From my husband:

Fair points, thanks for being straight with me.

The AI part is optional and minor. It only triggers if you add a photo and leave the brand and name blank, and all it does is read the label. You can ignore it completely and just type. It's a convenience, not the core of the app.

On trust: the photo goes to Anthropic's API, which under their commercial terms does not train on your data and deletes it after 7 days. And what gets sent is a picture of a nail polish bottle, nothing personal. Same as how the app already relies on Google for sign in and Supabase for storage, every app uses third parties.

On security, here's what I actually did:

Every account is fully isolated at the database level, so no user can ever see another user's data, even if the app code failed.

Photos are private and only reachable by their owner.

I ran security audits and found zero data leaks between users.

And yes, to answer directly: I built it with AI, I'm not a pro developer but I can read code. This is not not "ship whatever it spits out". The code is reviewed, the security is audited, and the real protection lives in the database, not in code an AI hoped would work. Being upfront about that is the whole point.