← Back to Goat Labs

Privacy Policy

Effective date: June 11, 2026

FoodGrade ("the app", "we") helps you understand what's in your food by scanning product labels and barcodes. This policy explains what data the app handles and where it goes. The short version: your data stays on your phone unless a feature specifically needs to send something out, and we never sell your data or show you ads.

What the app collects and why

Label photos (camera or photo library)

When you scan a label, the photo is sent over an encrypted connection to our scan service, which uses Google's Gemini API to read the nutrition facts and ingredients from the image. The photo is processed to extract label text and is not stored on our servers. A copy of the photo is kept on your device only, attached to your scan history, and is deleted automatically as older scans age out or when you delete the app. Google processes the image as a data processor under its API terms.

Barcodes and product searches

When you scan a barcode or search for a product by name, the barcode number or search text is sent to Open Food Facts, a public, non-profit food database, to look up product information. No personal information is included in these requests.

Dietary and allergen profiles

Allergen selections, dietary concerns, and household profiles you configure are stored only on your device. They are used locally to check scanned ingredients against your preferences. They are never uploaded.

Scan history and saved products

Your scan history, grades, and saved products are stored only on your device and are removed when you delete the app.

Purchases

Subscriptions are processed by Apple's App Store or Google Play, and managed through RevenueCat, our subscription infrastructure provider. RevenueCat receives an anonymous app-generated identifier and your purchase history for the app — never your name, email, or payment details (those stay with Apple/Google).

Diagnostics

The app may collect anonymous crash reports and error diagnostics to help us fix bugs. These contain technical information about the failure (device model, OS version, what the app was doing) and no personal content.

Usage analytics

The app collects anonymous usage analytics through PostHog to understand which features are used — for example, that a scan was started, a grade was shown, or the upgrade screen was viewed. These events are tied to a random anonymous identifier, never to your identity. Your dietary and allergen selections, ingredient lists, and product judgments are never included in analytics.

What we don't do

Children

FoodGrade is not directed at children under 13, and we do not knowingly collect personal information from children.

Data retention

Because nearly all data lives on your device, deleting the app deletes your data. Label photos sent for scanning are processed transiently and not retained by our scan service.

Your choices

Changes to this policy

If we make material changes, we will update this page and the effective date above.

Contact

Questions about this policy: josh@goatlabs.tech