Last updated: 7 September 2026
When you scan a label, the photo is sent to Anthropic (anthropic.com), the AI provider that performs the ingredient analysis. The photo is held in memory for the duration of that single analysis call (typically 3–8 seconds) and is then discarded. We do not store the photo on our servers and we do not retain it in any backup, log, or cache. The only things we keep from a scan are: the ingredient names the AI extracted, the verdict, the per-ingredient confidence, and the timestamp.
Anthropic processes the photo under its own privacy policy (https://www.anthropic.com/privacy). Per Anthropic's enterprise terms, the photo is not used to train Anthropic's models.
We store: your email (if you signed up with email or chose to share it via Apple/Google), your Auth0 user identifier (a string from Auth0, not your full account), your scan history (verdicts only, no images), and your subscription status (received from RevenueCat).
We use Auth0 (https://auth0.com), an identity-management service operated by Okta, to handle sign-up, sign-in, password reset, and multi-factor authentication. Auth0 stores your email address, hashed password (if you signed up with email), and federated sign-in metadata (if you signed in with Apple or Google) under its own privacy policy: https://www.okta.com/privacy-policy/. Auth0 also handles refresh-token rotation and breach detection on our behalf.
You can delete your account and all associated data from the Profile tab in the app. Deletion is immediate and irreversible — it removes your data from our database AND deletes your Auth0 user record in the same step. See Delete Your Account for step-by-step instructions.