Yuka - Food & Cosmetic Scanner

"Geolocation Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. We collect location data such as information about your device's location, which can be either precise or imprecise. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address)."

Yuka explicitly states it may track location continuously, not just while the app is in use, and collects both precise and imprecise location data via GPS and IP address — excessive for a food/product scanner app.

"Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. The third parties we may share personal information with are as follows: Cloud Computing Services — Google Cloud Platform; Communicate and Chat with Users — MailChimp, Mandrill, Brevo; Web and Mobile Analytics — Google Analytics, Google Analytics for Firebase, WordPress Stats; User Account Registration and Authentication — Facebook Login, Firebase Authentication, NeverBounce."

Yuka shares user data with a large number of third-party services spanning analytics, marketing, cloud computing, and authentication — many of which collect data directly from users' devices via embedded SDKs.

"We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Google Analytics Demographics and Interests Reporting. These features rely on Google advertising cookies and identifiers in order to provide aggregated demographic and interest data."

Using Google Analytics Advertising Features with advertising cookies and identifiers enables cross-service tracking and demographic profiling of users, even if Yuka claims the data is used only for internal analytics.

"Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). We may also collect information about the phone network associated with your mobile device."

Yuka collects extensive device identifiers, carrier information, and system configuration data that goes well beyond what a food/cosmetics scanner needs for core functionality.

"We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification."

Yuka reserves the right to update the privacy policy at any time, with notification only being optional ('may notify'), and continued use constitutes acceptance of changes.

"We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements."

No specific deletion timelines are provided, and Yuka retains data even after account termination for broad, open-ended reasons like fraud prevention and investigations.

"If you would at any time like to review or change the information in your account or terminate your account, you can: Contact us by email at team@yuka.io or using the contact details provided at the end of this document. Log in to your account settings and update your user account."

Account termination requires contacting support via email rather than offering a clear self-service deletion option in the app, and the policy only mentions updating (not deleting) via account settings.