TolerToler — Privacy Policy
Updated: 26 October 2026.
Who we are. Toler is published by Nexo Apex S.L. (TIN B55467146), Spain. Contact: hi@nexoapex.com · data protection requests: rgpd@nexoapex.com.
The short version. Toler does not require an account. Your photos, the text read from labels and the sensitivities you choose are processed locally by Toler and are not uploaded by the app. OS-managed backups may retain local data as described below. The app talks to the internet for three things: looking up barcodes in Open Food Facts, validating the optional "Toler Plus" purchase, and showing ads to users who have not bought Plus.
What the app processes
| Data | Where it goes | Why | Retention |
|---|---|---|---|
| Sensitivities you select (allergies, intolerances, diet) | Your device only | To personalise results. These are health-related preferences; we chose to never transmit them. | Until you change them or uninstall |
| Photos of labels or food | Your device only (Google ML Kit runs on-device) | To read ingredients / recognise food | Temporary picker/camera files may remain in the app cache. Toler removes its camera capture when the analysis/result flow closes; interrupted sessions may leave cache files until the OS removes them. Gallery originals remain under your control |
| Scan history (product name, ingredients, verdict) | Your device only | So you can check a product again | Until you delete it (swipe / Clear history) or uninstall |
| Barcode you scan | Open Food Facts (openfoodfacts.org, France) | To fetch the product's ingredients | Subject to Open Food Facts' own policy; the request is anonymous apart from your IP address |
| Purchase receipt, an anonymous app-user id, device type | RevenueCat, Inc. (USA) and Apple/Google | To validate and restore the Toler Plus purchase | See RevenueCat's privacy policy |
| Advertising identifier, IP-derived approximate location, device/app information, ad interactions | Google AdMob (Google Ireland Ltd for EEA users) | To show and measure ads (free version only) | See Google's privacy policy |
Toler does not send sensitivity profiles or ingredient text to advertising services. We do not add a separate analytics SDK or request contacts or precise location. AdMob and RevenueCat process identifiers and technical data as listed above. Open Food Facts may also receive requests for product images.
Backups. Android cloud backup and device-transfer exclusions are configured for app data. On iOS, system-managed backups may include preferences and scan history, according to your device/backup settings. Uninstalling the app does not delete an existing backup or data already retained by external providers.
Sharing. Using Share result opens the system share sheet. If you complete a share, the selected destination receives the result text. Contact/support actions likewise send information only when you choose to send it.
Consent and your choices
- Ads. In the EEA/UK you are asked for consent through Google's consent form before any ad is requested; you can change it at any time in Settings → Privacy options. On iOS the system "Allow tracking" prompt, if shown, controls permission for tracking under Apple’s rules. Buying Toler Plus stops new ad requests; it does not erase previously collected provider data or reverse processing already in progress. Privacy options remain accessible when Google requires them.
- Camera / photos permissions are requested when you first use them and can be revoked in the phone's settings; the app still works with the keyboard fallback.
- Your rights (GDPR). Access, rectification, erasure, restriction, portability and objection: write to rgpd@nexoapex.com. Because Toler stores your data on your device, erasure is usually as simple as clearing the history or uninstalling; for RevenueCat purchase records we forward your request. You can complain to the Spanish AEPD (aepd.es).
Legal bases
Performance of the service you asked for (barcode lookup, purchases), your consent (ads personalisation), and our legitimate interest in keeping the free version funded with non-personalised ads where consent is not required.
Children
Toler is intended for adults. It does not implement age verification or a child-specific mode. It is not designed for children.
Changes
We will update this page and the "last updated" date. Material changes are also announced in the app's release notes.