Legal
Contents
SatvikScan ("we", "us", "our") is a food-scanning application available on Android, iOS, and web, operated as an independent project based in Sydney, Australia.
For the purposes of applicable data protection law, SatvikScan is the data controller of personal information processed through the app and this website.
Contact: satvikscan@gmail.com
This Privacy Policy applies to:
It does not apply to third-party services you may access through the app (such as Google's sign-in page), which are governed by their own privacy policies.
| Data | When collected | Stored where |
|---|---|---|
| Display name | When you set or change your name in Profile | Supabase cloud database |
| Product submissions — barcode, product name, brand, ingredients | When you manually add a product, or automatically when you scan a new product that does not yet exist in our database (data retrieved via Open Food Facts). | |
| Product reports — reason text | When you flag a scan result as incorrect | cloud database |
| Support messages — name, email, message | When you contact us via the support form | Delivered to our email inbox only; not stored in a database |
| Data | When collected | Stored where |
|---|---|---|
| Usage analytics — pages, events, device type, approximate location | When you browse the website or use the app | Google Analytics 4 & Vercel Analytics (aggregated and anonymised) |
| Advertising & cookies — browsing data, IP, cookie identifiers | When you browse our educational website | Third-party ad networks (e.g., Google AdSense) and affiliate partners |
| Scan history — barcode and timestamp | Each time you scan a product | Supabase cloud database |
| Points and rank — cumulative point total | When you earn points | Supabase cloud database; cached locally |
| User ID — randomly generated UUID | On first use or Google sign-in | Supabase Authentication; cached locally |
| Security audit log — timestamps of sensitive actions | Automatically on moderation actions | Supabase cloud database; visible to moderators only |
If you sign in with Google, we receive your email address, profile name, and profile picture URL. The picture is not stored. We do not receive your password or any other data.
If you choose "Try as Guest", Supabase creates an anonymous authentication session — no email or external account is linked. Scan history may be lost if the app is uninstalled or cache is cleared.
Photos are processed entirely on-device using Google ML Kit or Tesseract.js. The raw photo is never uploaded to our servers.
We use your data strictly to provide the core service, maintain your account, publish verified product submissions, and respond to support enquiries.
For users in the EEA, UK, and Australia, we process data based on contract performance, legitimate interests, and consent where required.
All cloud data is stored with Supabase (USA). Our database enforces strict Row-Level Security policies. All data is encrypted in transit and at rest.
We use GA4 to understand how users interact with our app and website. It collects aggregated data such as page views and approximate location. You can opt out via browser extensions or device privacy settings.
Our website uses Vercel Analytics and Speed Insights to monitor performance (page load times) and aggregated visitor counts. This data does not include personally identifiable information.
To support continued development, our informational web pages may feature advertisements from third-party ad networks (such as Google AdSense) and affiliate links. These third parties may use cookies to provide relevant advertisements.
We request Camera and Photo Library permissions solely for barcode scanning and on-device ingredient text extraction. You can revoke these at any time in your device settings.
Your scan history and profile are retained until you delete your account. Product submissions remain in the community database but are anonymised after account deletion.
Delete your account at any time from Profile → Delete Account.
Change your display name directly in the app settings.
Contact us to request a copy of your personal data.
Use browser extensions or device settings to opt out of GA4.
SatvikScan is not directed at children under 15. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us at satvikscan@gmail.com and we will delete it promptly.
Your data is stored on Supabase infrastructure in the United States. Standard Contractual Clauses (SCCs) are used for legal international transfer compliance where required.
We may update this policy periodically. Your continued use of the app or website after the effective date constitutes acceptance of the revised policy. Significant changes will be notified within the app.
For any privacy-related questions or requests, contact us at satvikscan@gmail.com.