Privacy & Consumer Health Data Policy

1. Information we process

Information stored on your device

The app may store your birth year or age, sex selection, height, weight, activity level, nutrition goals, dietary preferences, meal photos, meal history, nutrition estimates, weight history, app settings, and consent choices locally on your device. We do not normally receive a copy of this locally stored information.

Meal scans and follow-up requests

When you choose to analyze a meal, the app sends a resized JPEG of the selected or captured photo to our backend. It may also send context needed to provide the requested result, such as current nutrition totals and targets, recent meal names, portion details, or corrections you provide. We receive this information directly from you when you initiate the request.

Our application code processes scan content in memory to route the request and return a result. We do not intentionally write meal photos, prompts, or AI responses to our application logs or a database. The AI provider may retain or review request data under its abuse-monitoring, security, and legal requirements as described below.

Network and security information

When the app or a browser connects to our service, we and our hosting providers process technical information such as IP address, request time, route, response status, app and OS information, and app-attestation tokens. Our API uses an IP address briefly in server memory to limit abusive request bursts. Hosting and security providers may keep access and security logs for their standard operational retention periods.

Optional analytics and advertising attribution

If you grant Apple’s App Tracking Transparency permission, Google Analytics for Firebase processes a pseudonymous app-instance identifier, advertising identifier, app interactions, sessions, app and device information, approximate geography derived from IP address, and purchase or subscription events. Google Ads may use identifiers and conversion events to measure which advertising led to an install or subscription. We do not set an account user ID or send meal photos, meal names, nutrition values, weight, age, sex, goals, or dietary preferences to analytics or Google Ads. If you deny permission, collection remains disabled. You can change this choice in iOS Settings under Privacy & Security → Tracking.

Purchases and notifications

Apple processes App Store purchases and subscriptions. The app receives transaction and entitlement information needed to unlock paid features and restore purchases. If you enable reminders, the app schedules local notifications on your device; we do not operate a marketing email or push-notification list for the app.

2. Consumer health data

Depending on where you live, meal photos, inferred nutrition, dietary preferences, weight information, activity level, and health or nutrition goals may be considered consumer health data. We collect or process this data only to provide features you request, maintain your on-device history, secure the service, comply with law, and support the choices described in this policy.

Sources of consumer health data are you, your use of the app, and inferences returned by the AI analysis providers. We do not sell consumer health data. We do not use it to infer eligibility for employment, credit, insurance, housing, or other unrelated decisions.

3. How we use information

• Provide meal analysis, nutrition estimates, and app features.
• Authenticate legitimate app requests and prevent abuse.
• Measure app usage and improve features when optional analytics are enabled.
• Process purchases and restore paid access.
• Comply with law and protect users, Outlane, and the public.

Where applicable, our legal bases include performing the service you request, your consent for AI processing and optional analytics, our legitimate interests in securing and improving the service, and compliance with legal obligations. You may withdraw consent in Settings; withdrawal applies going forward.

4. Disclosures and processors

We disclose information only as needed to provide the service, follow your choices, operate securely, complete a corporate transaction subject to appropriate protections, or comply with law. Our current categories of recipients are:

• OpenAI, L.L.C. — AI meal analysis. OpenAI states that API data is not used to train its models by default. We set API response storage off; separate abuse-monitoring data may be retained for up to 30 days unless a different authorized retention control applies. OpenAI privacy policy
• Alibaba Cloud / Qwen — AI meal analysis when Qwen is selected as the scan provider. Alibaba Cloud privacy policy
• Vercel — website and API hosting, delivery, and security. Vercel privacy policy
• Google Firebase and Google Ads — optional app analytics, advertising attribution, conversion measurement, and app attestation. Firebase privacy information
• Apple — App Store purchases, StoreKit, and device attestation services. Apple privacy policy

These providers process information under their applicable terms and our instructions. Some processing may occur outside your state, province, or country, including in the United States and locations where the provider operates, subject to applicable transfer safeguards.

5. Retention

• On-device data: remains until you edit or delete it using available app controls, or uninstall the app.
• Scan content: is not intentionally stored in our application database or content logs after the request completes. AI providers may retain limited copies under the terms described above and their policies.
• Security and operational metadata: is retained only as long as reasonably needed to secure, troubleshoot, and operate the service or meet legal obligations.
• Optional analytics: is retained according to our configured Google Analytics retention settings. Turning tracking permission off stops future collection from that device; previously collected or aggregated reports may remain.
• Purchase records: are retained by Apple under Apple’s policies and as needed by us to honor entitlements and legal obligations.

6. Your rights and choices

Depending on your location, you may have rights to know, access, correct, delete, or obtain a copy of personal or consumer health data; withdraw consent; restrict or object to processing; and appeal a denied request. You will not be discriminated against for exercising a privacy right.

• Use iOS Settings → Privacy & Security → Trackingto change analytics and advertising-attribution permission.
• Stop using meal scans to stop future AI processing. You can delete saved meals in SnapFood Settings; uninstalling SnapFood erases its remaining locally stored app data.
• Email hi@outlanegames.com to make a privacy request or appeal.

SnapFood does not require an account, so we may have little or no server-side data that we can identify as yours. We may ask for information needed to verify and fulfill a request, and we will respond within the period required by applicable law. You may also complain to your local data-protection or consumer-protection authority.

7. Security

We use technical and organizational safeguards designed for the nature of the information, including encrypted transport, app attestation, scoped service credentials, request-size limits, rate limits, and content-free operational logging. No system is completely secure, and we cannot guarantee absolute security.

8. Children

SnapFood is not directed to children under 13, and we do not knowingly collect their personal information. Users who have not reached the age of majority where they live should use the app only with permission from a parent or legal guardian. If you believe a child under 13 submitted information, contact us so we can investigate and delete it where applicable.

9. Changes to this policy

We may update this policy to reflect product, provider, or legal changes. We will change the effective date and provide additional notice in the app when a material change requires it. Where law requires new consent, we will request it rather than treating continued use alone as consent.

10. Contact

Outlane Inc.
Email: hi@outlanegames.com

Please include “SnapFood privacy request” in the subject line.