Privacy Policy

1. Data we collect

• Label photos. When you scan, the photo(s) you capture are sent securely to our server so an AI model can read the nutrition label. Photos are processed transiently and are not stored on our servers after the reading is returned. Copies you choose to keep with a scan stay on your device.
• Scan history and preferences. Your nutrient goals, scan results, and history are stored locally on your device — for guests and account holders alike. They are not uploaded to our database.
• Account information (optional). If you create an account, we store your email address and authentication identifiers (from email/password, Sign in with Apple, or Google Sign-In) in our database (Supabase), protected by row-level security. Guest use requires no account and no email.
• Purchase information. Subscriptions are billed by Apple through the App Store. We receive transaction and entitlement records only — never your payment card details.
• Usage and diagnostic data. We use TelemetryDeck, a privacy-focused analytics service, to collect anonymised usage signals (e.g. which features are used, device model, OS version). TelemetryDeck anonymises data before storage and cannot identify you. We may also record basic service metadata (such as per-account scan counts and timestamps) to enforce fair-use limits and keep the Service secure.

2. AI processing of your photos

To read a label, your photo is transmitted over an encrypted connection (TLS) to our server, which forwards it to Anthropic's Claude AI to transcribe the nutrition values printed on the label. The result is returned to your device, where the rating against your goals is computed. Your photos and data are not used to train AI models. Optional AI features (insights and the coach) send only the label reading or compact, aggregated statistics about your scans — never a library of your raw photos.

3. How we use your data

• To provide the Service: reading labels, computing ratings, syncing your account entitlements (contract).
• To enforce free-tier and fair-use limits and prevent abuse (legitimate interests).
• To understand feature usage and improve the app via anonymised analytics (legitimate interests).
• To comply with legal obligations, such as records of purchases (legal obligation).

4. Third-party services

• Supabase — authentication and account database.
• Anthropic (Claude) — AI label reading and coaching text; not used to train their models.
• Apple — App Store billing and Sign in with Apple.
• Google — Google Sign-In (if you choose it).
• Vercel — hosting for our API and this website.
• TelemetryDeck — anonymised app analytics.
• Open Food Facts — optional product lookups; only the product barcode is sent, no personal data.

These providers process data on our behalf under their own data processing terms. We do not sell, rent, or trade your personal data, and we do not use third-party advertising trackers.

5. Data retention

• On-device data (scan history, preferences, kept photos) stays until you delete it in the app or remove the app.
• Label photos sent for scanning are not retained on our servers after processing.
• Account data is kept while your account exists and is deleted when you delete your account in the app.
• Purchase records may be retained as required for tax and accounting compliance.
• Analytics are anonymised and cannot be linked back to you.

6. Your rights

Depending on where you live (including under UK/EU GDPR and the California Consumer Privacy Act), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. Because scan data is stored on your device, you can view and delete it directly in the app; account deletion is available in-app under Settings → Account and removes your account data from our systems. For anything else, contact us (below) and we will respond within 30 days. California residents: we do not sell personal information. UK/EU residents may also lodge a complaint with the Information Commissioner's Office (ico.org.uk) or their local supervisory authority.

7. Security

Data in transit is encrypted with TLS. Account data in Supabase is encrypted at rest and protected by row-level security so only you can access your records. No system is perfectly secure, but we design the Service to hold as little of your data as possible in the first place.

8. International transfers

Our service providers may process data in the United States or other countries. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or the UK International Data Transfer Agreement.

9. Children

NutriGoal Check is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it promptly.

10. Not medical advice

NutriGoal Check is a preference-matching tool based on the label text we read. It is not medical, dietary, or allergen advice — see the Terms of Use.

11. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above and, for material changes, notify you via the app. Continued use of the Service after the effective date constitutes acceptance.

12. Contact

Privacy questions or requests? Email us through our contact form.