Ojito Privacy Policy
Version 1.3. Effective November 9, 2026.
This is an English translation of the Política de privacidad de Ojito. If the two versions differ, the Spanish version prevails.
Ojito is an app that checks packaged products from their barcode. This policy explains what information the app uses, where it goes, how long it is kept, and how to exercise your rights. It is also the personal data processing policy required by Colombian law.
1. Who is responsible for your data
This is the only place where these details appear. The other sections and the terms refer here.
| Data controller | To be completed |
|---|---|
| Domicile | Medellín, Colombia |
| Address | To be completed |
| Phone | To be completed |
| Email for privacy, inquiries and complaints | castores.app@gmail.com |
Requests about personal data are handled by whoever receives that email.
2. The most important points
- There is no account and no sign-up. Ojito does not ask for your name, your email or your phone number.
- The ages, birth dates and profiles of your family stay on your phone.
- What the app needs to work leaves the phone: the product code, an installation identifier, the package photos and notes you decide to send and, only if you authorize it, what you type by hand about a condition.
- If you subscribe to Ojito Familia, Google Play or the App Store charges you. Ojito does not see your card, your name or your email.
- Ojito shows no ads and does not sell your information.
3. What stays on your phone
We do not send to our servers:
- The age or birth date of a baby or child.
- Your family's profiles and what you mark in the lists of things to watch, such as allergies, conditions, pregnancy or breastfeeding.
- Your text size, appearance and voice preferences.
- Your history of checked products and your shopping list.
This information is not included in Android or iOS backups. It is deleted when you remove the profile or uninstall the app.
The camera is used only to read barcodes and take photos of packages. Photos you choose from your gallery are used only for the same purpose. The check the app makes on a photo before sending it runs on the phone.
4. What leaves your phone
| What | What for | Where it goes | How long it is kept |
|---|---|---|---|
| Installation identifier: a number that identifies the app installed on your phone, without your name or an account | Recognizing the installation to run the service and give access to Ojito Familia. Stopping photos from a phone that sends photos of a different product | Ojito's database, on Supabase | While the service is used, or until you ask to delete it |
| Ojito Familia purchase: the installation identifier, the store, the plan, a fingerprint of the store receipt (not the receipt), the subscription status, its expiry, when it was checked, and the version of the terms you accepted, with the date | Giving access to Ojito Familia and checking the purchase with Google or Apple. Keeping proof that you accepted the conditions | Ojito's database, on Supabase. The purchase is checked with Google or Apple | While the subscription lasts and as long as commercial law requires, or until you ask to delete it. Your subscription stays with the store even if you delete it here |
| The identifier, with each submission of product photos | If the artificial intelligence rejects 3 submissions from a phone within 7 days because they were not of the product, were not a package or had inappropriate content, that phone cannot send photos for 30 days. A blurry or incomplete photo does not count. The people who review products can lift the block | Ojito function on Supabase. It keeps only a fingerprint of the identifier, the reason and the date of each rejection, without the product, the photos or anything about your family | Rejections, 7 days; a block, until 7 days after it ends |
| Barcode you scan or type | Looking up the product. If we do not have it, or it has no result, looking up its nutrition table and ingredient list in Colombian stores and open databases, so that you or the next person can see it rated without taking photos | Supabase | The lookup is not saved as a history of yours: your history stays on your phone. It may remain in technical logs. If we do not have the product, or it has no result, we keep the code with how many times it has been looked up and the day of the first and last time, without your identifier, the time, your IP or anything about your family, so it is not possible to know who looked it up. It is kept while it is useful for finding that product. If the product does not exist and you send photos, the code is saved with the product |
| Photos of packages you decide to send | Reading a product's label and checking it | Supabase and Anthropic, which reads the photos with artificial intelligence | On Supabase, in private storage. There is no automatic deletion period today: they are kept as long as they are needed to check the product, or until you ask to delete them. At Anthropic, see section 6 |
| What results from reading those photos: name, ingredients and nutrition table | Showing the product to everyone who uses Ojito | Ojito's database | As long as the product stays in the database. It is product information and does not say who sent it |
| Text you type by hand about a condition, such as "strawberry allergy", only if you authorize it | Turning it into what is worth checking on the label | It passes through our server to Anthropic | Our server neither stores nor logs it: it only counts that there was a call. On your phone it stays until you remove it. At Anthropic, see section 6 |
| "Something wrong?": what you say is wrong, a note of up to 280 characters and up to 3 photos, if you decide to send them | So the Ojito team can review the product and decide whether to correct it. Meanwhile, the product stays under review | Ojito function on Supabase, privately. If you say it is the ingredients or the box with numbers, the first photo goes to Anthropic to be read. An email with the product, what is wrong, the note and links to the photos goes to each person on the Ojito team who decides corrections, through Brevo (see section 6). It does not carry your identifier or anything about your family; the identifier is only used, as with other photos, to see whether that phone has photos blocked | If the team says No, the photos are deleted. If it says Yes, they are kept like the product's other photos. The note is kept with the report, with no automatic period. Who reported it is not saved. The email stays in the team's mailboxes; the links to the photos expire after 7 days |
| An optional note with the photos of a product we don't have, of up to 280 characters | Telling the team something; the team receives those photos by email to approve or reject them | Same as the previous row. The note does not go to Anthropic | Same as the previous row. If the team says No, the photos of that submission are deleted and, if your submission created the product, it is no longer shown |
| Technical connection data, such as the IP address | They are normal in any internet connection | Supabase and its technical logs | According to the provider's plan, which defines how long those logs last |
| Your IP address and the barcode of a suggested product, which is part of its photo's address | Showing what the product looks like when the app suggests another option | Directly from your phone to Open Food Facts or Open Beauty Facts, which host those photos. They are not Ojito's providers. We send them nothing about your family | According to those services |
| ML Kit technical metrics: phone model and system, performance, errors and a per-installation identifier | Operation of the barcode and text readers | Google, according to its ML Kit data disclosure. Images are not on that list | According to Google |
Do not send photos of people: the app only asks for the package. Do not write names or details of your family or anyone else in a note: the app asks you not to. Before saving a photo, our server removes its metadata, including location.
Test versions of the app also check personal care products. Their photos and data receive the same treatment.
5. Health data, data about minors, and your authorization
What you write about a condition may be sensitive data, because it is about health. Before sending it, the app asks for your express authorization, which also covers what you write later in your family, including your children, until you withdraw it. You are not required to give it, and no feature depends on it: if you don't give it, the text stays on the phone and the app checks only what it can read there. You can also use the options in the list, which do not leave the phone.
Do not write names in that text. If it is about a child or adolescent, you authorize as their representative, and you should only do so if it is in their interest. We do not ask for children's names or photos.
For photos, you authorize by tapping the send button, right after the notice shown above it. For the other data, you authorize by continuing from the app's welcome screen. If you do not agree, do not keep using Ojito.
The app saves on your phone the version and date of your authorization for the text. You can withdraw it in Settings.
6. Who it is shared with, and outside Colombia
- Supabase hosts the database, the photos and the server functions, in the United States.
- Anthropic, PBC provides the artificial intelligence service that reads the photos and the text, from outside Colombia. According to its published terms, consulted on November 1, 2026, it deletes those inputs and outputs within 30 days, except in cases such as enforcing its usage policy or complying with the law. It also states that it does not train its models on this data unless the customer opts in.
- Brevo (Sendinblue SAS, France) delivers emails to the Ojito team. When you tell us something is wrong or send us photos of a product, the team receives an email with the product, what is wrong if you tell us, your note and links to your photos that expire after 7 days. The photos are not inside the email. That email does not carry your identifier or anything about your family, and it stays in the team's mailboxes.
- Google receives the ML Kit technical metrics described above.
- Google Play and Apple's App Store charge for Ojito Familia as controllers in their own right, under their own terms and privacy policies. Ojito does not see your card, your name or your email. When you buy, the app passes them the installation identifier, so the purchase is tied to that phone. Afterwards, Ojito asks them with the purchase receipt whether it is still valid, and they answer with the plan, the status and the expiry.
- Open Food Facts and Open Beauty Facts receive your IP address and the product code when your phone loads the photo of a suggested option. They are not Ojito's providers: they act on their own, under their own terms, and may be outside Colombia.
- The people who review products for Ojito can see the photos you send.
- Authorities, when the law requires it.
Supabase, Anthropic and Brevo process the data on Ojito's behalf, as processors, under their data processing agreements, and must give it protection equal or equivalent to this policy. Your information leaves Colombia for countries such as the United States and France, which the Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio) lists among those with an adequate level of protection.
When you use "Share", you choose whom to send the result card to. That card carries no ages or details about your family.
7. For how long
We use the data only for what this policy says and for the time indicated in section 4. Ojito's database will remain in place while the service operates. When it stops operating, or when a piece of data is no longer needed and the law does not require keeping it, it is deleted.
8. Security
The connection to our servers and the loading of suggested options' photos are encrypted (HTTPS). Photos are in private storage. Only the server can change product scores. No system is completely secure.
9. Your rights
As the data subject, under Colombian Law 1581 of 2012, you can:
- Know, update and correct your data.
- Request proof of your authorization.
- Know how it has been used.
- Revoke the authorization or request that your data be deleted, unless there is a legal or contractual duty to keep it.
- Access your data free of charge.
- File complaints with the Superintendence of Industry and Commerce, after first completing the inquiry or complaint process with us.
How to do it. Write to the email in section 1 saying what you are requesting and, if you can, the product's barcode. If someone requests it on behalf of another person or a minor, they must state in what capacity they act. Since there is no account, we may ask you for something that helps locate the information, because we don't know who sent each thing.
Deadlines. An inquiry is answered within at most 10 business days; if that is not possible, we tell you why and answer within the following 5 business days. A complaint is answered within at most 15 business days; if that is not possible, we tell you why and answer within the following 8 business days. If a complaint is incomplete, we tell you within the following 5 days so you can complete it.
10. How to delete your data
- On your phone: remove the profile in "My family" or uninstall the app.
- Authorization for the text: withdraw it in Settings.
- Identifier and Ojito Familia purchases: in Settings, "Delete my data from the server". Your subscription stays active in Google Play or the App Store; to use it again on that phone, tap "Restore purchases". To stop paying, cancel it in the store.
- On our servers: write to the email in section 1 asking to delete your photos, your notes or your installation's identifier, with the product's barcode if you have it.
Product data already shown to everyone, such as its name or ingredients, does not say who sent it and may remain in the database. What the providers hold is deleted as described in section 6.
11. Children and adolescents
Ojito is for adults who check products, including for their children. A minor's age stays on the phone. Their rights are exercised by whoever represents them.
12. Product data
Product data comes in part from Open Food Facts and, in test versions, from Open Beauty Facts, available under the Open Database License (ODbL). Product photos come from those same databases, under the CC BY-SA license. To complete the table and the list of a product, Ojito may read with artificial intelligence the images that Carulla, Éxito and Jumbo publish of that product on their websites. Those images are read and discarded: we only keep the data read and the address of the image as its source.
13. Health information
Ojito provides general information about packaged products. It is not a medical device and does not diagnose, treat, cure or prevent any disease. It does not replace your doctor, your pediatrician or a nutritionist. More detail in the terms and conditions.
14. Changes
If this policy changes, we will publish the new version at this same address, with its number and date. If who is responsible for the data or what it is used for changes, we will tell you in the app before applying it, and if the purpose changes we will ask for a new authorization.