Privacy policy

NoBuy: Scan Barcode Boycott helps you inspect company records and make your own shopping decisions. This policy explains how the app and its services handle information. For privacy questions or requests, use NoBuy Support.

Delete your account or data

In NoBuy, open Settings → Your data to delete your guest account and device records. If you cannot use the app, request account or data deletion through NoBuy Support. Identify NoBuy and the records you want removed; include your account reference if available, never a password or card details. You can also request removal of particular data without closing your account.

Deletion removes personal guide content, reports, permissions and account access. Limited paid-usage counters may remain for up to 62 days to prevent allowance resets. Retired installation identifiers, public keys and hashed account markers remain to prevent replay. Subscription cancellation is separate and must be completed in your store account. The Retention and deletion section below explains the full process and provider-failure handling.

Your shopping records

Saved brands, personal decisions, notes, scan history and shopping lists are stored on your device. NoBuy does not upload these collections to its service or send them to an AI provider. Your device’s operating system may include app data in its own backup or transfer features, according to your settings.

The camera and photos you select are used on your device to read barcodes. NoBuy sends the decoded barcode to its catalog service, not the camera image. You can deny camera access and enter a barcode manually. Camera and photo access can be changed in your device settings.

Search text, selected categories, brand names and barcodes are sent to the NoBuy catalog service and its existing catalog provider at boycot.gowalk.com to return results. Results may be cached for reuse and offline reading. Company artwork is loaded from the image host named in the catalog record. These hosts receive ordinary network information, including an IP address. Opening an original source visits that publisher’s website and its own privacy practices apply.

Optional account services

The free catalog and local shopping tools do not require a subscription. When you use a protected feature, such as submitting a correction, restoring protected subscriber access or requesting an AI guide, Firebase Authentication may create a guest account. NoBuy uses its account identifier, app installation identifier, device public key, app-integrity checks and request identifiers to secure access and prevent abuse. Firebase, Apple or Google may process technical device and network information for authentication and app attestation.

Reports you deliberately submit include the selected record, report category and text, linked to your guest account. Please avoid including personal information that is unnecessary to explain the problem. Reports are used to investigate accuracy or safety concerns; they do not automatically change public catalog records.

AI reading guides

AI is an optional subscriber extra and requires separate permission before generation. The service sends passages from the selected public catalog record to OpenRouter, which routes generation and a separate checking pass to the configured Microsoft Azure or Google Vertex AI providers. Your private notes, shopping lists and scan-history collection are not included. The selected record may nevertheless reflect your interests.

Requests require routes designated for no training and zero content retention. If an eligible route is unavailable, the request fails rather than using a less private route. Providers can process operational information, such as usage, timing and billing metadata, under their own policies. AI output can be incomplete or wrong; the app retains attribution and original-source links.

The service stores your AI permission, request identifiers, selected record, generated guide, timestamps and limited usage counters to return results, prevent duplicate charges and enforce allowances. You can withdraw AI permission from the reading-guide screen. Withdrawing permission stops new guide requests; use account deletion to remove existing account records.

Purchases

Apple or Google processes payments and manages subscription billing. NoBuy does not receive your payment-card number. The app and service process product identifiers, transaction or purchase references, entitlement status and expiry information to verify access and restore purchases. Refresh references stored by the service are encrypted. Deleting a NoBuy account does not cancel a store subscription; manage or cancel it in the store.

Optional usage and crash reports

Settings provides separate choices for usage reports and crash reports through Google Firebase. They are optional, with collection disabled by default in the rebuilt app. Your choice is saved on the device. A pending or failed preference change is shown with a retry control.

Usage reports describe app and device information, feature counts, onboarding and subscription events. Google Analytics assigns an app-instance identifier and may derive a general region from a masked IP address. Its automatic purchase events can include a product identifier, name and price; these reports are not joined to your NoBuy guest account. NoBuy’s custom events exclude brand names, search text, barcodes, account references and note contents. Crash reports contain technical failure, stack and device information. NoBuy does not attach your shopping records to them. Advertising consent is disabled; NoBuy does not use these reports for personalized advertising.

Turning collection off stops subsequent collection after the SDK applies the change. It resets local analytics data and removes unsent crash reports. Reports already received by Google are governed by its Firebase privacy information; turning collection off does not erase previously received reports.

Retention and deletion

Local shopping records remain until you remove them, clear account and device data, or delete the app’s local storage. Scan history keeps the latest 200 product checks. Export creates a JSON file for you to share; NoBuy clears its own export copy on the next launch or account deletion. Copies you share are controlled by you and the receiving app.

The service removes generated-guide content after 30 days, guide job and paid-usage records after 62 days, and submitted in-app reports after 90 days. Account deletion removes personal guide content, reports, permissions, account access and unused purchase-refresh references sooner. Limited paid-usage counters may remain for up to 62 days to prevent allowance resets. Retired installation identifiers, public keys and hashed account markers remain to reject replayed requests; they are not retained as shopping histories.

In Settings → Your data, you can export records or request deletion of your NoBuy guest account and device records. Account deletion also requests removal of the Firebase guest identity. If a provider is unavailable, the app shows the request as pending and supports retry; the service also retries pending work. It does not claim completion before the provider deletion is confirmed. Local-only users can clear their records without creating a guest account.

Without reinstalling the app, you can request access, correction or deletion through NoBuy Support. Choose a descriptive subject and include your account reference if available, but never send a password or payment-card details. Support may request information needed to identify the relevant records. Your name, reply address and message are processed to handle your request and retained as correspondence; they are separate from in-app reports.

Service providers and choices

NoBuy uses hosting and delivery providers, including Cloudflare, to serve pages and API requests. These services process network and security information needed to operate and protect the service. Apple, Google, Firebase, OpenRouter and the named inference providers process the information described above. Processing may take place in countries outside your own.

NoBuy does not sell your shopping records. You can use the free core without AI permission or optional diagnostics. You can change permissions in the app and device settings, manage subscriptions in the store, and contact Support about this policy or your information. Material changes to app practices will be reflected here.