Last updated: September 15, 2026
Scan&Eat ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
Camera and Photo Access
Scan&Eat requests access to your device camera and photo library solely to capture or select images of restaurant menus for analysis. We do not access any other photos or media on your device.
Menu Text Data
When you scan a menu, text recognition (OCR) is performed entirely on your device using Apple's Vision framework. The extracted text is sent through our backend hosted by Railway to OpenAI to identify dishes, estimate recipe portions, and match food references. The scanner asks for permission before sharing menu text with AI. Once you enable AI sharing, recognized menu text is sent automatically after you capture or choose a photo. Photograph only the menu and avoid personal details. You can turn off future AI sharing in Settings. We do not store this text on our servers.
Images
Your photos are never uploaded to any server. All image processing happens locally on your device. Only the extracted text is transmitted for AI analysis.
Subscription Information
If you subscribe to Scan&Eat Pro, payment is processed entirely by Apple through the App Store. We do not collect, store, or have access to your payment information, credit card details, or Apple ID.
Operational Statistics
Our server records daily aggregate request counts, successful and unsuccessful analyses, processing times, model token usage, and the number of dishes calculated from nutrition references. These aggregates do not contain menu text, dish names, photos, customer or device identifiers. We use them to understand scanner reliability and operating costs. They cannot identify individual customers.
We use the information solely to:
Your latest 50 scan results, preferences and settings are stored locally on your device. You can remove saved scans in History. Daily operational aggregates are stored on our Railway-hosted backend for up to 90 days. Menu text and analysis content are processed in memory and are not retained by our application backend. IP addresses are used temporarily in memory for rate limiting, for up to one hour. Hosting and AI providers may process connection metadata and retain operational or security records under their own terms.
Scan&Eat uses the following third-party services:
We operate aggregate service analytics described above. We do not use advertising trackers or cross-app tracking.
We do not sell, trade, or share your personal information with any third parties, except for the processing by OpenAI and Railway described above.
You can delete local scan history in the app or remove the app to delete its local data. Operational aggregates expire after 90 days; they contain no customer identifiers and cannot be associated with an individual deletion request. Provider retention policies apply separately to data processed by OpenAI and Railway.
Scan&Eat is not directed at children under the age of 13. We do not knowingly collect personal information from children.
You have the right to:
We take reasonable measures to protect the information processed by the app. All communication with third-party APIs uses encrypted HTTPS connections. Local history is protected by iOS security features. The owner dashboard requires a password and displays only aggregate statistics.
We may update this Privacy Policy from time to time. Any changes will be reflected with an updated "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or your data, please contact us at: