Privacy Policy

Information we collect

Nutrition Scan may store account details, food entries, nutrition analysis, meal history, preferences, device notification tokens and subscription status. Food images selected by you are processed only to estimate nutrition information.

AI food analysis and image safety

Before a food image is sent to our nutrition AI, it is screened by a private image-safety service for unsafe content. Images that do not pass are rejected. Safe food images and prompts may then be sent through our private API to generate nutrition results, meal suggestions and coaching responses. AI output is informational and does not replace professional medical advice.

Cloud backup

Cloud backup is optional. When enabled by an eligible signed-in member, nutrition history is encrypted at rest in our application database. Food photos and raw local device paths are not included in cloud backup.

Firebase services

Firebase is used for sign-in identity, push notifications and app attestation. Nutrition history, subscription entitlements and AI usage limits are managed by the Nutrition Scan application backend. Firestore, Firebase Storage and Cloud Functions are not used by the production app.

Ads and purchases

Google AdMob may process advertising and device signals for free members. Apple App Store and Google Play handle subscription billing on their respective platforms. Store transactions are verified by our server and raw purchase credentials are not retained. Active premium members do not receive ads.

Optional product analytics

If you explicitly enable analytics consent, PostHog receives a restricted set of product events such as onboarding completion, food-scan success, meal-plan saves and subscription funnel progress. Analytics is disabled before consent and does not receive passwords, access tokens, food images, free-text health prompts or payment details. You can withdraw consent from Settings.

Security and retention

We use encrypted credentials, access controls, rate limits, audit logs and encrypted backups. Local history remains on your device until you remove it. Account and cloud data are removed after an approved deletion request and the published safety period.

Your choices

You can clear local history, manage eligible ad privacy choices, disable cloud backup, or schedule account deletion from the app. You can also follow the instructions on our public account-deletion page.