Effective 3 September 2026
Privacy Policy
Decant is published by 2Vibe Müzik Prodüksiyon Edisyon San. Tic. Ltd. Şti. ("we"). This policy explains what the Decant iOS app does with your information. The short version: there is no account, no advertising, no tracking and no sale of data. Your shelf and routine stay on your phone.
1. Data that stays on your device
Products, ingredient lists, opening dates, your weekly routine, reminder settings, allergen preferences, skin concerns and past skin-check results are stored in a file inside the app's own container on your iPhone. We cannot read it. Deleting the app deletes it.
2. Data that leaves your device, and why
| What | Where it goes | Why |
|---|---|---|
| Barcode number | Open Beauty Facts (openbeautyfacts.org) | To look up the product name, brand and ingredient list. Only the digits are sent. |
| Skin-check photo and the concerns you ticked | Google (Gemini model through Firebase AI Logic) | To produce the skin check. The photo is sent once for that request. Decant does not store it, and it is not linked to your name or any account. Google processes it under its Firebase terms and does not use it to train models. |
| Anonymous usage events and crash reports | Google Firebase Analytics and Crashlytics | To see which screens are used and which crashes happen. Events contain counts and categories (for example "product added from barcode"). Product names, ingredient lists, free text and photos are never included. |
| Subscription status | RevenueCat | To know whether Premium is active and to restore purchases. RevenueCat uses a random identifier generated on the device. Payment itself is handled by Apple; we never see your card. |
| Device attestation token | Apple App Attest and Google Firebase App Check | To confirm requests come from a genuine copy of Decant and stop abuse of the skin-check service. |
The photo of a product's ingredient label is read on the device with Apple's Vision framework. It does not leave your phone.
3. What we do not do
- No account, e-mail address, name or phone number is asked for.
- No advertising SDK, no ad identifier, no cross-app tracking.
- No selling, renting or sharing of personal data with anyone for their own purposes.
- Reminders are local notifications scheduled on the phone. We do not run a push server.
4. Retention
On-device data lives until you delete the app. Skin-check photos are not retained by us at all. Analytics and crash data are kept by Google for up to 14 months and then deleted. RevenueCat keeps subscription records for as long as your subscription can be restored.
5. Your rights
Under the GDPR, the Turkish KVKK and similar laws you may ask what we hold about you, ask for correction or deletion, and object to processing. Because we hold no account, most of this is in your hands: delete the app and the data is gone. For anything else, write to 2vibetech@gmail.com.
6. Children
Decant is not directed at children under 13 and we do not knowingly collect information from them.
7. Changes
If this policy changes, the new version appears at this address with a new effective date. Material changes are also announced inside the app.
8. Contact
2Vibe Müzik Prodüksiyon Edisyon San. Tic. Ltd. Şti.
2vibetech@gmail.com