ScanEat

1. Who We Are

ScanEat is developed and operated by Kshetra Labs (dinesh.s.panwar@gmail.com). The app helps you understand what is in your food by scanning product labels and barcodes using artificial intelligence.

2. What Data the App Accesses

Camera & Photo Library

ScanEat requests access to your camera and photo library solely to let you photograph food packaging. You choose when to take a photo; the app does not capture images in the background or without your action.

Images You Scan

When you scan a label, the image is sent over an encrypted HTTPS connection to our server for text extraction (OCR) and AI analysis. We do not:

• Store the original image after processing is complete
• link images to your identity
• share images with advertisers

Processed analysis results are cached against an anonymous hash of the image or barcode so that the same product can be looked up instantly in future — no personal information is attached to the cache entry.

Barcode Numbers

If a barcode is detected, its EAN number is sent to our server, which queries the Open Food Facts public database. No personal information accompanies this request.

3. Data We Do Not Collect

• Name, email address, or any other personal identifier
• Location data
• Device identifiers or advertising IDs
• Health or biometric data
• Usage analytics or crash reports tied to individuals

4. Third-Party Services

ScanEat uses the following third-party services to deliver its features:

• Amazon Web Services (AWS) – Cloud infrastructure, OCR (Amazon Textract), and AI analysis (Amazon Bedrock). AWS processes image data on our behalf under our data processing agreement. Our server also logs the IP address of each incoming request for rate limiting and security purposes (for example, to prevent abuse). These logs are retained for 30 days in AWS CloudWatch and are not linked to your identity or any scan you perform. See AWS Privacy Notice.
• Open Food Facts – Open-source food product database used for barcode lookups. Queries contain only the barcode number. See Open Food Facts Privacy Policy.
• Expo / EAS – Over-the-air update delivery. Expo may collect anonymous update telemetry. See Expo Privacy Policy.

We do not sell data to or share data with any other third parties.

5. Data Retention

Cached analysis results are stored in AWS DynamoDB for up to 30 days, after which they are automatically deleted. Each entry is keyed only by an anonymous hash of the scanned content — there is no way to trace a cache entry back to you or your device. Raw images are discarded immediately after OCR processing. Server request logs (IP address only) are retained for 30 days in AWS CloudWatch and then deleted.

6. Children's Privacy

ScanEat is not directed at children under 13. We do not knowingly collect any information from children. Because the app does not collect personal information from anyone, there is no additional risk specific to children.

7. Security

All data in transit is protected by TLS 1.2 or higher. Our server infrastructure runs on AWS with access restricted to authorised personnel only.

8. Your Rights

Because ScanEat does not collect personally identifiable information, there is no personal data profile to access, correct, or delete. If you have any privacy concern, contact us at dinesh.s.panwar@gmail.com and we will respond within 30 days.

9. Changes to This Policy

We may update this policy as the app evolves. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

10. Contact

Kshetra Labs
dinesh.s.panwar@gmail.com