Effective date: June 11, 2026
FoodGrade ("the app", "we") helps you understand what's in your food by scanning product labels and barcodes. This policy explains what data the app handles and where it goes. The short version: your data stays on your phone unless a feature specifically needs to send something out, and we never sell your data or show you ads.
When you scan a label, the photo is sent over an encrypted connection to our scan service, which uses Google's Gemini API to read the nutrition facts and ingredients from the image. The photo is processed to extract label text and is not stored on our servers. A copy of the photo is kept on your device only, attached to your scan history, and is deleted automatically as older scans age out or when you delete the app. Google processes the image as a data processor under its API terms.
When you scan a barcode or search for a product by name, the barcode number or search text is sent to Open Food Facts, a public, non-profit food database, to look up product information. No personal information is included in these requests.
Allergen selections, dietary concerns, and household profiles you configure are stored only on your device. They are used locally to check scanned ingredients against your preferences. They are never uploaded.
Your scan history, grades, and saved products are stored only on your device and are removed when you delete the app.
Subscriptions are processed by Apple's App Store or Google Play, and managed through RevenueCat, our subscription infrastructure provider. RevenueCat receives an anonymous app-generated identifier and your purchase history for the app — never your name, email, or payment details (those stay with Apple/Google).
The app may collect anonymous crash reports and error diagnostics to help us fix bugs. These contain technical information about the failure (device model, OS version, what the app was doing) and no personal content.
The app collects anonymous usage analytics through PostHog to understand which features are used — for example, that a scan was started, a grade was shown, or the upgrade screen was viewed. These events are tied to a random anonymous identifier, never to your identity. Your dietary and allergen selections, ingredient lists, and product judgments are never included in analytics.
FoodGrade is not directed at children under 13, and we do not knowingly collect personal information from children.
Because nearly all data lives on your device, deleting the app deletes your data. Label photos sent for scanning are processed transiently and not retained by our scan service.
If we make material changes, we will update this page and the effective date above.
Questions about this policy: josh@goatlabs.tech