Consumer health data privacy policy
A separate policy, because Washington State requires one — and because the answers are short.
Last updated: 2026-08-28
This is SafeFood's Consumer Health Data Privacy Policy. It exists because Washington State's My Health My Data Act, and similar laws in Nevada and Connecticut, require a separate policy specifically about consumer health data. It sits alongside our privacy policy, which covers everything else.
Draft pending legal review. Scheduled before launch.
What counts as consumer health data here
SafeFood is a label reader, but two things it handles could be treated as consumer health data, and we would rather over-disclose than under-disclose:
- The photograph of a food label you choose to scan, while it is being read.
- The reading itself — that a particular label declares a gluten- or milk-containing ingredient — while it is on its way back to your phone.
We infer nothing about you from either. SafeFood does not ask about your health, does not store a condition, and does not adjust its answer for anyone: the same product produces the same reading for every user.
How we collect it
Only from you, only when you take a photograph and ask for it to be read. There are no other sources. We buy no data, and we receive none from data brokers, advertisers or partners.
Why we process it
To transcribe the printed ingredient list and report which gluten- or lactose-containing ingredients that text declares. That is the entire purpose.
Who we share it with
- Google Ireland Limited / Google LLC (Gemini API), which reads the text in the photograph as our processor and does not use it for model training.
That is the complete list. We do not share consumer health data with anyone else, and specifically not with advertisers, analytics providers, social networks or data brokers.
What we never do
- We do not sell consumer health data. No sale, no exchange for anything of value, ever. There is therefore no "valid authorization" to sign, because we do not ask for one.
- We do not use it for advertising and run no advertising or attribution technology in the app.
- We do not geofence. The app has no location permission at all, so it cannot and does not implant a virtual boundary around a health-care facility or any other place.
- We do not build profiles and do not link readings to an identity.
How long we keep it
We do not store your photographs or your readings. Our AI provider may retain a photograph briefly for abuse monitoring — currently up to 55 days — after which it is deleted. Your own history lives on your phone, under your control.
Your rights
You may ask us to confirm whether we process your consumer health data, to tell you which third parties have received it, to delete it, and to withdraw your consent to processing it.
- Withdraw consent at any time in the app's Settings; scanning stops immediately.
- Delete everything on your device by deleting the app.
- Ask us at support@safefoodscanner.com. We respond within 45 days, and will tell you plainly if we hold nothing that we can connect to you — which, because SafeFood has no accounts, is usually the case.
You will never be denied service, charged a different price, or given a worse version of SafeFood for exercising any of these rights.
Appeals
If we refuse a request, you may appeal by replying to our response. We will answer within 45 days and explain our reasoning. In Washington you may then contact the Washington State Attorney General; elsewhere, your state's equivalent authority.
Contact
14PAST3 računalniške storitve d.o.o. Cesta na Bokalce 20E, 1000 Ljubljana, Slovenia Email: support@safefoodscanner.com
Last updated 2026-08-28.