Effective October 10, 2026

Privacy Policy

Redish (formerly Unboxd AI) saves your profile and history to your account so they can return after sign-out or on another device.

Privacy questions

For questions about Redish or these data practices, contact:

jcsdevacc@gmail.com

Your account and saved data

Redish uses your email address to create and authenticate your account. Your name, optional profile photo, food preferences, allergy flags, scan history, generated recipes, and saved recipes are stored with your account and cached on your signed-in device.

Supabase provides account authentication and database hosting. Account and saved app data are sent to Supabase for sign-in, secure storage, synchronization, and account deletion. Database access is restricted so an authenticated user can access only the data attached to that account.

Barcode and food photos

The camera can recognize a barcode or capture a food photo only when you choose that feature. Barcode scanning does not save a photo. A scanned or manually entered barcode is sent to product-data providers so a matching public product record can be returned.

After you allow AI processing, selected food photos are compressed and sent through the Redish server to OpenAI for food analysis. Original full-resolution food photos are not stored with your recipes. A small food-photo preview may be stored with a generated or saved recipe and synchronized to your account through Supabase.

Optional AI food analysis and recipe generation

Only after you choose Allow, food analysis or recipe generation sends scanned product data, recipe requests, selected food photos, and selected goals, diet, allergens, and kitchen preferences through the Redish server to OpenAI. Your name, profile photo, and saved history are not included.

You can withdraw AI permission in Settings or Account controls. This prevents new AI requests but cannot recall a request already sent. Barcode lookup, ingredient display, and deterministic scoring remain available without AI.

Reporting a recipe

When you choose Report this recipe and send a report, Redish receives the recipe identifier, title and a limited text excerpt, your selected reason, any optional note you enter, your account identifier, and the submission time. These reports are stored separately in Supabase and are available to authorized Redish administrators to review content and improve safety and quality. The report does not attach your photos, profile, or saved history, and it is not sent to an AI service.

Reporting is optional and does not change your saved recipe. Please do not include personal or medical information in a report note. Reports are retained for review and follow-up while your account exists, unless removed sooner, and are deleted with your account.

Subscriptions and purchases

Apple or Google processes subscription payments for the platform you use and does not provide Redish with your payment-card details. RevenueCat receives purchase, renewal, expiration, trial, and entitlement information plus your Redish account ID and basic app or device metadata to validate purchases, restore access, prevent fraud, and provide subscription analytics.

Where enabled, Superwall receives your account and device identifiers, subscription-access status, app/session and paywall events, device attributes, and approximate location inferred from IP address for subscription functionality and analytics. Redish does not request precise device location or use these services for advertising or cross-app tracking.

AI retention and training

Redish sends Responses API requests with storage disabled. OpenAI states that API data is not used to train its models unless the developer explicitly opts in, and that abuse-monitoring logs may retain prompts and responses for up to 30 days unless different approved controls apply or longer retention is legally or safety-required.

Service and update diagnostics

The EAS Update service may process limited crash and update-delivery diagnostics plus ordinary network metadata to deliver and troubleshoot app updates. Redish does not use this information for advertising or cross-app tracking.

Optional product analytics

If you choose to share usage analytics, Redish uses PostHog to understand onboarding completion and subscription-screen use. Events describe onboarding steps, paywall views and actions, and subscription outcomes, with limited app-release details and a random app-instance identifier stored on your device. This identifier is separate from your Redish account and is not a name or email address.

Redish does not send Supabase account IDs, names, emails, health or food-preference answers, photos, recipes, free text, or unfiltered error messages to PostHog. It does not create PostHog person profiles, record screens or sessions, or use these analytics for advertising or cross-app tracking. GeoIP location enrichment is disabled; ordinary network metadata is involved when events are delivered.

Product analytics choices

Usage analytics are off until you choose to turn them on. You can change this choice on the in-app Privacy policy screen without signing in or subscribing, and your choice does not change access to app features. Turning analytics off stops new analytics events and clears queued events on this device. Your choice stays on this device when you sign out. Turning analytics off does not recall events already delivered, and account deletion does not automatically identify these separate app-instance records. Contact Support for related privacy requests.

Your choices and deletion

Open Settings or Account controls and choose Delete account, then confirm. Account controls is available during onboarding and on the paywall without a subscription. Deletion permanently removes your Redish account and its stored profile, photo, preferences, scans, and recipes, including their food-photo previews. Deleting the app alone does not delete the account. See the deletion instructions.

Account deletion does not cancel a store subscription or automatically erase billing, security, or service-provider records retained under their applicable policies. Contact Support for related privacy requests.

Food and health information

Scores, explanations, prices, and recipe nutrition are educational estimates, not medical advice. Product records may be incomplete or outdated. Always verify the physical package and every recipe ingredient for allergens, cross-contact, serving size, and medical needs.

A food photo cannot reliably reveal hidden ingredients, exact quantities, cross-contact, or allergens. Redish labels visual confidence, asks you to confirm the dish, and creates a reconstruction rather than claiming an exact copy. You remain responsible for checking every ingredient you use.

Services and licenses

Changes

Material changes to these practices will be reflected here and in the app before they take effect.