Effective date: April 22, 2026
NeverHadIt ("the App") is operated by A2ZAI LLC ("we", "us", "our"). This policy explains what data the App collects, how it is used, and your rights.
| Data | Stored on Device | Sent Externally | Purpose |
|---|---|---|---|
| Taste preferences (spice tolerance, flavor likes/dislikes, cuisine familiarity, adventure level) | Yes (Hive) | Yes — mirrored to Cloud Firestore under your anonymous Firebase ID, and sent with each scan to our Cloud Function | Personalize recommendations; restore your profile if you reinstall |
| Scan history (menu text and dish scores) | Yes (Hive) | Menu text is sent to our Cloud Function (which proxies to Google Generative AI) during scans; history is not uploaded | Analyze menu items against your profile |
| Camera images | Temporary only | Never | On-device text extraction (Google ML Kit) |
| Anonymous Firebase user ID | Yes | Yes — Firebase Authentication | Identify your install across reinstalls without collecting personal info |
| App events & crash reports | No | Yes — Firebase Analytics, Firebase Crashlytics | Aggregate usage analytics and crash diagnostics |
| Subscription status | Cached locally | Yes — RevenueCat | Manage subscription entitlements |
| Anonymous RevenueCat customer ID | No | Yes — RevenueCat | RevenueCat auto-generates a random identifier to track subscription state across reinstalls. Not linked to your name, email, or any personal information. |
| Advertising identifier (GAID / IDFA) | No | Yes — Google AdMob (free tier only) | Serve and measure ads |
| IP address and request metadata | No | Implicit with all network requests | Standard internet communication |
We do not collect your name, email address, phone number, location, contacts, health information, or any other personally identifiable information. No account or login is required to use the App.
When you scan a menu, Google ML Kit performs text recognition entirely on your device. The captured image is held only in a temporary cache during processing and is never uploaded. Only the extracted text, together with your taste profile, is sent to our Cloud Function (hosted on Google Cloud), which forwards the request to Google Generative AI (Gemini) for dish analysis. The response is returned to your device.
The App uses the following third-party services, each with their own privacy policies:
The App displays ads via Google AdMob for users on the free tier. AdMob may collect your device's advertising identifier to serve relevant ads. On iOS, you will be asked for permission before any ad tracking occurs (App Tracking Transparency). You can reset or disable your advertising identifier in your device settings at any time. Paid subscribers do not see ads.
We do not sell, rent, or trade your data. Data is shared with third-party services only as described in Section 4 and solely for the purposes of providing the App's functionality (dish analysis, subscription management, and advertising).
If you are located in the European Economic Area, United Kingdom, or California, you have the following rights:
The App is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided data through the App, please contact us and we will delete it promptly.
Local data is stored on your device using Hive. Network requests to our Cloud Function, Google Generative AI, and Firebase all use HTTPS. Data mirrored to Cloud Firestore is protected by Firebase security rules that restrict access to the anonymous ID that created it.
We may update this policy from time to time. The "Effective date" at the top will be updated accordingly. Continued use of the App after changes constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or wish to exercise your data rights, email contact@a2zai.app, use the support link in the App's Settings screen, or visit our data deletion page.