Privacy Policy
Last updated: 4 November 2026 · Translation: the Italian version prevails.
This page explains what data the Tutora app processes, why, for how long and with which services. It applies to users in Italy, the European Union, Switzerland and San Marino.
In short
- We do not ask for your name, email or phone number. The app creates an anonymous account on its own, identified only by a code.
- Your pet's profile stays on your phone.
- Label photos are used to read the label. Before we store them, we remove the location and the other hidden data in the photo. We delete them 30 days after the reading.
- We do not sell your data. We show no ads. We do not track you across other companies' apps and websites.
1. Who is the controller
The controller is Abdelfattah Chrouqi, sole proprietorship Eftel Studio, VAT number IT01594640110, based in Santo Stefano di Magra (SP), Italy.
For any privacy question, write to support.tutora@gmail.com.
We have not appointed a data protection officer (DPO), because it is not required for our activity.
2. What data we process and why
Anonymous account
On first launch the app creates an anonymous account on our server. The account only has a random code and its creation date. Your phone keeps the access key to this account.
We need it to link your scans, the photos you send and your subscription to the same device, without asking you to sign up.
Scans
When you scan a barcode we store the product code, whether we found it, the date and time, together with your account code. If you tell us whether a product is for dogs or cats, we also store your answer.
We need them to give you the result and for the daily limits on scans and photos. When a product is not in our database, our server asks Open Food Facts for the barcode only: none of your data reaches them.
We also use them to tell you if a product you scanned is recalled.
Label photos
If a product is missing or its label has changed, you can send us 1 to 3 photos of the package and, if you wish, the brand and the name. Section 4 explains what happens to the photos.
Recalls and saved products
The app shows official recalls of dog and cat food. To point out those that concern your products, we store the list of products you saved on the server.
If you turn on recall alerts we also store your preferences (alerts on or off, only your products or all recalls, dog or cat) and your phone's notification code (push token). See section 5.
Subscription
If you buy Premium, Apple handles the payment. From RevenueCat, the service that checks purchases, we only receive the type of subscription, whether it is active and when it expires, linked to your account code. We never see your payment details or your Apple ID.
Technical data
Like any online service, the servers log the IP address, the date and time of requests and the type of app. We use them only for security, to block abuse and to fix errors, and we delete them within 30 days.
Summary table
| Data | Why | Legal basis (GDPR Art. 6) | How long |
|---|---|---|---|
| Anonymous account code | Running the app | Performance of a contract (b) | Until you delete the account. If you do not use the app for 24 months, we delete the account and all linked data |
| Scans and "dog or cat" answers | Result and daily limits | Performance of a contract (b) | Until you delete the account |
| Label photos, brand and name typed by you | Reading the label, giving you the score, checking the reading | Performance of a contract (b) and our legitimate interest in improving the database (f) | 30 days from the reading, then deleted |
| Ingredients and values read from the photos | Product database, visible to everyone | Legitimate interest (f) | No limit, but with no link to you from 30 days after the reading |
| Saved products and recall preferences | Recalls | Performance of a contract (b), at your request | Until you delete the account |
| Push token | Recall alerts | Performance of a contract (b), at your request | Until you uninstall the app or turn off alerts, then deleted |
| Subscription status | Premium | Performance of a contract (b) | Until you delete the account |
| IP and technical request data | Security, abuse, errors | Legitimate interest (f) | 30 days |
3. Data that stays on your phone
This information is stored only on your phone and does not reach us:
- your pet's profile: name, species, sex, age, breed, weight, activity, neutering, food sensitivities, health issues, photo;
- the products it eats today;
- the history of recent scans and your saved products (a copy, to open them offline);
- the reminder before the end of the free trial, which is a notification scheduled on the phone.
We use the profile for personal notes on the result, for example when an ingredient is among the sensitivities you entered. These data stay until you delete them or delete the app.
4. Label photos
- Before sending, the app resizes the photo and creates a new copy without hidden data (GPS location, phone model, date). Our server checks and removes them again before storing.
- Storage. Photos go to a private storage, in a folder tied to your account code. They are not public and no other user sees them.
- Reading. We send the photos, without your account code, to Google Gemini API, an artificial intelligence service we use under a paid contract. Gemini reads the label text: ingredients, analytical constituents, additives. With the paid service Google processes the photos only on our behalf and does not use them to train or improve its products. It keeps them for a limited time only to detect abuse of the service.
- Checks. Our system checks the reading, for example that the barcode in the photo is the one you scanned.
- Shared database. If the checks pass, the label reading and the score enter our database and become visible to all users. If there is a doubt, you see a provisional score and a member of our team checks the photos before publishing the data. Other users only get the facts read from the label and the score, never the photos or who sent them.
- Deletion. 30 days after the reading we delete the photos. From then on only the text read from the label stays in the database, with no link to you or your account.
Yes: we use the photos and the data read from them to improve our product database. We do not use them for anything else and we do not give them to anyone, except the providers listed in section 7.
Photograph only the package. Avoid people, documents, addresses or other personal data in the frame.
5. Notifications
The app can remind you that your free trial is ending with a notification scheduled on the phone: it does not go through our servers.
We also use push notifications to alert you about official recalls of dog and cat food.
- Turn on: in the app, during setup or in Settings > Recalls ("Impostazioni > Richiami"), turn on recall alerts and accept the iOS prompt.
- Turn off: turn off recall alerts in Settings > Recalls. When you turn off alerts or uninstall the app, we delete your phone's notification code.
To send alerts we use the Expo service (United States) and Apple's notification service. They receive your phone's notification code and the text of the alert.
You can turn off all the app's notifications in iOS Settings > Notifications > Tutora.
6. In-app purchases
Purchases go through the App Store. Apple processes payment data as an independent controller, under its privacy policy. RevenueCat receives the purchase confirmation from Apple and technical device data (model, iOS version, language, country), linked to an anonymous code.
7. Providers and transfers outside the EU
We use these providers. They process data on our behalf (processors, GDPR Art. 28) under a data protection agreement.
| Provider | What it does | Where | Transfer safeguards |
|---|---|---|---|
| Supabase | Server, database, photo storage | Database in the EU (Frankfurt, Germany); some support services in the United States | European Commission Standard Contractual Clauses |
| Google (Gemini API, paid service) | Reading label photos and texts | Google infrastructure, including the United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
| RevenueCat | Purchase verification | United States | Standard Contractual Clauses |
| Expo | Sending push notifications | United States | EU-US Data Privacy Framework |
Apple processes data as an independent controller for the App Store and payments.
Apple is also an independent controller for the push notification service.
You can ask for a copy of the safeguards at support.tutora@gmail.com.
8. What we do not do
- We do not sell or rent your data.
- We show no ads and use no advertising tools.
- We do not track you across other companies' apps and websites and we do not use the phone's advertising identifier.
- We use no third-party analytics or crash reporting services.
- We do not ask for your location or your contacts.
- We make no automated decisions with legal effects on you. The score is about the product, not the person.
9. Deleting your data and account
- In the app: Settings > Delete my data ("Impostazioni > Elimina i miei dati"). We immediately delete the anonymous account and all linked data: scans, photos, preferences and subscription status. Data on the phone are deleted too.
- By email: write to support.tutora@gmail.com. To find your account we will ask for the code shown in Settings.
The ingredients and values read from your photos stay in the database, with no link to you, because they are now part of the product information.
Deleting the account does not cancel the subscription: cancel it in your Apple ID settings (see the Terms of Use).
If you only delete the app without using "Delete my data", the anonymous account stays on the server, unusable, and is deleted after 24 months of inactivity.
10. Your rights
You have the right to:
- know what data we hold and get a copy (access);
- correct them (rectification);
- have them deleted (erasure);
- ask us to limit their use (restriction);
- receive them in a machine-readable format (portability);
- object to processing based on our legitimate interest (objection).
Write to support.tutora@gmail.com. We answer within one month. It is free.
You can lodge a complaint with a supervisory authority:
- Italy: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it. If you live in another EU country, you can also contact your national authority.
- Switzerland: under the Federal Act on Data Protection (FADP) you have the same rights. The authority is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.
- San Marino: Autorità Garante per la protezione dei dati personali of the Republic of San Marino (Law no. 171/2018), www.garanteprivacy.sm.
11. Minimum age
You must be at least 14 years old to use Tutora. If you are under 14, you may use it only with the consent of a parent or guardian. If we learn that we received data from a child under 14 without consent, we delete them.
12. Security
Communication between the app and the server is encrypted. Each account can read only its own data. Photos are kept in private storage. Only the controller can access the administration systems.
13. Changes
If we change this page, we update the date at the top. If the changes are important, we tell you in the app.