Privacy Policy
Last updated: 24 September 2026
KaiScan helps you understand what’s in packaged food. This policy explains, in plain language, exactly what we store, what stays on your device, and the choices you have.
What we store on our servers
Your email address (for sign-in), your first and last name, your age and gender, your chosen language and country, and your scan history (products and their public scores). We use these to run the app across your devices, improve it, and send you relevant KaiScan updates, you can object to marketing at any time.
What never leaves your device
Your health conditions are stored only on your device. They are never saved on our servers and never linked to your account. On a new device you simply select them again.
What we don’t do
We never store passwords, you sign in with a link or one-time code sent to your email, or with Google. We don’t sell your data, we don’t show ads, and we never share your health information with anyone.
AI coaching
For premium coaching text, the app sends the product’s nutrition facts and your selected condition names, without your name, email or account ID, to our AI provider. The result is cached under an anonymous key. Skip this entirely by not selecting conditions.
Anonymous usage statistics
To improve the app we collect anonymous usage events (for example “a scan happened” and how many conditions are selected, never which ones). Data is hosted in the EU. Turn this off any time in Profile → Share anonymous usage stats.
Services we rely on
Supabase (sign-in and data storage, hosted in the EU), Open Food Facts (product data), Brevo (sign-in emails), our AI provider (coaching text), Qonversion (subscription status), PostHog EU (anonymous usage statistics) and Sentry (crash reports). Payment is processed by Apple or Google, we never see your card details.
On the kaiscan.app website only, and only if you accept cookies, Meta (Facebook and Instagram) and TikTok receive page views, whether you read on past the top of the page, and clicks on our app-store links, so we can measure whether our advertising works. TikTok receives each of these twice, once from your browser and once from our server so that measurement still works when a browser blocks it; the server copy carries your IP address, your browser type, and TikTok's own click identifier and cookie, never your name, email or health conditions. TikTok may also record how the page is used, such as button interactions and page load speed. Declining the cookie banner stops all of this entirely, and nothing is sent before you choose.
Advertising performance (app)
Separately from the website, the app itself tells Meta (Facebook and Instagram) when it is opened, and when one of three things happens on your account: sign-up completed, free trial started, or a purchase (amount and currency only). This is how we measure whether our advertising is bringing people to KaiScan, not a feature that shows you ads inside the app, which we still don’t do. It never includes your name, email, health conditions or anything you scan. We do not collect your device’s advertising identifier (on Android this is called the Advertising ID, on iOS the IDFA), so Meta cannot build an advertising profile from this data or match it back to you individually.
How long we keep your data
Account data (your email, name, age, gender, language, country, scan history, saved products and any products you contribute) is kept for as long as your account exists, and is erased as soon as you delete your account in Profile → Delete my account. Deleted data may remain in encrypted database backups for up to 30 days.
Your health conditions never reach our servers, so there is nothing for us to keep: they stay on your device until you clear them or uninstall the app.
Anonymous usage statistics are retained by our analytics provider for 12 months, after which they may be held in archive storage. Crash reports are kept for up to 90 days.
One record outlives deletion. If you started the free trial, we keep a one-way digest of your email address and the date, so that the same address cannot claim repeated trials. It contains no address, no name and no account ID, and cannot be reversed. This is the only thing we retain after an account is deleted, and it is disclosed here because a deletion promise that quietly omitted it would not be true.
Your rights
You can edit your profile at any time and delete your account, including everything we store about you, in Profile → Delete my account. Health conditions can be cleared on the device itself. For any data question, email privacy@kaiscan.app.
Not medical advice
KaiScan is educational. Scores draw on general dietary guidance from the WHO, FDA, NHS and ICMR. They aren’t medical advice and don’t replace a qualified clinician.
Contact
For any privacy question, email privacy@kaiscan.app.