Pick Right
FAQ
iOS & Android · out now
Pick Right
FAQ
iOS & Android · out now
Effective date: September 22, 2026
Pick Right helps you choose better produce, developed and operated by Dream Big Services Inc. This policy explains what information the app handles. The short version: no accounts, no tracking, no ads. The produce guide’s text and images ship inside the app, so browsing them sends nothing to us. Two features need an internet connection — the camera Scan and the in-app Chat — and they send only what you actively submit to Google for processing, as described below. A third, the optional “Use my location” row on the shopping-region screen, may need one to turn a coordinate into a place name. A fourth, the “Talk to us” screen, sends what you choose to write to us and is the one thing here we keep rather than discard — a note nobody kept could not be answered. A fifth, the News screen, only reads: it asks our server for the announcements we have published, and sends nothing about you at all.
Pick Right has no user accounts, no registration, and no sign-in, and we never ask for your name, email, or any identifying detail. We do not build a profile of you. The only information that ever leaves your device is what you actively submit to the optional AI features, with your chosen shopping region alongside a Chat question so the answer can fit where you are; an AI answer you choose to report; a note you write to us on the “Talk to us” screen, and — only if you turn the reply alert on — the address your phone’s notification service gives us so we can buzz it; anonymous usage counters — a per-device limit and app-wide feature-usage totals; a technical error report if the app breaks; a check for app updates each time the app opens; a check for new announcements when you open the home screen, which carries no identifier and nothing else from the app; a check with RevenueCat for whether this install has Pro, also each time the app opens, and your subscription status if you buy Pro; and, if you turn on “Use my location” on the shopping-region screen, an approximate coordinate sent to your phone’s own map service to be turned into a region name — read when you tap the row, and again each time you open the app, so your region can follow you when you travel. Like any internet connection, each of these also shows your device’s IP address to the server it reaches. Each is explained below.
The optional Scan feature uses your device camera so you can photograph produce and have the app identify it. The camera is accessed only while you are actively using Scan, and only the photo you choose to analyze is used. Pick Right does not access your photo library, record video, or use the camera in the background. If you never use Scan, camera permission is never requested. The core produce guide works without it.
The shopping-region screen offers an optional “Use my location” row. If you tap it, Pick Right asks for approximate location — city-level, roughly 1–3 km, never precise — and reads it at that moment. The coordinate is sent to your phone’s built-in map service (Apple on iOS, Google on Android) purely to convert it into a state or country name, which the app matches to one of its shopping regions. The coordinate is then discarded: we never receive it, never store it, never log it, and never attach it to any usage count. The only thing kept is the region you end up with — the same single word the screen has always saved when you pick a region by hand.
Once you have said yes, Pick Right also re-checks your approximate location each time you open the app, the same way and under the same rules — coarse, converted to a region name by your phone’s own map service, immediately discarded — so that if you travel or move, your region quietly follows you instead of waiting to be changed by hand. That is the only other time location is read: never in the background, never while the app is closed, and never more precisely than city level. If you would rather it stop, turn off location for Pick Right in your phone’s settings — the region screen’s list is always there to pick from by hand. If you never tap the row, location permission is never requested, and the core produce guide works without it.
Pick Right offers two optional AI features: an in-app Chat that answers produce questions, and Scan, which identifies produce from a photo. When you use them, the text you type or the image you capture is sent — through our own server, never with API keys exposed inside the app — to Google’s Vertex AI (Gemini) for processing, and the result is returned to you. A Chat question also carries your chosen shopping region — a region or country name, never a coordinate — so the answer can name what is in season near you and count a day the way food labels there do. This input is used only to generate your answer. We do not store your chat messages or scanned images on our servers, and they are not linked to your identity. The one exception is an answer you choose to report, described under Reported Answers below. Your own phone does keep a short record of your recent scans, photos included, so that the app can show you what you have scanned before — it stays on the device and is never sent anywhere; it is described under On-Device Storage below. Google’s handling of this data is governed by the Google Cloud Privacy Notice: Vertex AI is a Google Cloud service we buy under a business contract, so that notice is the one that applies, not the consumer privacy policy that covers a personal Google account. If you do not use Chat or Scan, nothing is transmitted.
Chat does not need to know anything about your health, and it never asks. Questions the app recognizes as health questions — ones that name a condition, an organ or a medicine — are answered by our server with a suggestion to ask a doctor or pharmacist, and are not sent to Google’s AI. If you include health details in another question, they are used only to answer it and, like every chat message, are not stored — unless you report that answer. Our Consumer Health Data Privacy Policy covers this in full.
To keep the free AI features sustainable and prevent abuse, Pick Right applies a daily usage limit per device, and gives each install a small one-time allowance of free scans and answers. To count both, the app generates a random, anonymous identifier — not your device’s hardware ID, not an advertising ID, and not any personal detail — and stores counts against it in Google Firebase Firestore. This identifier cannot be used to contact or identify you and is not combined with any other data. The same anonymous identifier accompanies the aggregate usage counts described under Analytics below — solely to cap how many counts one device can send per day; it is never stored together with those counts — and the crash reports and reported answers described further down, so that repeated failures from one device can be recognised as a single problem rather than many.
The daily limits reset each day, and those per-day counters are deleted from our systems automatically within approximately two days. The count of free scans and answers you have used is a single number with no expiry date, because a free allowance that reset itself would not be an allowance. On iPhone, the identifier stays in the phone’s secure storage even after the app is deleted, so reinstalling the app picks up the same count; on Android, reinstalling creates a new identifier.
Pick Right is free to download, and Pro is an optional paid upgrade. The payment itself is handled entirely by Apple’s App Store or Google Play — we never see or receive your payment-card details, billing address, or store account.
To know whether to unlock Pro, the app uses RevenueCat, a subscription-management service acting on our behalf. Each time the app opens, it asks RevenueCat whether this install has Pro, using a random, anonymous identifier that RevenueCat creates for the install, and RevenueCat keeps a record under it. When you buy, restore, or renew, the store’s purchase receipt and the state of your subscription are added to that record. That record carries no name, email, or account, and we cannot use it to identify you; it exists so a purchase made one day still unlocks Pro the next, and so an invalid receipt cannot. If you never buy anything, that record holds no purchase. RevenueCat’s handling is governed by its own privacy policy. We keep no purchase history on our own servers, and Apple’s and Google’s handling of the transaction is governed by their own privacy policies.
The app stores a small amount of data locally on your device: a flag remembering that you accepted this policy, your selected shopping region, the anonymous usage identifier described above, a count of how many times you have used the share feature (kept only on your device — it is never transmitted), and, once you have written to us at least once, the on/off setting for the reply alert together with a note that we have already asked you about it; and the announcements last read from the News screen, kept so that screen still works with no connection, together with the moment you last opened it, which is how the app counts for itself how many are new. If you use Scan, the app also remembers your recent scans so it can show them back to you: up to thirty entries, each recording which produce was identified and when, together with one small photo of it. Those photos are written to the app’s own private storage — never to your photo library — and one is kept per produce item, replaced when you scan that item again. The scan history and its photos stay on your phone and are never transmitted to us or to anyone else. Your shopping region is the one thing in this list that does leave the phone: it rides along with a Chat question, so the answer can say what is in season where you are and count a day the way food labels in your country count one. It is never stored — it is used to write that one answer and then gone; our server keeps no record of it. No coordinate is ever stored, whether or not you use the location row. This data is not linked to your identity. You can erase the scan history and its photos yourself at any time, without uninstalling: open Recent scans from the Scan screen and tap Clear. That deletes every saved entry and every stored photo from the phone immediately. Uninstalling the app removes all of the local data listed here, with one exception on iPhone: the anonymous usage identifier stays in the phone’s secure storage, which iOS keeps after an app is deleted.
Pick Right requests exactly three permissions, all optional, each asked only at the moment you use the feature that needs it: camera, for the optional Scan feature (see Camera above); approximate location, only if you tap “Use my location” on the shopping-region screen (see Location above); and notifications, only after you have written to us on “Talk to us” and said you would like to know when we reply (see Alerts below). Precise location is not requested and the app cannot read it. Declining any of them leaves the rest of the app fully usable — the region screen’s list of regions is always there to pick from by hand, and a reply is waiting on the “Talk to us” screen whether or not your phone ever buzzes. The app does not request access to your photo library, contacts, microphone, or any other device sensors, and the core produce guide works with no permissions at all.
Pick Right keeps anonymous, aggregate usage counts: when certain features are used (for example, an item page is opened, a share is started, a scan completes), the app tells our server to add one to that day’s app-wide total. That is the entire record — a number per feature per day, with no user identifier attached to it, no location, and no content. These counts cannot be linked to you or your device, and they exist only so we can tell which features are useful. Beyond these counts, Pick Right uses no analytics SDKs, no advertising SDKs, and no cross-app or behavioral tracking. We do not profile you and we do not sell data. The app does send us a technical report when it hits an error, described in the next section. Everything that leaves your device is listed under Data We Collect above — none of it is used for advertising or tracking.
When the app hits an error, it sends us a short technical report so we can find and fix the problem. The report contains: the error message and the technical stack trace produced by the app’s own code, the app version, the update version installed on your device, whether the device is iOS or Android, and the operating system version. It is sent to our own server — no third-party crash-reporting or analytics company is involved. If a crash stops the app from starting at all, the app’s update software also passes that error message to Expo on its next update check — see App Updates.
These reports contain nothing about who you are and no content: never anything you typed into Chat, never a photo you scanned, never the item you were looking at, never your region or location, and never anything you wrote. The error message and stack trace are written by the app’s own code and by the software libraries it uses, not by you.
The anonymous identifier described above is sent with the report and stored alongside it, so that one device crashing repeatedly can be told apart from many devices each crashing once — the two mean very different things. It cannot be used to contact or identify you. Crash reports are automatically deleted after 30 days.
If you would rather send nothing at all, the app can be used offline for the core produce guide; error reports are only sent when the device has a connection.
Some Chat answers are written by Google’s AI rather than taken from our own guide, and each one is marked “AI answer”. If one of them looks wrong, you can tap Report under it and pick a reason: wrong or misleading, unsafe or harmful, offensive, or something else. Nothing is sent unless you do.
A report is sent to our own server and contains: the question you asked, the AI answer you are reporting, the reason you picked, the language the app is set to, and the anonymous identifier described above. There is no box to type in, and it contains nothing else from the conversation. We keep it so a person can check the answer and fix what caused it. It is not linked to your identity, and it is automatically deleted after 30 days.
Settings has a “Talk to us” screen for writing to us — a bug, a mistake in the guide, a question, anything — and reading what we write back. A real person answers; there is no bot on the other end. Nothing is sent unless you write something, and the produce guide never asks you to.
There are no accounts here either, so your conversation is held against the same random usage identifier described above — that is what lets your phone find it again, and it is all we know about who you are. A note carries the words you typed and three technical details that help us answer it: the language the app is set to, whether the phone is iOS or Android, and the app’s version. There is no other box to fill in and nothing else from the app is attached — not what you were looking at, not your region, not your location.
This is the one thing in the app we keep rather than discard, because a conversation we threw away could not be answered. A conversation and every note and reply in it are deleted automatically one year after the last message in it, and that clock restarts each time either side writes. Please treat it as what it is — a message to a person that is kept — and leave out anything you would not want stored for that long.
Deleting the app does not delete a conversation, because it lives on our server and not on your phone. If you want yours gone sooner, write to [email protected] and quote enough of what you wrote for us to find it: there is no name on it, so your own words are the only way either of us can tell which conversation is yours.
Pick Right sends one kind of notification and no other: a buzz saying we have replied on “Talk to us”. No offers, no reminders, nothing about produce, and nothing from the News screen — announcements sit there quietly and never buzz. This one exists only because a reply to a note you sent is easy to miss.
Nothing is sent until you say yes twice — once on a page of ours that appears after your first note, and once to your phone’s own permission box. If you never write to us, you are never asked at all. Settings → Alerts turns it back off whenever you like, and so does your phone’s own settings screen.
Saying yes hands us one new thing: the address your phone’s notification service gives out for this install. It is an address for a phone, not for a person, and nothing can be read out of it. We store it as a single field on your own conversation — one phone, one conversation, one address — replaced if your phone issues a new one, erased the moment you turn the alert off, and deleted with the conversation on the same one-year schedule. Deleting the app ends it too: the first buzz that bounces tells us the address is dead and we forget it on the spot.
The alert never carries what we wrote. It says the screen’s name and “New reply”, in the language the app is set to, and nothing else — so nothing private lands on your lock screen, and the reply is read only on the screen where it was kept all along. Delivering it means handing that address and those two words to Expo’s push service and from there to Apple’s or Google’s, which is how any app reaches a phone; both are listed under Third-Party Services below.
Each time it opens, Pick Right asks Expo’s update service whether a fix or content update is waiting, so it can reach you without a trip to the app store. Expo is run by 650 Industries, Inc. in the United States. The request carries the app’s version, its platform, and a random identifier that Expo’s software creates for this install — a different one from the usage identifier above. If the app crashed while starting last time, the request also carries that error message, cut to 1,024 characters, so a broken update can be found and pulled. It never carries anything you typed, photographed or chose. Expo’s handling is governed by its own privacy policy.
Every device on the internet has an IP address, and every server it talks to sees it — ours, Expo’s and RevenueCat’s included. Our servers use it for one thing: to refuse an address that sends too many requests in a minute. That count is held only in the server’s memory, is never written to storage, and is gone when the server restarts. Separately, Google Cloud, which runs our servers, records the address in its standard request logs; we look at those only to investigate faults and abuse, and they are deleted automatically after 30 days. Cloudflare, which serves this website, sees the address of anyone who opens a page here — and of the phone that quietly checks our app-link files so a pick-right.app link can open the app — and keeps its own request logs for the same narrow purposes, under its own retention. We never store an IP address with the usage identifier, and never use it to work out where you are.
Pick Right is built with Expo (expo.dev), a React Native framework, and uses Expo’s update service as described under App Updates and, only if you turn on the reply alert, Expo’s push service to deliver that one notification as described under Alerts; it includes no Expo analytics. Our own servers, and the anonymous usage limits, aggregate usage counts, crash reports, reported answers and “Talk to us” conversations they keep in Google Firebase Firestore, run on Google Cloud in the United States. The optional AI features send Chat and Scan input to Google Vertex AI (Gemini), which Google may process in any of its regions, including outside the United States. Both our servers and Vertex AI are Google Cloud services, and Google’s handling of what reaches them is governed by the Google Cloud Privacy Notice, not by the consumer privacy policy that covers a personal Google account. The website you are reading, including this policy, the Terms of Use and the two small files your phone fetches to confirm that a pick-right.app link may open the app, is hosted and delivered by Cloudflare, Inc. in the United States; Cloudflare is not involved in Chat, Scan, or anything else the app sends, and its handling is governed by its own privacy policy. If you use the optional location feature, the approximate coordinate is handled by your phone’s own built-in map service — Apple’s on iOS, Google’s on Android — solely to return a place name in real time, governed by Apple’s Privacy Policy and Google’s Privacy Policy respectively. If you turn on the reply alert, those same two companies carry the buzz to your phone as its notification service, under the same policies — and all it contains is the two words described under Alerts. If you buy Pro, your purchase receipt and subscription state are handled by RevenueCat as described under Purchases above, governed by its own privacy policy. No advertising networks are integrated into Pick Right, and no third party receives your data for its own purposes.
Put together, data from the app goes to these companies and places: Google LLC, for our servers in the United States and for Chat and Scan, which Google may process in any country where it runs Gemini; RevenueCat, Inc., in the United States; 650 Industries, Inc. (Expo), in the United States; Cloudflare, Inc., in the United States, which serves this website and the app-link files and receives nothing else; and, only if you use the location row or turn on the reply alert, Apple or Google as your phone’s map service and notification service. Google, RevenueCat, Expo and Cloudflare handle it for us under their contracts with us, and each gives it protection at least equal to what this policy describes.
Everything the app sends travels encrypted. Our servers run on Google Cloud, which also encrypts the records it stores. The keys that unlock Google’s AI stay on our server and are never shipped inside the app, and apart from Google running our servers for us, only Dream Big Services Inc can reach the stored records. We keep as little as we can, and most of it deletes itself on the schedules described above.
Pick Right is meant for adults: our Terms of Use require users to be at least 18. It is not directed at children, and we do not knowingly collect personal information from children. The app has no accounts and never asks anyone who they are. The optional Chat and Scan features transmit only what a user actively submits; parents should be aware that text or photos a child submits to these features are processed by Google as described above.
Pick Right never asks for your name, email or account. Under the General Data Protection Regulation (GDPR), though, a random identifier tied to one device counts as personal data even when nobody knows whose device it is, and so does an IP address. That covers the usage identifier and the crash reports, reported answers and “Talk to us” conversations stored with it, the notification address of anyone who turns the reply alert on, the update identifier Expo receives, and IP addresses in server logs. What you write in a note is whatever you chose to put in it, so it is personal data in the ordinary sense as well. Dream Big Services Inc is responsible for this data (the “controller”).
We use it on the basis of our legitimate interests (Article 6(1)(f)): keeping the free AI features from being abused, counting the free allowance, finding and fixing crashes, and checking answers you report. What you type into Chat or photograph with Scan is used only to give you the answer you asked for, and a note you send us is kept only to answer it (Article 6(1)(b)). The reply alert runs on your consent, which Settings → Alerts withdraws at any time (Article 6(1)(a)). Google, Expo and RevenueCat handle this data for us as service providers. Our servers are in the United States, so the data leaves the EU; it is transferred under the EU’s Standard Contractual Clauses included in those providers’ terms.
Most of it deletes itself: daily counters within about two days, crash reports, reported answers and server logs after 30 days, and a “Talk to us” conversation a year after its last message. The count of free scans and answers has no expiry date. Because we never learn who you are, we have no way to tell which records are yours (GDPR Article 11), so we cannot look them up to show or erase them. A conversation is the one exception, and only because you can tell us what you wrote: quote enough of your own note and we can find that conversation, show it to you, or delete it. You can object to this processing or complain to your local data protection authority, and you can write to [email protected] with any question.
The same applies in the United Kingdom under the UK GDPR. If you are in the UK and unhappy with how we have handled your data, you can complain to us first at [email protected]: we will acknowledge your complaint within 30 days and answer it without undue delay. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Pick Right does not sell or share personal information, and does not use it for advertising. California law counts device identifiers and IP addresses as personal information, so the usage identifier, crash reports, reported answers, “Talk to us” conversations and server logs described above fall under it. Because we never learn who you are, we have no way to tell which records are yours, so for most of it there is nothing we can look up or delete on request; it deletes itself instead, as described under Data Deletion below. The exception is a conversation you started, which we can find if you quote what you wrote. You can write to [email protected] with any question. The optional AI features send your input to Google only to produce your answer.
Pick Right is mindful of India’s Digital Personal Data Protection Act, 2023 (DPDPA). The app collects no name, phone number, email or account. The identifiers, IP addresses and “Talk to us” conversations described above are used only for the purposes stated in this policy, and you can write to [email protected] with any request about them. Input you submit to the AI features is processed by Google as described above. If this changes in a future version, this policy will be updated accordingly.
Pick Right has no accounts, so there is no profile to delete. What our servers hold is tied only to the random usage identifier, never to a name or email. The scan history and its photos can be deleted from inside the app whenever you want — Recent scans, then Clear — and uninstalling the app removes the rest of the app’s local data, except that on iPhone the anonymous usage identifier stays in the phone’s secure storage. None of the per-device records we keep are linked to you, and they are kept for different lengths of time: the daily request counters are deleted automatically within approximately two days, crash reports, reported answers and server request logs after 30 days, and a “Talk to us” conversation a year after its last message, while the single number counting the free scans and answers you have used has no expiry date — a free allowance that reset itself would not be a limit. A conversation is the one record deleting the app does not end, because it is on our server; turning the reply alert off erases your phone’s notification address from it straight away, and quoting your own words to us gets the whole conversation deleted at any time. The app-wide daily feature totals contain no identifier at all, so there is nothing in them that could be tied back to any person. To send as little as possible, do not use the Chat or Scan features, do not write to us on “Talk to us”, and do not turn on “Use my location” (or turn location off for Pick Right in your phone’s settings, which also stops the re-check on open); the app still checks for updates and sends usage counts and error reports whenever it has a connection, and the core produce guide works with no connection at all. For anything else, write to [email protected].
If this policy changes materially, the updated version will be posted at this URL with a new effective date. Continued use of the app after a policy update constitutes acceptance of the revised policy.
This privacy policy is governed by the laws of the State of Florida, United States. Any disputes arising in connection with this policy shall be subject to the jurisdiction of the state and federal courts located in the State of Florida. This does not take away any right your local law gives you, including the right to complain to your data protection authority or to bring a claim in the courts where you live.
Questions or concerns about this policy? Email [email protected]
Pick Right is operated by Dream Big Services Inc.