Privacy policy

Effective July 27, 2026 · Plastfri is operated by Soxoa LLC (“we”, “us”)

TL;DR

Label scanning and listed-composition scoring happen on your device. Plastfri has no accounts, ads, analytics, or tracking. If you deliberately submit a public product for research, we store that submission to score it for the shared database. Optional extension lookups send a retailer name, public catalog ID, and public listing title.

The iPhone and iPad app

Camera and photo-label text recognition uses Apple's on-device Vision framework. Plastfri does not upload or save the image. The composition text and score are calculated on your device. Items you choose to save remain in the app's local database, and you can delete them from Settings.

Product research is an explicit cloud action.When you tap “Score this product,” the public product URL or name and optional description you entered are sent to plastfri.com. The submission is stored in our research queue and may become a public scored-product page. Do not submit private, confidential, or personal text. Contact hello@plastfri.com to request a correction or deletion.

Submitted product text and resulting research records are retained while they are needed to operate, audit, correct, and publish the shared product database. Public scored records may remain available until removed or superseded; failed or unpublished records may be deleted during routine maintenance. You can request deletion at the address above.

The app stores onboarding status, your score threshold, and optional local reminder setting on your device. Weekly reminders are scheduled locally after you opt in. The app downloads the public Plastfri product catalog but does not send your local saved list.

Plastfri Pro subscriptions are purchased through Apple. Apple processes payment and provides the app with a verified entitlement. We do not receive your card number or create a billing profile.

The Safari browser extension

The Plastfri extension scores products for plastic content by reading product titles and fiber-composition text on the shopping pages you visit. Page reading and deterministic scoring happen locally, inside your browser, using a materials dictionary that ships with the extension. The optional database lookup described next is the exception.

Score-database lookups (optional, on by default).To return researched scores for products whose listings don't state their materials, the extension can check products against our database of researched compositions. Each uncached lookup sends the retailer, the product's public catalog ID (for example an Amazon ASIN), and the public listing title. It does not send the full page body, page URL, search query, browser account, or Plastfri account identifier. As with any web request, our hosting provider receives ordinary request metadata such as IP address. Product IDs we haven't seen before, together with their public title, may be queued so our research pipeline can score them for everyone. Turn lookups off in the extension settings and Plastfri makes no Plastfri API requests while you shop — scoring stays on your device.

Chrome on-device AI estimates (optional, off by default).On supported Chrome versions, estimates use Chrome's built-in model on your own computer. Plastfri does not transmit those prompts or results. This feature is unavailable in Safari.

The extension stores your treatment mode, threshold, per-site disable list, and personal allow/always-flag overrides in browser-managed extension storage. Chrome may sync those settings through your Chrome profile when browser sync is enabled. Safari may synchronize those settings across your signed-in Apple devices using its WebExtension storage.sync area. These preferences are not sent to Plastfri.

The extension also keeps device-local performance caches: public product IDs and returned scores (successful entries are refreshed after 24 hours and misses after two hours), plus hashed-title on-device AI results refreshed after seven days. Each cache is capped at 3,000 entries and older entries are pruned as it fills. Clearing the extension's stored data removes them.

Permissions, explained

Access to websites (host permissions) — required so the extension can read product listings on whichever shop you visit and draw score badges on the page. Page reading happens locally; when database lookups are on, only the lookup fields described above are sent.

activeTab — lets the popup show scan statistics for the tab you are on and offer a per-site on/off toggle.

scripting— used only when you turn on the optional “Everywhere” mode, to run the same local scoring on shopping sites beyond the built-in list. Everywhere mode is off by default; enabling it asks for your permission first, and turning it off removes that permission again.

storage — saves your settings, as described above.

The website (plastfri.com)

The website requires no account, sets no advertising or analytics cookies, and contains no third-party trackers. Product submissions and extension lookups use our API and database as described above. For abuse prevention, the API converts the requesting IP address into a secret-keyed token that changes each day. The token is used only for daily rate limits, is not attached to the product submission, and cannot be joined across days. Tokens older than 30 days are purged as rate-limit requests are processed. Our hosting provider, Vercel Inc., may keep standard, short-lived server logs including IP address and requested URL for security and operations.

What we don't do

We do not sell personal data, build advertising profiles, track you across apps or websites, or use submissions to train AI models. We do not upload label photos or your local saved history. Subscription revenue pays for the app; your data is not the product.

Children

Plastfri is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child submitted personal information, contact us so we can remove it.

Changes to this policy

If Plastfri changes what it collects or how it uses submissions, we will update this policy and its effective date before or when that change ships.

Contact

Soxoa LLC · hello@plastfri.com