Privacy Policy
SafetySieve is a mobile app that tells households about U.S. FDA and USDA recalls that may affect them. It is run by Idempotent Studio LLC ("we"), 2603 Clarion Ln, Fort Collins, CO 80524. This policy says what we collect, why, who else handles it, how long we keep it, and what you can do about it. Questions: privacy@idempotent-studio.com.
What we collect
Only what deciding which recalls concern you needs, and what running an account takes.
- Your account: the email address and account identifier Google (or Apple) gives us when you sign in, the language you read the app in, your phone's time zone (so notifications arrive in daytime), and when you accepted these documents.
- Your household: the U.S. states you shop or live in; and, only if you add them, the allergies, medications and medical devices you want recalls checked against, and whether you want recalls of products for animals. These are recorded for the household as a whole: we never ask which person they belong to. For a device, we keep the model or the device identifier from its box, never its serial or lot number.
- How you use the list: which recalls you have marked read or bookmarked, your notification settings, and a record of the notifications we sent you.
- Your phones: a push-notification token for each phone you sign in on, and whether it is Android or iPhone. Google's notification service (Firebase) also gives the app an installation identifier when it starts, used only to deliver notifications.
- Your subscription: whether you have one and until when, as Google Play reports it through RevenueCat. We never see or store your payment card.
- Sharing a subscription: if you share one with another account, each of you can see the other's email address and who pays. Nothing else of either household is shared.
We do not read your phone's location (the states you choose are the only place we know), and we do not collect your contacts, photos or files. The app contains no advertising or analytics tracking. What you search for in the app, and a barcode you scan, is sent to look it up and is neither stored nor logged; the camera image itself stays on your phone. A medication name you type is looked up in our own copy of FDA's drug directory and is never sent anywhere else.
How we use it
To decide which recalls concern your household and show them to you; to send the notifications you chose; to keep your account signed in and your subscription working; to answer you when you write to us; and to keep the service secure (for example, limiting repeated sign-in attempts). We do not use it for advertising, profiling or anything else, and we do not sell it, rent it or trade it.
Who else handles it
Only the companies we need to run SafetySieve, each for that purpose alone:
- Render hosts our servers and database in the United States.
- Google provides sign-in, delivers notifications to Android phones (Firebase Cloud Messaging), and sells the subscription (Google Play).
- Apple delivers notifications to iPhones and provides Sign in with Apple, where you use them.
- RevenueCat keeps track of your Google Play subscription. It knows you only by your account number, never your email or anything about your household.
- The FDA's openFDA service receives the words you type when searching for a device to add, sent from our server with nothing that identifies you.
Notifications pass through Google's and Apple's delivery services, so they never carry an allergy, medication, device or other personal detail: only that a recall may concern your household, and whether it is urgent. The details are fetched from our server when you open the app.
We would disclose information beyond this only if the law required it, and we would tell you unless the law forbade it.
How long we keep it
- Your account and household details: for as long as you have the account.
- The record of notifications sent: one year, then deleted.
- Sign-in throttling keeps a scrambled form of your network address, never the address itself, for about a day. Our hosting provider's logs may briefly record network addresses, as any web service's do.
- When you delete your account, you are signed out everywhere at once and notifications stop. For 30 days, signing in again restores it; after that it is erased: your household, its allergies, medications and devices, your read marks, bookmarks and notification record. We keep a record that the account was deleted and when, and of what we did on it (access we granted, a deletion you asked for by email), with its account number and, where it came from you, your email address: our own account of what we did.
Recall notices are public records published by the agencies, and are kept.
Your choices and rights
- See and change it: everything about your household is on the app's Household tab, where you can change or remove any of it at any time.
- Delete it: in the app's Settings, or without the app as our account deletion page describes.
- Get a copy, or ask anything else: write to privacy@idempotent-studio.com. We answer within 30 days, and we may ask you to confirm the request from the email address on the account.
- Notifications: turn them off, or change how often they come, in Settings.
Residents of Washington, Nevada, Connecticut and other states with consumer health data laws: our Consumer Health Data Privacy Policy describes the rights those laws give you. We do not sell personal information, and we do not use it for targeted advertising.
Children
SafetySieve is for adults. It is not directed to children under 13, and we do not knowingly collect information from them. A household's allergies or medications may concern a child, entered by the adult who holds the account. If you believe a child has created an account, write to us and we will delete it.
Security
Information travels over encrypted connections. Your sign-in is kept in your phone's secure storage, our servers check every request against your own account, and access to our systems is limited to the people who run the service. No system is perfectly secure; if a breach ever affected your information, we would tell you as the law requires.
Links to the agencies
Each recall links to the agency's own notice and files on fda.gov or fsis.usda.gov. Those sites are not ours, and their own privacy policies apply when you visit them.
Do Not Track
The app does not track you across other apps or websites, so it has nothing to change when your browser or phone sends a "Do Not Track" or similar signal.
If SafetySieve changes hands
If Idempotent Studio LLC or SafetySieve were sold or merged, your information would pass on only under the promises of this policy, including never selling it or using it for advertising, and we would tell you first.
Changes to this policy
If this policy changes in a way that matters, the app asks you to accept it again before you continue, and the version above changes.
Contact
Idempotent Studio LLC, 2603 Clarion Ln, Fort Collins, CO 80524 · privacy@idempotent-studio.com