privacypolicy Privacy Policy — SatvikScan
Legal

Privacy Policy

Effective date: 28 April 2026 Last updated: 28 April 2026 Version: 1.3
Plain-language summary. SatvikScan collects only the data needed to run the app: your scans, your display name, and (if you sign in) your Google account email. We do not sell your personal data. The mobile app is strictly ad-free, though our public educational website may display third-party advertisements. You can delete everything at any time from inside the app.
Contents
  1. Who we are
  2. Scope of this policy
  3. Information we collect
  4. How we use your information
  5. Legal bases for processing
  6. Data storage and security
  7. Third-party services & Advertising
  8. Device permissions
  9. Data retention
  10. Your rights
  11. Children's privacy
  12. International transfers
  13. Changes to this policy
  14. Contact us
01

Who we are

SatvikScan ("we", "us", "our") is a food-scanning application available on Android, iOS, and web. The application is operated as an independent project based in Sydney, Australia.

For the purposes of applicable data protection law, SatvikScan is the data controller of personal information processed through the app and this website.

Contact: satvikscan@gmail.com

02

Scope of this policy

This Privacy Policy applies to:

It does not apply to third-party services you may access through the app (such as Google's sign-in page), which are governed by their own privacy policies.

03

Information we collect

3.1 Information you provide directly

DataWhen collectedStored where
Display nameWhen you set or change your name in ProfileSupabase cloud database
Product submissions — barcode, product name, brand, ingredients textWhen you add a product to the community databaseSupabase cloud database
Product reports — reason text you writeWhen you flag a scan result as incorrectSupabase cloud database
Support messages — name, email, message textWhen you contact us via the support formDelivered to our email inbox only; not stored in a database

3.2 Information collected automatically

DataWhen collectedStored where
Usage Analytics — pages visited, interaction events, device type, approximate locationWhen you browse the website or use the appGoogle Analytics 4 & Vercel Analytics servers (aggregated and anonymised)
Advertising & Cookies — browsing data, IP address, and cookie identifiersWhen you browse our educational website (satvikscan.com)Third-party ad networks (e.g., Google AdSense) and affiliate partners
Scan history — product barcode and timestamp of each scanEach time you scan a product barcodeSupabase cloud database
Points and rank — cumulative point totalWhen you earn points (scanning, submitting products)Supabase cloud database; cached locally
User ID — a randomly generated UUIDOn first use (anonymous) or on Google sign-inSupabase Authentication; cached locally
Security audit log — timestamps of sensitive actionsAutomatically on certain moderation actionsSupabase cloud database; visible to moderators only

3.3 Information from Google Sign-In

If you choose to sign in with Google, we receive your email address, profile name, and profile picture URL (the picture is not stored). We do not receive your password or any other data.

3.4 Guest (anonymous) accounts

If you choose "Try as Guest", Supabase creates an anonymous authentication session. No email address, name, or external account is linked. Scan history is associated with this anonymous ID and may be lost if the app is uninstalled or cache cleared.

3.5 Camera and images

Photos are processed entirely on-device using Google ML Kit or Tesseract.js. The raw photo is never uploaded to our servers.

We do not collect: precise device location, contacts, microphone audio, biometric data, or financial information.
04

How we use your information

We use your data strictly to provide the core service, maintain your account, publish verified product submissions, and respond to support enquiries.

App vs. Website Advertising: The SatvikScan mobile app is 100% ad-free and does not track your scans for marketing purposes. However, our public educational website hosts third-party advertisements and affiliate links to help fund our project. These web-based ad networks may use cookies to personalize content based on your browsing behavior.
05

Legal bases for processing

For users in the EEA, UK, and Australia, we process data based on contract performance, legitimate interests, and consent where required.

06

Data storage and security

All cloud data is stored with Supabase (USA). Our database enforces strict Row-Level Security policies. All data is encrypted in transit and at rest.

07

Third-party services & Advertising

We use Supabase, Google Sign-In, Google ML Kit, Tesseract.js, Open Food Facts, and Vercel to power our app. We also utilize the following external services on our website:

7.1 Google Analytics 4 (GA4)

We use GA4 to understand how users interact with our app and website. It collects aggregated data such as page views and approximate location. You can opt out of GA4 tracking by using browser extensions or adjusting your device privacy settings.

7.2 Vercel Analytics and Speed Insights

Our website uses Vercel Analytics and Speed Insights to monitor web performance (like page load times) and aggregated visitor counts. This data does not include personally identifiable information.

7.3 Website Advertising & Affiliate Links

To support the continued development of SatvikScan, our informational web pages may feature advertisements provided by third-party ad networks (such as Google AdSense) and affiliate links. These third parties may use cookies, web beacons, and similar technologies to collect information about your visits to our website and other websites in order to provide relevant advertisements about goods and services of interest to you.

Cookie Notice: When browsing our website, you consent to the use of cookies for analytics and advertising purposes as dictated by your browser settings. The SatvikScan mobile app itself does not use advertising cookies.
08

Device permissions

We request Camera and Photo Library permissions solely for barcode scanning and on-device ingredient text extraction. You can revoke these at any time in your device settings.

09

Data retention

Your scan history and profile are retained until you delete your account. Product submissions from user scans remain in the community database but are anonymised after account deletion.

10

Your rights

Access & Erasure

Delete your account anytime from Profile → Delete Account.

Rectification

Change your display name directly in the app.

11

Children's privacy

SatvikScan is not directed at children under 15. We do not knowingly collect personal information from children.

12

International transfers

Your data is stored on Supabase infrastructure in the United States. Standard Contractual Clauses (SCCs) are used for legal international transfer compliance.

13

Changes to this policy

We may update this policy periodically to reflect changes in our practices or relevant laws. Your continued use of the app or website after the effective date constitutes your acceptance of the revised policy.

14

Contact us

Email: satvikscan@gmail.com