payment for your traces.

Stopping

You can stop at any time in the app (Profile > Plan). "Stop sharing" stays there as long as anything you shared is still linked to your account, also after we stop offering the option. Deleting your account also stops sharing. When you stop:

• collection stops at once;
• your traces are deleted, including copies in our training and evaluation data;
• models already trained or evaluated with them are kept;
• meals from sharing stop, and Ingredo uses your other plans or offers you the choices again.

If deleting your shared photos from storage fails, nothing more is collected, "Stop sharing" stays available until the deletion succeeds, and deleting your account waits until your traces are gone. Stopping does not affect what happened before you stopped.

Proof of your consent

When you accept, we record the agreement version, a fingerprint (sha256) of the agreement text, a one-way code of your contributor key, that you confirmed you are 18 or older, when you accepted and, later, when you stopped. The record has no user ID. When you stop sharing or delete your account, we keep this record without any link to your account. It is our proof that the shared data was collected with your consent, and we keep it for as long as we keep your traces or models trained on them.

Special categories of data

We do not ask for, and do not want, health, religious, political or other sensitive data. Diet settings are never part of a trace. If a photo shows something sensitive, such as medicine, please do not share it, or stop sharing.

If we end this option or change this agreement

• We may stop offering "Share your data" at any time. Collection then stops at once. If you were sharing, your meals from sharing continue until the end of your current 7-day period, and then Ingredo offers you the other choices. To share again later, you have to agree again. Traces already shared stay under this agreement.
• If we change this agreement, Ingredo asks you to agree to the new version. Nothing new is collected until you do.

Your privacy rights

Our Privacy Policy explains your rights, including access, deletion and complaints to a data protection authority. Our legal basis for traces is your consent, which you can withdraw at any time by stopping.

Law and contact

The governing law and disputes section of the Terms of Service applies to this agreement. Contact: privacy@ingredo.net, or STRATEGIC DATA ARCHITECTS LLC, 1209 Mountain Road Place NE, Ste R, Albuquerque, NM 87110, United States.