Legal

Privacy Policy

Last updated: 22 September 2026

Template notice — this is a starting draft. Before you rely on it, fill in your real business/operator name and address, confirm which cookies and analytics you actually run, and have it reviewed against UK GDPR and the Privacy and Electronic Communications Regulations (PECR). If in doubt, a solicitor or an online policy generator tuned to your setup is worth the small cost.

This policy explains what information Litmus ("we", "us") collects when you use this website, how we use it, and your rights. Litmus is operated by [YOUR NAME / BUSINESS NAME], [ADDRESS], contactable at hello@litmus.health.

What we collect

Litmus is designed to work without you creating an account or handing over personal details. The choices you make in the finder — your goal, allergens and preferences — are processed in your browser to show you results and are not stored by us in a way that identifies you.

Cookies and tracking

We may use cookies and similar technologies to make the site work, understand usage, and support our affiliate links. Affiliate networks (such as Rakuten Advertising) set cookies when you click through to a retailer so that any resulting purchase can be attributed to us — this is how we earn commission. See our Affiliate Disclosure for more.

You can control or delete cookies through your browser settings. Blocking some cookies may affect how the site works.

How we use your information

We do not sell your personal information.

Third parties

When you click an affiliate link, you leave Litmus and are subject to the retailer's and the affiliate network's own privacy policies. We're not responsible for how those third parties handle your data. We'd encourage you to read their policies.

Label scanner

If you use the label scanner, the photo you upload is sent to a third-party AI provider (currently Anthropic) to read and analyse the label, and the result is returned to you. We do not store the image or the result on our servers — it is processed once and discarded. Please avoid including any personal information in the photo. The AI provider processes the image under its own terms and privacy policy.

Your rights

If you're in the UK or EU, you have rights under UK GDPR / GDPR, including the right to access, correct or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email us at hello@litmus.health. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Data retention & security

We keep personal data only as long as we need it for the purposes above, then delete it. We take reasonable measures to protect information, but no online service can be guaranteed completely secure.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed.

Back to the finder →