SPF Scout · Privacy

Your list stays on your phone.

SPF Scout compares a sunscreen’s ingredient list against ingredients you personally choose to avoid. Those choices are the most sensitive thing the product touches, so they are designed never to reach us in the first place.

last updated 1 September 2026

What this notice covers

The spfscout.com website, which is live today, and the SPF Scout mobile app, available on the App Store. Where something applies to only one of the two, this notice says so.

The website

There are no accounts, no sign-in, no advertising and no analytics or tracking scripts.

What our hosting provider records when you load a page:

  • Standard access logs— the request, the time, your IP address and your browser’s user-agent string. These are generated by the hosting infrastructure, not by us, and we do not join them to anything else. On our current hosting plan they are retained for roughly one hour and then discarded.
  • What you type into the search box — a search reaches the server as part of the URL so it can be answered. It is not linked to any profile, because the website has no profiles to link it to.

The website sets no cookies of its own and asks for no consent banner, because there is nothing to consent to.

The app: the profile never leaves the device

The ingredients you select, together with everything the app works out from them, stay in storage on your own device:

  • the ingredients and ingredient groups you choose to flag
  • products you save
  • the results of any comparison
  • your scan history

This is a structural property, not a promise about our conduct. The catalog database has no user-profile table — there is nowhere for a profile to sync to, and a request that tried to send one would have no endpoint to reach. Comparisons run on the device against a catalog the app has already downloaded, so the ingredient check happens without telling us what you are checking for.

Scanning is also local. Reading a label with the camera runs entirely on the device; the extracted text is shown to you for confirmation and is not uploaded.

Status

The on-device database is encrypted, with the key held in the platform’s own secure storage (iOS Keychain, Android Keystore) and never leaving the device. That encryption is implemented, and this notice will drop the qualification once it has been checked on a build installed from the store rather than a development one. The qualification is about our verification, not about a gap we know of.

What you can choose to send us

If a record is wrong, you can report it, and from the app you can submit a photo of a label. Both are deliberate actions you take. Photos are never uploaded automatically, a submission is refused by the database itself unless consent was explicitly confirmed, and nothing about your avoidance list is attached to what you send.

Who else is involved

  • Vercel — hosts the website and generates the access logs described above.
  • Supabase — hosts the catalog database: brands, products, ingredient lists and their sources. It holds no personal data about visitors.
  • Expo (EAS Update)— will deliver app updates once the app is released. When the app checks for an update, that request goes to Expo’s update service and carries build and update-channel information — nothing from your avoidance list or history.

We do not sell data, and there is no advertising network, data broker or analytics vendor in the product.

Children

SPF Scout is not directed at children and does not knowingly collect information from them. It has no accounts and asks for no personal details, so there is nothing for a child to submit beyond the deliberate actions described above.

Deleting your data

There is no account to close, because there is no account. Everything personal lives on your device, so removing the app removes it. We cannot delete it for you, and we cannot retrieve or restore it — we never had a copy.

Changes and contact

If this notice changes in a way that affects what is collected, the date at the top changes with it, and the change is recorded in the project’s public commit history.

Questions about this notice: spfscout@gmail.com

Not medical advice

SPF Scout provides educational ingredient and product-label information. It does not diagnose allergies or skin conditions, provide medical advice, or determine whether a product is safe or appropriate for you. Ingredient lists and formulations can change. Always verify the packaging and consult a qualified healthcare professional regarding allergies or skin conditions.

See also the terms of use.