Privacy Policy
Last Updated: September 21, 2026
1. Who We Are
Mangood is operated by The Auspicious Company (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us about anything in it at support@mangood.app.
2. Website Analytics
When you visit our website (mangood.app), we may collect anonymized web analytics data such as page views and referral sources. This data is used solely to improve our website and does not interact with the Mangood app.
3. Analytics and Product Usage
We use PostHog to understand how the app is used so we can improve it. PostHog is a third-party analytics processor, and the data described in this section is stored on PostHog’s servers in the United States. If you are in the European Economic Area, the UK or Switzerland, see §7 for how that transfer is protected.
We record the following in-app events:
| What | What’s recorded with it |
|---|---|
| Opening, backgrounding and closing the app | Timestamps, app version, device model and OS version |
| Starting a scan | — |
| Scanning a barcode | The barcode, the product's category, whether we found a match |
| Viewing a product | Product ID, category, score band, ingredient data source |
| Searching | The text you type into the search box, and how many results came back |
| Comparing two products | The two product IDs |
| Adding an item to your shelf | Product ID |
| Starting and submitting a product submission | The barcode, and whether the submission succeeded |
| Viewing the paywall, completing a purchase | Which subscription entitlement |
| Completing an onboarding step | Which step you reached — nothing about your answers |
We do not send your email address, your name, or your password to PostHog.
4. Session Replay
PostHog records video of your screen while you use the app, so we can see where the interface confuses people.
- All text you type is masked in the recording — including the search box and the age field. We see that you typed, not what.
- Images are not masked. Product photos and scoring screens appear as they look to you.
- The product-submission camera screen is excluded from recording entirely. Anything you photograph yourself is never captured in a replay.
- Console/diagnostic logs are captured alongside the recording.
5. Crash and Error Reporting
When the app hits an error we send a report to PostHog: the error message, the stack trace, the screen you were on, and your device and app version. This covers unhandled errors in the app’s code, unhandled promise rejections, native iOS and Android crashes, and errors caught by the app’s top-level error boundary.
6. How This Data Is Linked to You
While you use the app as a guest, analytics and replay data is anonymous — tied only to a randomly generated device identifier, not to you.
When you create an account or sign in, we link that identifier to your internal account ID (a random UUID from our authentication provider, Supabase). Events you generated as a guest are then associated with that ID. We do not send your email address or name to PostHog at any point — only the internal ID.
Your health profile is never sent to analytics. Your life stage, your age, and whether you take supplements are stored in your account and used to personalize your safety score. They are not sent to PostHog and are not shared with any third-party analytics provider. The onboarding events we do record say only which step you reached, never what you answered.
7. Where Your Data Is Stored
- Your account, profile, scan history and shelf: Supabase.
- Analytics, session replays and error reports: PostHog Inc., United States.
- Subscription and purchase records: RevenueCat, and Apple or Google as the payment processor. We never see or store your card details.
If you are in the EEA, the UK or Switzerland, the analytics, session replay and error data described above is transferred to the United States. That transfer is covered by two safeguards: PostHog participates in the EU-US Data Privacy Framework and its UK and Swiss extensions, and our data processing agreement with PostHog — executed September 14, 2026 — incorporates the European Commission’s Standard Contractual Clauses. You can ask us for a copy of the relevant terms.
Your health profile is not part of this transfer. Your life stage, age and supplement use are stored in your account and never sent to PostHog — see §6.
8. What We Don’t Collect
We do not collect your precise or approximate location, your contacts, your calendar, your microphone or audio, your browsing history outside the app, or any advertising identifier. We do not run ads and we do not sell or share your data with advertisers or data brokers.
9. Analytics in Development Builds
Analytics, session replay and error reporting are switched off in development and demo builds of the app. Only real production installs send data.
10. Your Choices and Rights
You can request access to, correction of, or deletion of your data at any time.
- In the app: Profile → Delete account. This deletes your account and associated data.
- By email: support@mangood.app
If you are in the EEA or UK you also have the right to object to processing, to request a portable copy of your data, and to complain to your national data protection authority. If you are in California you have the right to know what we collect, to delete it, and to opt out of its sale or sharing — we do not sell or share it.
11. Retention
- Session replays: 30 days.
- Analytics events, and error and crash reports (crash reports are stored as analytics events): retention is set by our analytics provider’s plan and is not independently configurable by us.
- Your account data: kept until you delete your account, then removed.
12. Children
Mangood is not directed at children under 13 (under 16 in the EEA), and we do not knowingly collect data from them.
13. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.