Privacy policy
SafeFood has no accounts and collects almost nothing. Here is all of it.
Last updated: 2026-08-28
14Past3 d.o.o. operates SafeFood. This policy explains what the SafeFood iPhone app and this website do with data, in plain terms. It is short because SafeFood collects very little: there are no accounts, no tracking, and no advertising.
Draft pending legal review. This text is written to be accurate about how SafeFood actually works. It has not yet been reviewed by EU consumer-law counsel, which is scheduled before launch.
The short version
- SafeFood has no accounts. We do not know your name, your email address or your health condition, and we never ask.
- Your label photographs are sent to a third-party AI service to be read, and are not stored on our servers. That provider is named below.
- Your scan history stays on your phone. We keep no copy of it — only anonymous quality figures about the reading itself, described below.
- There is no analytics, advertising or tracking in the app. None. This website measures aggregate page views only, without cookies.
- We never sell data. There is nothing to sell.
What the app processes, and why
The photograph you take
When you scan a label, the photograph of the ingredient list is sent to our server and forwarded to Google Ireland Limited / Google LLC (Gemini API), which transcribes the printed text. That provider acts strictly as our data processor: it does not use your photographs to train its models. We do not store the photograph, and the transcription is returned to your phone rather than kept by us.
Because a photograph of a food label, combined with a gluten or lactose reading, can reveal something about your health, we treat it as special category data under Article 9 GDPR and process it only on the basis of your explicit consent, which the app asks for before its first scan and which you can withdraw at any time in Settings. Withdrawing consent stops scanning; it does not delete anything from your phone.
An anonymous installation identifier
The app generates a random identifier when you first install it and keeps it in the iOS keychain. It is not derived from your device, your Apple ID or anything about you, and it cannot be linked to your identity. We use it for exactly two things: counting how many scans an installation has used this month, so the free allowance works, and checking whether that installation has an active subscription.
Deleting the app and reinstalling it produces a new identifier, at the cost of resetting the monthly count.
Quality figures about the reading
To tell whether our reading is getting better or worse, our server keeps one row per scan describing the reading, not the food and not you: which version of our instructions and which model ran, how many photographs, how long it took, whether an ingredients list was found, how legible it was, and the two verdicts. It holds no photograph, no ingredient text, no product name and no identifier of any kind — not even the anonymous installation identifier — so a row cannot be connected to you or to any other row. These rows delete themselves after 90 days.
Your subscription status
If you subscribe, Apple processes the payment; we never see your payment details. We use RevenueCat to tell our server whether an installation is entitled to the Pro allowance.
What the app does not collect
No name, no email address, no account, no analytics or attribution SDK, no behavioural event tracking, no advertising identifiers, no location, no HealthKit data, no crash-reporting SDK, no contacts, no dietary or medical profile. (The subject-less quality figures described above are the one exception, and they describe the reading rather than you.) The app makes no network request at all before you have accepted the AI consent screen.
Who processes data for us
These are all the third parties involved, what they do, and why. We will update this list whenever it changes, and the app's consent screen refers you here rather than naming a provider, so that we can improve the reading without shipping a new version of the app.
- Google Ireland Limited / Google LLC (Gemini API) — reads the text in your label photograph. Processed under Google's data processing terms; photographs are not used for model training. Processing may take place outside the EEA under the European Commission's standard contractual clauses. We are moving this processing to an EU region.
- Vercel Inc. — hosts our server and this website.
- MongoDB Atlas — stores the monthly scan counter tied to the anonymous installation identifier, and the subject-less quality figures described above. No photographs, no label text, no product names.
- RevenueCat, Inc. — subscription status.
- Apple Inc. — distributes the app and processes payments, under Apple's own privacy policy.
How long we keep things
- Photographs: not stored by us. Our AI provider may retain a copy briefly for abuse monitoring — currently up to 55 days — after which it is deleted.
- Label text, product names and your scan history: not stored by us at all. They live on your phone, where the app keeps your most recent scans and deletes older ones.
- The anonymous quality figures described above: 90 days, then deleted automatically.
- Scan counter: reset monthly, kept while the installation is in use.
This website
This site is static. It sets no cookies and carries no advertising or social-media trackers of any kind. We measure aggregate page views with Vercel Web Analytics, which is cookieless and cannot identify you. There is no Google Analytics and no Meta Pixel; both were removed in August 2026.
Your rights
Under the GDPR you may request access to your data, its correction or erasure, a restriction on processing, portability, and you may object to processing. You may also withdraw your consent to AI reading at any time in the app's Settings.
There is an honest limitation here: because SafeFood has no accounts, we usually cannot identify which data is yours — the anonymous installation identifier is all we hold, and we have no way to connect it to you. In practice:
- To erase everything the app holds about you, delete the app. Your history and photographs are on the device.
- To have the monthly counter for your installation deleted, email us from the app's Settings and include the identifier shown there; we will delete that record.
- To withdraw consent, use Settings — no email needed.
If you believe we have handled your data unlawfully, you may complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) or to your own national supervisory authority.
Children
SafeFood is not directed at children under 16. We do not knowingly process their data, and because we have no accounts we cannot verify age.
Changes
If we change this policy we will update the date at the top and, for anything material, ask for consent again in the app rather than relying on a quiet edit.
Contact
14PAST3 računalniške storitve d.o.o. Cesta na Bokalce 20E, 1000 Ljubljana, Slovenia Company registration number 9959513000 · VAT SI85358975 Email: support@safefoodscanner.com
Last updated 2026-08-28. This page is the canonical version; the app ships a copy of the same text.