Privacy Policy for EagleEye AI

Effective Date: November 7, 2025 · Also available as plain text.

This Privacy Policy explains how Shenzhen Minping Technology Co., Ltd. ("EagleEye AI", "we", "us", or "our") collects, uses, discloses, and protects information when you use the EagleEye AI mobile application and related services (the "Services"). Our official website is https://minping.io.

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

We collect information to operate, improve, and secure the Services:

• Information You Provide
  • Account Information: When you create an account or sign in (including via Google Sign-In or Apple Sign-In, where available), we collect your name, email address, and profile picture (if provided).
  • Health Profile Information (Optional Feature): To provide personalized food analysis, you may optionally create a "Health Profile" where you provide:
    • Basic information: gender, age
    • Special conditions: pregnancy, breastfeeding, or planning pregnancy
    • Allergy information
    • Medical history and health conditions
    • Purpose: To provide personalized risk alerts and recommendations based on your health profile when analyzing food labels
    • Collection method: You voluntarily provide this information in the app's Health Profile feature
    • Multiple Profiles: You may create multiple health profiles (e.g., for different family members) within your account. Each profile is stored separately and associated with your account.
    • Note: Creating a health profile is entirely optional. You can use the app without providing this information, though personalized analysis will not be available. We will only collect and process this sensitive health information with your explicit consent.
  • Communications: When you contact us (e.g., via email), we collect your contact details and the content of your message.
• Information Collected Automatically
  • Usage and Analytics: We use analytics (e.g., Firebase Analytics) to understand app usage (device type, OS version, app events such as open_app, scan_done) and improve performance. This data is generally aggregated or de-identified.
  • Log and Device Data: We may collect basic device information, IP address, timestamps, and diagnostic data to maintain security and reliability.
  • Image Data: When you upload images of food ingredient labels for analysis, we process and store these images on secure servers to provide results.
• Purchase and Transaction Information
  • When you make in-app purchases (via Apple App Store or Google Play), we collect transaction details including purchase records, virtual currency balance ("Fiery Eyes Beans"), and transaction history.
  • Purpose: To manage your account balance and provide purchased services.
  • Note: Payment processing is handled by Apple/Google; we do not collect your credit card or payment method details.
• Permissions
  • Camera and Photos: With your permission, the app may access your device camera and photo library solely to allow you to capture or select images for analysis.
• Sensitive Personal Information
  • As described above, we collect sensitive health information (gender, age, pregnancy status, allergies, medical conditions) only when you voluntarily create a Health Profile, and only with your explicit consent. We do not collect other categories of sensitive personal information such as precise geolocation, financial account numbers, government IDs, or biometric templates for identification purposes. If this changes, we will update this Policy and, where required, obtain your consent.

2. How We Use Information

We use information to:

• Provide and maintain the Services (e.g., account setup, image analysis, virtual currency management).
• Provide personalized analysis when you enable Health Profile: When you create and enable a Health Profile, we use that information solely to provide personalized ingredient analysis and risk alerts tailored to your health conditions. We will not use your health information for any other purpose, such as advertising or user profiling.
• Improve and develop features, quality, and performance.
• Communicate with you (support and service notices).
• Protect the Services against fraud, abuse, and security threats.
• Comply with legal obligations.

We do not use your information for targeted/behavioral advertising.

3. How We Share Information

We do not sell your personal information and we do not share it for cross-context behavioral advertising as defined under California law.

We disclose information only in these limited circumstances:

• Service Providers: We engage third parties to help us operate the Services, including:
  • Cloud Hosting and Storage: Amazon Web Services (AWS), U.S. West (Oregon).
  • Content Delivery and Security: Cloudflare.
  • Analytics: Firebase Analytics.
  • Authentication: Google Sign-In and Apple Sign-In (where available).
  • AI Analysis Providers: We use third-party AI and machine learning services (which may include providers such as OpenAI, Google Gemini, xAI Grok, ByteDance/Doubao, DeepSeek, Moonshot AI/Kimi, Tencent Hunyuan, and similar services) to process uploaded images and generate ingredient analysis reports. These providers may access your uploaded images and, when you enable Health Profile features, relevant health information solely to perform analysis services for us. They are contractually obligated to protect your information and may not use it for their own purposes. However, we cannot fully control all aspects of how these third-party providers handle your data. If a data breach or misuse occurs due to a third-party provider, we will make reasonable efforts to notify you, but our liability may be limited by law.
  These providers may access information only to perform services for us and are obligated to protect it.
• Legal and Safety: To comply with applicable laws or valid legal requests, or to protect the rights, property, and safety of users, the public, or EagleEye AI.
• Business Transfers: If we undergo a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to this Policy.

4. International Transfers and Storage

All user data is processed and stored on servers located in the United States (AWS Oregon). If you access the Services from outside the U.S., you acknowledge your information may be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. As a general guideline:

• Account data: retained while your account is active and as required by law after closure.
• Health Profile data: retained while your account is active or until you delete a specific profile. You may access, modify, or delete your health profiles at any time through the app's Settings > Health Profile page.
• Image data: Uploaded images are retained as long as needed to provide analysis and quality assurance. Images associated with saved analysis history are retained while the history record exists. You may delete individual analysis records (and their associated images) at any time through the app. Unused or temporary images are generally deleted within 30 days.
• Transaction and purchase data: retained for as long as necessary to provide services, resolve disputes, and comply with legal and tax obligations (typically at least 3-7 years as required by law).
• Logs and diagnostics: retained for a reasonable period (e.g., up to 12 months) to ensure security and reliability.

Actual retention periods may vary based on operational needs and legal requirements.

6. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information.

California (CCPA/CPRA) Rights

• Right to Know/Access: Request details about categories and specific pieces of personal information we collected, sources, business/commercial purposes, and categories of third parties to whom information was disclosed.
• Right to Delete: Request deletion of personal information, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information (as defined under California law). If this changes, we will provide a "Do Not Sell or Share My Personal Information" mechanism.
• Right to Limit Use of Sensitive Personal Information: We use sensitive health information only to provide the personalized analysis services you requested. We do not use sensitive personal information for purposes beyond what is necessary to provide the Services, such as inferring characteristics about you for other purposes or for advertising.
• Non-Discrimination: We will not discriminate against you for exercising your rights.

How to Exercise Your Rights

• Primary method: Email us at [email protected].
• Alternate email: [email protected].
• We may need to verify your identity (e.g., email verification or other reasonable steps). You may use an authorized agent; we will require proof of authorization and may ask you to verify your identity directly.
• We will respond within 45 days, or notify you if we need additional time as permitted by law.

Other U.S. State Rights

If you are a resident of Colorado, Connecticut, Utah, Virginia, or other states with similar laws, you may have comparable rights. Contact us using the methods above.

Do Not Track / Global Privacy Control

We do not sell or share personal information for cross-context behavioral advertising. If we begin such activities, we will honor applicable opt-out signals (including Global Privacy Control) as required by law.

7. Children's Privacy

The Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us and we will take steps to delete it.

If you are between 13 and 17 years of age, you should review this Policy with a parent or legal guardian before using the Services and ensure you have their consent.

8. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:

• HTTPS/TLS encryption for all data transmission between the app and our servers.
• Strict access controls limiting which personnel and systems can access personal information.
• Regular security assessments and vulnerability scanning.
• Secure authentication mechanisms and password protection.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please safeguard your account credentials and device.

9. Additional Disclosures (Categories Required by California Law)

• Categories of Personal Information Collected: Identifiers (e.g., name, email, profile picture), internet/network activity (usage logs, event analytics), device information, image data you upload, sensitive health information (when you create a Health Profile: gender, age, pregnancy status, allergies, medical conditions), and commercial information (purchase history, virtual currency balance).
• Sources of Personal Information: Directly from you (account registration, uploads, health profile creation, communications, in-app purchases), your device, and service providers (analytics, authentication, payment platforms).
• Business/Commercial Purposes: Provide and improve the Services (including personalized health analysis when enabled); process transactions and manage virtual currency; security and fraud prevention; compliance with legal obligations.
• Disclosure for Business Purposes (Last 12 Months): We have disclosed identifiers, usage data, device data, image data, and (when Health Profile is enabled) health information to service providers including cloud hosting (AWS), analytics (Firebase), authentication providers (Google/Apple), AI analysis providers (ByteDance/Doubao, DeepSeek, Moonshot AI/Kimi, Tencent Hunyuan, OpenAI, and similar services), and CDN (Cloudflare) strictly to operate the Services. We have disclosed commercial information (transaction data) to payment processors (Apple App Store, Google Play) to process purchases.
• Sale/Sharing: We have not sold or shared personal information for cross-context behavioral advertising in the last 12 months.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you via the app or other appropriate means before the changes take effect. Please review this Policy periodically.

11. Contact Us

Data Controller: Shenzhen Minping Technology Co., Ltd.

• Website: https://minping.io
• Primary Email (privacy requests): [email protected]
• Alternate Email: [email protected]
• WeChat (general inquiries): z23w34
• Phone (general inquiries): +86 134-3068-8248

Please do not include sensitive information in your email communications.