Food Allergen Scanner — Privacy Policy

Effective Date: August 10, 2026

Food Allergen Scanner ("the App") is developed by Mobile Card Games & Travel Apps LLC. This Privacy Policy explains what data the App collects, how it is used, and how your privacy is protected.

1. Data We Collect

Food Allergen Scanner collects the following data that you provide directly through your actions in the App:

• Photos of food and ingredient labels: Photos you take with your camera to have their ingredients analyzed for allergens.
• Ingredient text: Ingredient lists you scan or type in for analysis.
• Barcode numbers: The numeric barcode (UPC/EAN) of products you scan.
• Your allergen safety profile: The allergens you choose to watch for and your safety settings, stored on your device.
• Purchase information: Transaction records for in-app subscriptions, managed by Apple and RevenueCat.

The App does not collect your name, email address, location, contacts, or advertising identifiers. It contains no analytics SDKs, serves no ads, and does not request the iOS App Tracking Transparency permission because it does not track you.

2. How We Use Your Data

Your data is used solely to tell you whether a product matches your allergen profile:

• When you photograph a label or food item, the photo (together with your allergen safety profile) is sent to OpenAI's AI model for ingredient and allergen analysis. The same applies to ingredient text you scan or type.
• When you scan a barcode, only the numeric barcode is sent to Open Food Facts, a public food-product database, to look up the product and its ingredients. No photo, identity, or profile data is included in that request.
• The analysis result (product name, matched allergens, confidence, recommendations) is shown to you and saved as text in your on-device scan history.

3. Consumer Health Data

Some laws treat information about your health that an app handles — “consumer health data” — with special care. In plain terms, here is where this App stands:

• What health-related data the App handles: your allergen safety profile (the allergens you watch for) and the content of your scans — label photos, ingredient text, barcodes, and the resulting allergen analyses — which together may reflect food allergies or intolerances.
• Where it lives: your allergen profile and scan history are stored only on your device. They are never sold or shared and never used for advertising.
• Processing in transit: when you scan, your label photo or ingredient text is sent together with your allergen profile to OpenAI (via the AIProxy relay) solely to perform the analysis, and exists in transit only; a scanned barcode number is sent to Open Food Facts to look up the product. Neither request includes your identity.
• Your choices: clear your scan history, edit or clear your allergen profile, or uninstall the App to delete everything on the device. For questions or to exercise any right over health data, contact us at the email below.

4. Third-Party Data Sharing

Your data is shared only with the services needed to perform a scan:

• OpenAI (openai.com): Receives the photo or ingredient text you submit, plus your allergen safety profile, to perform the analysis. Data is transmitted through AIProxy (aiproxy.com), a secure API relay, over an encrypted HTTPS connection. Per OpenAI's API data usage policies, data sent through the API is not used to train their models.
• Open Food Facts (world.openfoodfacts.org): Receives only the numeric barcode you scan. The request identifies the App (not you) via a standard User-Agent header.
• Apple and RevenueCat (revenuecat.com): Purchases are processed by Apple; the App never sees your payment card details. RevenueCat receives purchase transaction tokens and a random anonymous app-user ID — never your name or email.

We do not sell, rent, or share your data with anyone else.

Abuse prevention: every AI request the App sends also includes your device's Apple identifier-for-vendor and an Apple DeviceCheck token. These are used solely to prevent abuse and rate-limit AI requests; they are not linked to your name or identity and are not used for advertising or tracking.

5. Data Storage and Retention

• On your device: Your scan history is stored locally as text (product name, matched allergens, confidence, timestamps) — the photos themselves are not saved by the App after analysis. Your safety profile, free-scan counters, and a short-lived (24-hour) cache of barcode lookups are also stored locally.
• On our servers: We do not operate any server that stores your data. Photos and ingredient text exist in transit only during the API request to OpenAI.
• Deletion: You can clear your scan history in the App at any time; uninstalling the App removes all locally stored data.

6. Data Security

All network requests are made over encrypted HTTPS connections. AI requests are routed through AIProxy so that API keys are protected and never embedded directly in the App.

7. Your Rights

You have the right to:

• Clear your scan history and settings in the App at any time, or remove all App data by uninstalling the App.
• Deny camera permission, which prevents the App from taking photos or scanning barcodes.

Depending on where you live, privacy laws such as the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) give you rights over your personal data, including the rights to know, access, correct, and delete it. Because we do not hold your data on servers we operate, there is typically nothing for us to access or delete on request — deleting the App deletes your data. Where the App does process data in transit, or a third-party service described above collects data, you may contact us at the email below to exercise your rights, and we will respond as required by applicable law.

8. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect data from children under 13. In some regions, including the European Union, a higher minimum age applies to consent for data processing; the same statement applies there — we do not knowingly collect data from anyone under the applicable age.

9. Data Breach Notification

In the unlikely event of a data breach affecting user data on any system we operate, we will notify affected users as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Effective Date" at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

v5cqpsj4e3u4@opayq.com