Privacy notice
Effective: 16 September 2026
This notice describes what personal data the Dominate mobile app processes, why, and what you can do about it. We have tried to write it in plain language and to describe only what actually happens in the app.
1. Who processes your data?
The controller: Prelec Máté, sole trader, registered address: 8800 Nagykanizsa, Dózsa György utca 115/B 1/3, Hungary. For privacy questions, you can reach us at dominatehu@outlook.com.
We have not appointed a data protection officer, because the app does not carry out processing on a scale or with a level of risk that would make this mandatory under Article 37 of the GDPR.
2. What data do we process?
2.1. Account data
To register, we ask for an email address and a password. We do not see the password and do not store it in readable form: it is handled by Supabase's authentication service, as an encrypted hash.
You can also sign in with an Apple or Google account. In that case, Apple or Google passes us only the data needed for identification: a unique identifier, your email address and, if you provide it, your name. We do not handle a password in this case. With Apple, you can also choose to hide your email address; we then receive an address forwarded by Apple.
2.2. Settings and usage data
| Data | What it is for |
|---|---|
| Allergen settings and watched ingredients | So that the analysis highlights the ingredients you are sensitive to or avoid (for example E250, palm oil). This may count as health data, see section 3. |
| Weekly scan count | To keep track of the free plan's weekly limit. We only store a count per week, not what you scanned. |
| Saved products | The list of products you have saved. We store it linked to your account so that it is kept when you change devices. Only what you saved yourself goes here. |
| Usage statistics | Aggregate counters: your total number of scans, your daily streak and your average score over the last week. They contain no product names or barcodes. |
| Push notification identifier | Only if you turn on notifications. This is a device identifier token, not your phone number or email address. |
| Error reports | If you report a faulty product, we save the text of the report, the product name and barcode, and which account sent it. |
2.3. Submitted product data and photos
Important: if you photograph a product or an ingredient list and it is added to the community database, the photo becomes publicly available: anyone who scans the same barcode will see it. So do not photograph anything that shows personal data, a face or anything else you would not want to share.
Data saved to the community product database (barcode, product name, brand, ingredients, category, nutrition values, product photo) is not linked to your account: we do not store which user it came from. This does not apply to error reports (see above).
2.4. What never leaves your phone
The following are stored only on your own device; we have no access to them, and they are not uploaded to our servers:
- scan and search history
- the cache of downloaded product data
- appearance settings (light/dark mode)
These disappear without a trace when you delete the app. From your history, only aggregate counters are produced (total scans, daily streak, weekly average score), and only these are stored on the server, linked to your account. The list itself, the product names and the barcodes do not leave your device.
2.5. What we do not collect
- There are no advertising or analytics trackers (no Google Analytics, Facebook SDK or similar).
- We do not ask for or store location data.
- We have no access to your contacts, your messages or your photo library as a whole, only to the image you choose.
- We do not sell or rent personal data to anyone.
3. On what legal basis do we process it?
| Processing | Legal basis (GDPR Article 6) |
|---|---|
| Creating and running the account | Performance of a contract, (1)(b) |
| Keeping track of the weekly limit | Performance of a contract, (1)(b) |
| Managing the subscription (Dominate Plus) | Performance of a contract, (1)(b): so that the subscription you bought is valid on all your devices and the purchase can be restored. |
| Saved products and usage statistics | Performance of a contract, (1)(b): it is part of the service that these stay with your account when you change devices. |
| Allergen settings and watched ingredients | Explicit consent, (1)(a) and Article 9(2)(a). This may be data concerning health, so we only process it if you provide it yourself; you can delete it at any time. |
| Push notifications | Consent, (1)(a). Can be turned off at any time. |
| Community product database | Legitimate interest, (1)(f): so that product data is available to other users too. This data is not linked to a person. |
| Error reports | Legitimate interest, (1)(f): correcting faulty data and filtering out abuse. |
4. Who do we share it with?
We use the following providers. Each of them acts as a processor or as an independent controller, under its own privacy policy:
| Provider | What it receives |
|---|---|
| Supabase | Storage of account data, settings and uploaded photos (database, authentication, file storage). |
| Vercel | Hosting for the websites (getdominate.app) and the gateway for the website search. The server keeps a technical log of requests (IP address, time, the page requested, browser identifier), which Vercel stores for a short time under its own retention rules. This only concerns visits to the website, not the app. |
| Google Fonts | The website's typeface is loaded from Google's servers, and your browser's IP address is sent to Google when it is. This also applies only to the website: the app uses the system's own typeface. |
| Apple and Google (sign-in) | Only if you sign in with an Apple or Google account: the fact of signing in, and from them we receive the identifier, the email address and the name. The email and password route does not involve them. |
| Google (Gemini) | The photos and ingredient texts sent for product analysis. The calls go through our own server, without your user account data. |
| Google Translate | The text of ingredient lists in other languages, for translation. |
| Open Food Facts, Open Beauty Facts, Open Products Facts and other public product databases | Only the scanned barcode. No data about you is sent to them. |
| Apple App Store | Purchasing and billing the subscription. Your card details are handled only by Apple and never reach us. |
| RevenueCat (subscription tracking) | Your account's internal, random identifier, the App Store purchase receipt, the name of the plan bought, the subscription's start and expiry, the device type and the app version. We do not send your email address or name. |
| Expo notification service | The push token, if you have turned on notifications. |
| Sentry (error reporting) | If the app runs into an error: the error description, the call stack, the device type and the app version. We do not send your name, email address or any IP-based identification, and the report cannot be linked to your account. We use it only to fix errors. |
Some of these may also process data outside the European Union (typically in the United States). In such cases the transfer is based on the European Commission's standard contractual clauses or adequacy decision.
5. How long do we keep it?
- Account data, settings: for as long as your account exists. They are removed immediately after deletion.
- Weekly scan count: until the account is deleted; broken down by week.
- Push token: until notifications are turned off or the account is deleted.
- Subscription data (RevenueCat): until the account is deleted; on deletion we also delete the record stored at RevenueCat. Apple keeps your purchase history under its own rules.
- Community product data and photos: kept indefinitely, because they are not linked to your account and also provide data for other users. If you want a specific uploaded photo removed, write to us (see section 8).
- Error reports: until the report has been investigated. When your account is deleted, we delete the text of the report, and the link between the report and your account is removed. The product name, barcode and the name of the ingredient in question are kept anonymously, because they show us what needs to be fixed.
6. What rights do you have?
Under the GDPR, you can request:
- Information and access: to find out what data we process about you.
- Rectification: if any of your data is inaccurate.
- Erasure: you can delete your account yourself in the app, see section 7.
- Restriction of processing and to object to processing based on legitimate interest.
- Data portability: to receive your data in a machine-readable format.
- Withdrawal of your consent at any time (this does not affect processing before the withdrawal).
We will reply to your request within one month at the latest. If you feel that we are processing your data unlawfully, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., naih.hu), or go to court.
7. How do you delete your account?
In the app: Profile → Delete account. Deletion is final, and it immediately removes your account, your allergen settings and watched ingredients, your scan counter and your push token, as well as the data stored on your device.
You can find a detailed description, and how to request deletion online, on the delete account page.
8. Contact
For any privacy question, request or complaint, write to dominatehu@outlook.com. Please include the email address you registered with, so that we can identify your account.
9. Children
The app is not intended for anyone under 16, and we do not knowingly collect data from them. If we become aware that a user under 16 has registered without parental consent, we will delete the account.
10. About health advice
The scores and analyses calculated by Dominate are for information only and do not constitute medical advice. Ingredient data comes partly from public databases and automatic image recognition, so it may be inaccurate or incomplete. If you have an allergy or another health sensitivity, always check the product's actual packaging.
11. Changes to this notice
If what data we process changes significantly, we will update this page and the date above. In the case of a significant change, we will also let you know in the app.