1. Overview
Savor Scan ("we", "our", or "the app") is an AI-powered restaurant menu scanner that helps users identify allergens and find dishes matching their preferences. We are committed to protecting your privacy and being transparent about how we handle your data.
2. Information We Collect
2.1 Data Stored on Your Device Only
The following information is stored exclusively on your device and is never transmitted to our servers:
- Allergy information (selected allergens and custom allergens)
- Preferred ingredients
- Disliked ingredients
- Risk tolerance settings
- Language preferences
- Consent status
- Pro subscription status
2.2 Data Sent to Our Servers and Third-Party AI Service (OpenAI)
When you scan a menu, the following data is sent from your device to our servers, and then forwarded to OpenAI (a third-party AI service) for analysis:
- The captured menu image (compressed)
- Extracted OCR text from the menu
- Your selected output language (for translation purposes)
What is NOT sent: Your personal allergy information, preferred ingredients, disliked ingredients, and other personal preferences are never transmitted to our servers or to OpenAI. All safety and preference matching is performed entirely on your device.
Why data is sent to OpenAI: OpenAI's GPT API is used to analyze menu images and text, estimate ingredients, detect potential allergens, and generate translations. OpenAI processes this data according to their Privacy Policy and Terms of Use. We use OpenAI's API configuration that does not allow data to be used for model training.
User consent: By agreeing to the consent screen on first launch, you explicitly consent to having menu photos and extracted text sent to OpenAI for analysis.
2.3 Anonymous Data Contribution (Opt-in Only)
If you explicitly enable the "Contribute anonymized data" option, extracted menu text and analysis results (without any personal information) may be stored anonymously on our servers to improve analysis accuracy. This is entirely optional and disabled by default.
2.4 User Feedback / Reports
If you submit a report about incorrect analysis results, the following is collected:
- The report type (e.g., false positive, missed allergen, wrong ingredient)
- Optional additional comments you provide
- The menu item's analysis ID (to link feedback to the analysis)
3. How We Use Your Data
- Menu Analysis: Menu images and OCR text are processed using OpenAI's GPT API to estimate ingredients and detect allergens.
- Quality Improvement: Anonymized data (if opted in) and user feedback reports are used to build a knowledge base that improves future analysis accuracy.
- No Profiling: We do not create user profiles, track behavior across sessions, or use your data for targeted advertising.
4. Third-Party Services
- OpenAI API: Menu images and extracted text are sent to OpenAI (San Francisco, CA, USA) for AI-powered ingredient estimation and allergen detection. OpenAI processes this data under their Privacy Policy. We use the API with data-not-used-for-training settings. Your personal allergy and preference information is never sent to OpenAI.
- Google Cloud Platform: Our backend infrastructure (Cloud Run, Cloud SQL, Cloud Tasks) is hosted on GCP. Data in transit is encrypted via TLS.
- Google AdMob: Free users see rewarded interstitial ads powered by Google AdMob. AdMob may collect device identifiers and usage data according to Google's privacy policy.
- Apple / Google In-App Purchases: Subscription purchases are handled by Apple App Store or Google Play Store. We do not collect payment information.
5. Data Security
- All communication between the app and our servers uses HTTPS/TLS encryption.
- API keys and secrets are managed via Google Cloud Secret Manager.
- Menu images sent for analysis are not permanently stored unless you have opted into anonymous data contribution.
6. Data Retention
- Analysis results: Stored on our servers for a limited period to enable result retrieval and quality improvement.
- Anonymized contributions: Retained indefinitely to maintain the knowledge base.
- User feedback: Retained indefinitely to improve analysis accuracy.
- On-device data: Retained until you uninstall the app or clear its data.
7. Children's Privacy
Savor Scan is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Withdraw consent for anonymous data contribution at any time (via app settings)
- Request information about what data we hold
Since most personal data is stored only on your device, you can delete it at any time by clearing the app's data or uninstalling the app.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: savorscan@jakeson.net