Consumer health data privacy policy

Last updated: 2026-09-08

This is SafeFood's Consumer Health Data Privacy Policy. It supplements our privacy policy for information that may be consumer health data under laws such as Washington State's My Health My Data Act.

What we process and where it comes from

We receive the label photographs you choose to scan and generate readings of the printed ingredients. A request to read gluten or milk ingredients may, in context, reveal health information. Technical records of finding states and reading problems may also fall within this category. If you contact support, your message, attachments or error reference may provide further information.

The sources are your scan requests, the resulting AI reading and any support message you choose to send. We do not buy health information or obtain it from data brokers. We do not ask for your condition, build a health profile or use health information to personalise a reading. The same reading rules apply to everyone; AI results can vary with the photographs and transcription.

Why we use it

We process photos and label text to provide the reading you request. Limited technical records help us diagnose failures and check the reader's performance. Support information helps us answer your request. We obtain explicit consent before scanning, and you can withdraw it in Settings.

Who receives it

• Google Ireland Limited / Google LLC (Gemini API): receives the scan photographs and processes the reading. Google's applicable terms say that inputs and outputs are not used for model training. Its abuse-monitoring systems may retain and review them as set out below.
• Vercel Inc.: hosts our API, through which scan photographs and results pass, and processes operational logs.
• MongoDB Atlas: stores limited scan-quality records, including finding states and issue codes. Those records contain no label photographs, label text, product names or installation identifiers.

We do not disclose this information to advertisers, social networks or data brokers. We do not sell consumer health data, use it for advertising, or use geofencing around health-care facilities. We do not request location access. We do not use label readings to create health profiles. An error reference that you send to support can connect your message to a scan-quality record.

Retention

We do not save scan photographs or the text of readings on our servers. Your recent history lives on your phone. Google retains prompts and generated outputs for 55 days for abuse monitoring, security and required legal or regulatory disclosures; authorised personnel may review flagged content. See Google's abuse-monitoring policy.

Our scan-quality records expire automatically after 90 days. Photos or text you separately send to support are retained with your correspondence while needed to resolve the request and any related dispute or legal obligation. The privacy policy also explains installation and subscription records, service providers and international processing.

Your choices and rights

Where applicable, you can ask us to confirm whether we collect, share or sell your consumer health data, obtain access and information about recipients, request deletion, and withdraw consent. We do not sell it.

• Withdraw consent in Settings. Scanning stops until you consent again; your existing history remains on your phone.
• Delete local scans and photos with Clear history in Settings. Deleting the app also removes its local history, but may leave the Keychain installation identifier and any backup you control.
• Contact us at support@safefoodscanner.com. Include your installation identifier or error reference where relevant. We explain if we cannot identify a record and forward applicable deletion requests to processors.

We respond to requests under these consumer-health-data laws within 45 days, subject to extensions permitted by law. We do not penalise you for exercising your rights. A feature cannot operate if you withdraw the processing consent that is necessary to provide it. Deleting data does not cancel an Apple subscription; manage cancellation in your Apple Account settings.

Appeals

If we refuse a request, you may appeal by replying to our response. We will answer within 45 days and explain our decision. In Washington, you can then contact the Washington State Attorney General; elsewhere, you may contact your local supervisory authority.

Contact

14PAST3 računalniške storitve d.o.o. Cesta na Bokalce 20E, 1000 Ljubljana, Slovenia Email: support@safefoodscanner.com