Says Here Privacy Policy
What this app collects
Your allergen list. The allergens you choose, whether you marked each one severe or mild, and any terms you added yourself. Under the GDPR this is health data — a special category of personal data (Article 9). We process it only on the basis of your explicit consent, given when you set up your profile, and only to check labels you scan.
Photos of labels. When you scan, the photo is sent to our server so the text on it can be read. Photos are not stored by default. The photo is deleted as soon as the label has been read. If you turn on "Save photos to history" in Settings, photos are kept so you can look at them later, and are deleted automatically after 90 days.
Scan results. The text that was read from the label, which of your allergens were found, and the outcome. This is what your history shows.
Technical data. An anonymous account identifier, your device language, and basic diagnostics about each scan (how long it took, whether it succeeded, what it cost us to run).
Your email address — only if you choose to add it. Your account starts anonymous. If you buy scans, we offer to link an email address to the account so your purchases survive a reinstall or a new phone. This is optional. If you add one, we store it and use it only to send you a sign-in code. We never send newsletters or marketing to it.
What this app does not collect
We do not ask for your name, your date of birth, or your phone number. Your account is created automatically the first time you open the app and stays anonymous unless you choose to add an email address (see above).
We do not collect your location. Photos are stripped of their metadata, including GPS coordinates, on your device before they are uploaded.
Who else sees your data
To read the text on a label we send the photo to Anthropic PBC, which processes it in the United States. We have a data processing agreement with them. Under that agreement they do not keep your photo after processing it and do not use it to train models.
Our servers and database are operated by Supabase. If you add an email address, sign-in codes are delivered through Resend, an email delivery service; it sees your address and the code, nothing else.
We do not sell your data, we do not share it with advertisers, and we do not use it for advertising.
How long we keep it
| Data | Kept |
|---|---|
| Allergen profile | Until you change or delete it |
| Photos (saving off) | Deleted immediately after the scan |
| Photos (saving on) | 90 days |
| Scan results and history | Until you delete them or your account |
| Purchase records | As long as required by tax law |
Your rights
You can see everything we hold about you and take it with you: Settings → Export my data. You can delete everything, permanently: Settings → Delete my account and data. Deletion removes your profile, your history, your photos and your account.
If you are in the EU or UK you also have the right to object to processing, to restrict it, and to complain to your national data protection authority.
Because your account is anonymous, deleting the app without deleting your account may make your data unreachable for both of us.
Children
This app is not directed at children. A parent may use it on behalf of an allergic child; in that case the allergen list describes the child, and the parent is responsible for the consent.
Changes
If this policy changes in a way that affects how your health data is used, we will ask for your consent again before continuing.