Privacy Policy · Last updated: October 10, 2026
LuckyHan Studio ("we", "us", or "our") operates the Food Scanner application (the "App"). Food Scanner looks at a meal, a food label or a barcode through your camera and tells you what is in it — the foods on the plate, roughly how much, the calories and nutrients, and what the listed ingredients are for. This Privacy Policy explains what happens to your information when you use the App.
By using the App, you agree to the practices described in this Privacy Policy.
Every analysis is made by an AI model on our server. That is why scanning needs an account and uses one credit. We send the least that the analysis needs:
What never leaves your phone: the health settings you choose (conditions you manage, goals, how you eat, allergies), your scan history, and your ingredient collection. The App uses your health settings to decide what to show you first, and it does that on the phone. They are not part of any analysis request. The only exception is if you turn on Back up & sync yourself, in which case, with your separate consent, these records are kept with your account (Section 3c).
We are aware that what a person scans and chooses to track can reveal a great deal — an allergy, a medical condition, a religious dietary rule, a pregnancy. The design answer to that is to receive as little as possible, and to keep what describes you on your own device.
The analysis is part of every scan rather than an optional extra, and it is why a scan costs a credit. You are told what is sent before you sign in; if you would rather not send it, you can choose not to sign in — but then the App cannot scan.
What is sent with each scan:
What is not sent: your health settings, your full-size photos and your advertising identifier. We do not read your device's serial number, IMEI or advertising ID. A device check that keeps free credits from being collected more than once is sent when you sign in or collect a free credit, not with a scan; see Section 3a.
Where it goes. The request goes to our own service running on Cloudflare Workers, which passes it to Google's Vertex AI to produce the analysis. Google processes it as our service provider and, under the Google Cloud terms that apply to Vertex AI, does not use it to train its models.
What we keep. For each request we record its time, the amount of text processed and the resulting cost, so we can keep the service running and within budget. We do not keep the photo or the text of your scan. We keep a short technical log of each request for up to 30 days for debugging. If you report an answer as wrong or offensive, we keep your report so we can look into it and improve the wording.
Daily free credit. Once a day you can collect one free credit by opening the App and taking it on the home screen. It is not added automatically, and it is once a day per phone. A free credit you have not used is gone at midnight (UTC). The balance is kept on our server, not in the App.
Signing in. New accounts are created with Google Sign-In, handled by Firebase Authentication. From that we receive your email address and a user identifier, and nothing else — not your name, your profile picture, or your contacts. You may later add a password to the same account so you can sign in either way.
Why an account exists. Each scan costs us money to produce, so scans are metered. An account is what a balance can belong to; without one, clearing the App's data would reset the allowance and we could not offer a free one at all.
Purchases. If you buy credits or subscribe, the payment is taken by Google Play, not by us. We never see your card details. Google gives us a purchase token, which our server checks with Google and records so the credits are granted once and can be restored on a new device. We keep a record of what was bought, when, and what it granted.
Analytics. We record which steps of the App are reached — a scan started, a sign-in completed, a purchase made — using Firebase Analytics, so we can see where the App is confusing. These events carry no email address, no user identifier, no photo, none of the text of your scans and none of your health settings.
Keeping free credits to one per phone. Welcome credits are given once per phone, and the daily free credit once a day per phone. To stop the same phone collecting them again and again under new accounts, the App sends two things when you sign in or collect a free credit:
If your phone cannot be checked, or Google reports that the App or the device is not genuine, free credits may not be given. Signing in, scanning and spending the credits you already have are not affected.
Deleting your account. Settings → Account → Delete account removes your account and your email address from our records. Records of purchases and of credits granted and spent are kept, because tax and consumer-protection law requires us to keep them; after deletion they hold only an anonymous identifier and an amount.
When you scan a barcode, your phone asks Open Food Facts — an open food-product database run by the non-profit Open Food Facts association — for the product with that number. The request contains the barcode number and the App's name and version. It contains nothing about your account, and Open Food Facts sees your IP address as with any internet request. See their privacy policy at world.openfoodfacts.org/privacy.
If you turn on Back up & sync in Settings, the records that otherwise stay on your phone are kept with your account, so you can continue on any phone you sign in on. If you do not turn it on, nothing in this section applies and your records stay on your phone.
In summary, we receive:
Unless you turn on Back up & sync, we never receive your health settings, your scan history (which stays on your phone) or your full-size photos. We never receive your name, your contacts or your payment details.
Third-party SDKs used for advertising also collect limited technical data — see Section 6 below.
We do not use any of it to build an advertising profile of you. The account data we hold exists to keep a credit balance and restore purchases, and is not shared with advertisers.
Google AdMob: The App displays banner, native, interstitial and app-open advertisements through Google AdMob. AdMob and its partners may collect device identifiers and other advertising-related data to serve and measure ads. See Google's Privacy Policy at policies.google.com/privacy and the list of AdMob ad technology partners at support.google.com/admob/answer/6128543.
Google User Messaging Platform (UMP): We use Google's UMP to obtain your consent for personalized advertising where required by law, including in the EEA/UK and other applicable regions. You can review or change your advertising-consent choice at any time from Settings → Privacy options inside the App.
Nothing you scan and none of your health settings are given to advertisers or used to choose the ads you see.
On your phone: your scan history and its photos, your ingredient collection and your health settings. They are removed when you delete them in the App or uninstall it.
On our server: your email address and account identifier until you delete your account; purchase and credit records for as long as the law requires; per-request time, amount and cost; and technical logs for up to 30 days. The device check value is kept after you delete your account, so that deleting and signing up again on the same phone does not collect the welcome credits twice; it is a keyed hash and identifies no one by itself. Photos and text sent for analysis are not retained. If you turn on Back up & sync, those records and photos are kept until you turn it off or delete your account (Section 3c).
The App is an information tool, not a medical device, and it does not provide medical, dietary or nutritional advice. Calories and nutrients from a photo are estimates and are shown as such, with where each figure came from. It does not diagnose, treat or make recommendations, it never tells you not to eat something, and it deliberately does not score foods as good or bad.
If you tell the App about a condition you manage, a goal or an allergy, it only changes which information is shown first. That setting stays on your phone (and with your account, if you turn on Back up & sync). The App can point out an allergen that is declared on a label or looks visible in a photo, but it can never confirm that an allergen is absent — hidden ingredients cannot be seen in a photo. If you have an allergy, an intolerance, or any medical condition affected by diet, rely on the packaging itself and on a qualified professional.
The App is not directed to children under 13, and we do not knowingly collect personal information from children. Back up & sync can only be turned on by people aged 14 or over.
EEA/UK (GDPR): The personal data we hold is your email address, your account identifier, your purchase and credit records, and the device check data described in Section 3a. You can delete your account in the App (Settings → Account → Delete account), or contact us to access, correct or delete your data or to object to its processing. Unless you turn on Back up & sync, we hold no health data about you and no copies of what you scanned. If you do, those records are processed on the basis of your explicit consent (GDPR Art. 9(2)(a)); turning sync off withdraws it and deletes the server copy. For advertising data processed by Google AdMob/UMP, you may exercise applicable rights via Settings → Privacy options, or by contacting Google.
California (CCPA/CPRA): We do not sell or share personal information. You may request access to or deletion of the personal information we hold at the email below.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.
For any questions about this Privacy Policy, contact us at founder@luckyhanstudio.com.