YUROKA Yuroka Studio / KATKI — Privacy Policy
KATKI — Privacy Policy
KATKI is an app that reads the barcode or the ingredients text of packaged food. This policy explains what happens to your data when you use it. The short version: your photos are read on your phone and never sent anywhere. A barcode search sends only the barcode number.
In short
- Photos are read on your phone and are never sent anywhere.
- A barcode search sends only the barcode number to Open Food Facts.
- No account, no ads, no tracking. On Android, Google's on-device text recognition may send anonymous diagnostics to Google (section 8).
1. Who we are
KATKI (package name net.yuroka.katki) is published under the developer name Yuroka by an individual developer based in Türkiye. You can reach us at yuroka@yuroka.net.
2. What stays on your phone
KATKI takes a photo of the label with your camera, or opens a photo you pick from your gallery. The text in the photo is read on your phone: with Apple Vision on iPhone and with Google ML Kit on Android. The photo and the text it reads are not sent to us and are not shared with anyone. Barcode scanning also happens on your phone, and camera images are not sent anywhere. With KATKI Pro, the app keeps a history of your last 100 results (the verdict, the date, the product name if you scanned a barcode, and the flagged items) and your “My list” choices, in the app's storage on your phone only. They are never sent to us or to anyone else, and “Clear history” in the app deletes the history. Without KATKI Pro nothing is kept. The app's own settings (language, the priorities you pick on the first screen) also stay on your phone.
3. Barcode search
When you scan a barcode or type one in, KATKI looks the product up in Open Food Facts. Open Food Facts is an open, non-profit food database that anyone can add to, and it is independent from us. The only thing sent to it for the search is the barcode number. No name, account, photo, location or KATKI identifier is sent. As with every internet request, the IP address the request comes from is visible to the server. The request also carries the app's name and version (KATKI/1.0) and our contact address (yuroka@yuroka.net); these identify the app, not you. The search server belongs to Open Food Facts. We do not run it, and we do not see who looked up what. What Open Food Facts keeps is covered by its own privacy policy: world.openfoodfacts.org/privacy. Without internet, the barcode search does not work. Reading a label photo works offline.
4. Open Food Facts data
The product name and ingredients found by barcode come from Open Food Facts (world.openfoodfacts.org). The database is made available under the Open Database License (ODbL) 1.0: opendatacommons.org/licenses/odbl/1-0/. The result screen shows the line “Source: Open Food Facts (ODbL)” with a link to the product page.
5. What we do not collect
KATKI has no account system, so we do not know who you are. It contains no advertising, no advertising ID and no tracking. We did not add an analytics tool of our own either. We do not collect, receive or store your photos, the text read from them, your location, contacts, name or email address, and we do not knowingly collect personal data from anyone, including children. RevenueCat and Google ML Kit, described in sections 7 and 8, process their own technical data.
6. Permissions
The camera permission is asked for to read barcodes and labels. It is asked when you open the screen that needs it, not when the app starts. When you pick a photo from your gallery, only the photo you pick is used; the rest of your gallery is not looked at. You can withdraw the permission at any time in your phone's settings. If you do not allow the camera, you can type the barcode or pick a photo from your gallery.
7. Purchases
KATKI works with a subscription. Purchases are handled by Apple or Google Play, under their own terms and privacy policies; we never see your payment details. To manage your subscription status and unlock what you bought, the app uses RevenueCat. RevenueCat processes your purchase history and an anonymous app user ID. This data is not used for tracking and is not linked to your identity. RevenueCat also uses it to prepare subscription reports for us. RevenueCat receives no name, email address, photo or text read from a photo from the app. Its privacy policy is at www.revenuecat.com/privacy
8. Google ML Kit on Android
In short: Google's on-device text recognition may send anonymous diagnostics to Google. We have no analytics of our own and we never see this data. On Android, reading text and barcodes is done on the phone with Google ML Kit models, which are bundled with the app or provided by Google Play services. According to the list Google publishes, ML Kit collects technical data: for example the device model, the Android version, the app's name and version, an identifier specific to the installation, and speed and error counts. Google says this identifier is not meant to identify a person or a device on its own. The photo and the text it reads are not on that list. Google states that it does not transfer this data to third parties. Details: developers.google.com/ml-kit/android-data-disclosure. On iPhone, reading is done with Apple Vision, and no data is sent to us or anyone else for this reading.
9. Retention
We hold no data about you, so there is nothing to keep or delete on our side. The app's own settings, your history and your “My list” choices stay on your phone and are removed when you uninstall KATKI (the history can also be cleared in the app). Purchase records are kept by Apple, Google Play and RevenueCat, barcode search records by Open Food Facts, and ML Kit data by Google, each under its own policy.
10. Your rights
Because we do not hold personal data about you, there is usually nothing for us to give you, correct or erase. Under the Turkish Personal Data Protection Law (KVKK, Art. 11) and, if you are in the EU, the GDPR, you can still ask whether any data about you is processed, request information, ask for correction or deletion, and object. Write to yuroka@yuroka.net; we answer within 30 days. Requests about purchase records, barcode search records or ML Kit data can also go to Apple, Google Play, RevenueCat, Open Food Facts or Google. You may complain to the Turkish Personal Data Protection Board or to your local data protection authority.
11. Changes
We may update this policy. The current version is always on this page, and the date above shows the last update.
12. Contact
Questions about this policy: yuroka@yuroka.net.