Privacy Policy

Last updated July 31, 2026

This Privacy Policy describes how Already ("Already," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with the Already mobile application and related services (collectively, the "Service"). The controller responsible for personal information processed under this Policy is identified in Section 16 below.

This Policy applies whenever you access or use the Service or otherwise interact with us. By using the Service, you acknowledge that your information will be handled as described in this Policy. If you do not agree with this Policy, you should not use the Service.

1. Personal information we collect

The information we collect depends on how you use the Service. We may collect the following categories of personal information:

• Information you provide. This includes information and content you submit through the Service, such as ingredients, photos you choose to analyze, saved content, preferences, and other information you choose to provide.
• Account information. If you create or connect an account, we may receive an account identifier and limited profile or contact information made available according to your choices.
• Transaction information. We may receive information about purchases, subscriptions, and entitlement status. Payments are processed by the applicable app marketplace, and we do not receive your full payment-card details.
• Communications. If you contact us, we may collect your contact details and the contents of your message, together with any information you choose to provide in connection with a support request.
• Technical and usage information. We may automatically collect information about your device, operating system, app version, identifiers, network connection, interactions with the Service, feature usage, performance, diagnostics, and crash events.
• Derived or aggregated information. We may derive information from the categories above or create aggregated or de-identified information that does not reasonably identify an individual.

You may use certain parts of the Service without creating an account. Some information is optional, but if you do not provide information needed for a requested feature, that feature may not be available.

2. Sources of personal information

We collect personal information directly from you when you enter information, select content, create an account, make a purchase, or contact us. We also collect certain technical and usage information automatically when you use the Service. In addition, we may receive limited information from app marketplaces, authentication providers, subscription services, and other service providers acting on our behalf.

3. How we use personal information

We may use personal information for the following purposes:

• to provide, operate, maintain, and improve the Service;
• to process the information and requests you submit and return requested results;
• to create and manage accounts and synchronize saved content;
• to process subscriptions and provide purchased features;
• to respond to questions, feedback, and support requests;
• to monitor performance, troubleshoot errors, and develop improvements;
• to protect the Service, our users, and others from fraud, abuse, security threats, and unlawful activity;
• to enforce our terms and policies and protect our legal rights; and
• to comply with applicable law, legal process, and lawful requests.

We may use aggregated or de-identified information for any lawful purpose, including analytics, research, and improving the Service, provided that the information cannot reasonably be used to identify you.

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects concerning you.

4. Legal bases for processing

Where applicable law requires a legal basis, we process personal information on one or more of the following grounds:

• Performance of a contract. Processing may be necessary to provide the Service or a feature you request.
• Consent. We may rely on consent when you choose to provide information or use an optional feature. You may withdraw consent at any time, although withdrawal does not affect processing that occurred before withdrawal.
• Legitimate interests. We may process information where reasonably necessary to operate, secure, support, analyze, and improve the Service, provided those interests are not overridden by your rights.
• Legal obligations. We may process information as necessary to comply with law, respond to legal process, or protect rights and safety.

5. How we disclose personal information

We may disclose personal information in the following circumstances:

• Service providers. We may disclose information to vendors that provide services on our behalf, such as hosting, authentication, data processing, analytics, diagnostics, customer support, and subscription management. These providers may use personal information only to perform services for us and are required to provide the same or equivalent protection described in this Policy.
• Legal and safety purposes. We may disclose information if we reasonably believe disclosure is required by law or necessary to respond to lawful requests, enforce agreements, investigate misconduct, prevent harm, or protect rights, property, or safety.
• Professional advisers. We may disclose information to lawyers, accountants, auditors, insurers, and other advisers where reasonably necessary for professional services.
• Business transfers. Information may be disclosed in connection with an actual or proposed merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality protections.
• With your direction or consent. We may disclose information when you ask us to do so or otherwise consent.

We do not sell personal information, and we do not use personal information for third-party targeted advertising.

6. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. The applicable period depends on the nature of the information, the reason it was collected, whether you maintain an account, and whether retention is required to comply with legal obligations, resolve disputes, prevent abuse, or enforce agreements.

When personal information is no longer required, we take reasonable steps to delete or de-identify it. Residual copies may remain temporarily in backups or logs until they are overwritten or deleted in the ordinary course, unless a longer period is required by law.

7. Account deletion and consent choices

You may decline optional features or permissions, although doing so may prevent the related feature from working. You may withdraw consent to optional processing at any time by no longer using the relevant feature, changing device permissions where available, or contacting us.

Signed-in users may delete their account from Settings in the app. Account deletion removes the account and associated saved content and usage records from our active systems, except information that we must retain for legal, security, fraud-prevention, or dispute-resolution purposes. You may also request deletion or ask questions about retention by contacting us.

8. International data transfers

We and our service providers may process information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other transfer mechanisms recognized by applicable law. You may contact us to request additional information about these safeguards or a copy of the relevant protections, subject to applicable confidentiality restrictions.

9. Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your privacy rights

Depending on where you live, you may have the right to request access to personal information we hold about you, correct inaccurate information, request deletion, restrict or object to processing, withdraw consent, or receive a portable copy of certain information. You may also have the right to lodge a complaint with a competent data-protection authority.

To exercise a privacy right, contact us using the details below. We may need to verify your identity before completing a request. Rights may be subject to limitations or exceptions under applicable law, and we will explain any decision where required.

11. Additional information for EEA, UK, and Swiss users

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may have rights of access, rectification, erasure, restriction, objection, and data portability. Where processing is based on consent, you may withdraw that consent at any time. Where processing is based on legitimate interests, you may object based on your particular situation.

You may lodge a complaint with the data-protection authority in the country where you live or work or where you believe a violation occurred. We encourage you to contact us first so that we can try to address your concern.

12. Additional information for California residents

Subject to applicable law, California residents may request information about the categories and specific pieces of personal information collected, the sources and purposes of collection, the categories of recipients, and may request correction or deletion. California residents also have the right not to receive discriminatory treatment for exercising applicable privacy rights.

We do not sell personal information or share it for cross-context behavioral advertising. We may need to verify a request and may permit an authorized agent to submit a request where allowed by law.

13. Children's privacy

The Service is not directed to children who are below the minimum age permitted to use an online service under applicable law, and we do not knowingly collect personal information from such children. Age requirements may vary by country. If you believe a child has provided personal information to us contrary to applicable law, please contact us so that we can take appropriate action.

14. Third-party services and links

The Service may contain links to, integrate with, or rely on services operated by third parties. Their privacy practices are governed by their own policies. We are not responsible for the privacy, security, or content practices of third-party services that are not acting on our behalf.

15. Changes to this Policy

We may update this Policy from time to time. We will post the revised version on this page and update the date above. Where required by law, we will provide additional notice of material changes or request consent before applying a change.

16. Contact us

For questions, complaints, or privacy requests, contact Ilia Zadiabin at izadiabin@proton.me.