Last updated 4 August 2026
Verdict has no accounts. It never asks for your name, your email address or your date of birth, and it cannot send you anything. This policy explains what it does handle.
The short version. Your supplement list and label photos are sent to our server and on to Google's Gemini model so they can be analysed, then the result comes back. Your stack, your history and your settings stay on your phone. There is no advertising, no analytics, no tracking, and nothing is sold or shared for marketing.
The data controller for the processing described here is Cristian Cojocaru, an individual developer in the United Kingdom. Contact details are on the support page.
When you run an analysis, the app sends:
| What | Why |
|---|---|
| The supplement text you typed or pasted, or a photograph of a supplement label | It is the thing being analysed |
| Your chosen goal, any dietary rules you set, and the reference intake option (male or female) if you selected one | They change what the analysis looks for and which reference intakes it compares against |
| An anonymous identifier created by the app | To count how many free analyses have been used, and later to recognise a subscription |
Dietary rules and the reference intake option can imply something about you. They are used only to produce the analysis you asked for, are not combined with anything else, and are not retained against your identifier.
The first time you run an analysis, the app creates a random anonymous identifier and stores it on your device. It is not derived from your phone, your hardware, your advertising ID or anything about you, and it cannot be linked back to a person. It exists so that free usage can be counted, and so that a subscription can be recognised as yours.
Against that identifier we store nothing but counters: how many label scans and stack analyses have been run, and how many requests have been made. No supplement information is stored against it.
If you delete and reinstall the app, the identifier is gone and a new one is created. There is no way for us to connect the two.
Analysing a stack is expensive and slow, so results are cached. The stored row contains the analysis itself and a cryptographic hash of the text you entered, used as a lookup key. The text you typed is not stored, and the row is not linked to your identifier or to any user. If a different person later enters a materially identical stack, they are served the same stored result rather than a new analysis being run.
The analysis itself does name the products and ingredients it analysed, because that is what an analysis is. It sits in the cache unattributed, with nothing connecting it to you.
Photographs are never cached and never stored by us. A photo is transmitted, analysed, and discarded. It exists on our infrastructure only for the seconds the request takes.
Your saved stack, your analysis history, your prices, your reminders and adherence ticks, your theme and all your preferences are stored only on your device. They are never uploaded. We cannot see them, and we cannot recover them for you. Deleting the app deletes them.
These providers may process data outside the United Kingdom, including in the United States, under the safeguards their own terms provide. We do not use any advertising network, analytics service, crash reporter or tracking SDK.
Under UK GDPR we rely on performance of a contract to analyse what you submit and to operate a subscription, and on legitimate interests to count free usage, prevent abuse, and cache results so the service stays affordable. Where dietary information you provide reveals something about your health, it is processed only to produce the analysis you explicitly asked for, at your request.
You have rights of access, correction, erasure, restriction, objection and portability. There is a practical limit worth being honest about: because there are no accounts, we usually cannot tell which data is yours. Almost everything Verdict holds about you is already on your phone, where you can view and delete it directly.
If you want the usage counters attached to your device removed, find your identifier in the app under Profile, then About, then Device ID and send it to us. We can delete that row. Cached analyses cannot be traced to an individual and so cannot be individually deleted.
You can complain to the Information Commissioner's Office at ico.org.uk.
Verdict is not directed at children and should not be used by anyone under 16. We do not knowingly process any information from children.
This site sets no cookies, runs no analytics, and loads no fonts, scripts or images from anyone else. Nothing you do here is tracked. Our host keeps standard server logs.
If this policy changes materially, the date at the top changes and the current version is always at this address.