Effective Date: October 19, 2026
Scannibal ("the App") is developed by Kiran Rao ("we," "us," or "our"). This Privacy Policy explains what information the App collects, how it is used, and your choices regarding that information.
Photos you scan. When you use any of Scannibal's scan modes, the photo you capture is sent to a third-party AI service (Google Gemini) for analysis. The photo is transmitted over an encrypted connection, processed in real time, and is not stored on our servers or by us after the analysis is complete. If you tap "Translate full menu," the same photo is sent again for that translation and handled the same way. Photos are processed by Google's Gemini API under Google's API terms. We do not use your photos to train our own models.
Device identifier. We generate a random, non-identifiable device ID stored locally on your device. It is used for rate limiting (a daily scan counter, which expires after about a day) and for the usage analytics described below. On our servers this ID is stored only as a salted one-way hash, which cannot be turned back into the ID. We do not link it to your identity, and it cannot be used to identify you personally.
Usage analytics. We collect basic, anonymous product usage events, such as which scan mode you used, whether a scan succeeded or failed, how long it took, and which app screens you visit. We store these as daily totals (for example, "120 menu scans today") and use the hashed device ID only to count how many different devices were active each day. We also keep aggregate cost counters for the AI services we pay for. This is first-party analytics we operate ourselves; we do not use a third-party analytics SDK. We use it only to understand how the App is used and to improve it. This data is never sold, shared with third parties, or used for advertising, and is not linked to your identity or used to track you across other apps or websites.
Profiles you create. The App lets you create profiles (allergy, diet, pet, skin, health, grocery, nutrition goal and growing profiles), including profiles for family members you add, with the names you give them. All profile data is stored only on your device. When you scan or chat, the relevant parts of your profiles are included in the request so the answer can be personalised: for a family scan, that includes each person's name, food allergies and diets. Profile data is used only to produce that answer and is not stored on our servers.
Scan history. Your scan history is stored locally on your device. It is never uploaded to our servers.
Some of what you can enter in Scannibal is sensitive health information: allergies, diets, medications, medical conditions, pregnancy status, nutrition goals, and the same details for family members (including children) and pets. We treat it that way. It stays on your device, is sent only with the specific scan or chat request that needs it, is not stored on our servers, and is never sold, shared for advertising, or used to build a profile of you. Please add information about other people only if you have their permission (or are their parent or guardian).
When you ask Scannibal a question or correct a result, your question, the recent messages in that chat, and the relevant result and profile context are sent to Google Gemini to generate the answer. We do not store your chat on our servers. Chat history you see in the App stays on your device.
When you create a staff card, a My Allergy Card, or translate a menu, the text to be translated (for example, your allergies or the note you type) is sent to Google Gemini for translation. We do not store it on our servers. Saved allergy cards are stored on your device so they work offline.
When you scan a barcode, the App sends only the barcode number, directly from your phone, to the public Open Food Facts database to look up the product. No photos, profile data or device ID are sent to Open Food Facts. Open Food Facts' own privacy policy applies to that request.
When you tap Share on a result, an allergy card or a staff phrase, the text being shared is stored on our servers at a public, unlisted link so the person you send it to can open it. Anyone who has the link can view it. Shared content is deleted automatically after 90 days. If you would like a link deleted sooner, email us the link at the address below and we will delete it. Only share what you are comfortable with others seeing, since the shared text may include names, allergies or other details from your result.
If you give permission, Scannibal can connect to Apple Health (iPhone) or Health Connect (Android):
Data from Apple Health or Health Connect stays on your device and in Apple Health or Health Connect. It is never sent to our servers, never used for advertising or marketing, and never sold or shared with third parties. You can change or remove these permissions at any time in the Health app or Health Connect settings.
Any reminders or notifications from Scannibal are local notifications scheduled on your device. We do not run a push notification server, and notifications are not used for tracking.
We do not collect your name, email address, phone number, physical location, contacts, browsing history, or any other personally identifiable information, unless you choose to email us. We do not use cookies or tracking pixels in the App. We do not use any third-party analytics or advertising SDKs. We do not use Apple's Identifier for Advertisers (IDFA) or any advertising tracking technology. We do not sell, share, or disclose your personal information to third parties for advertising or marketing purposes.
The App uses the following third-party services to function:
Photos, chat messages, text sent for translation and profile data sent with a request are processed in real time and are not retained on our servers. Daily rate-limit counters expire after about a day. Daily usage totals are kept for up to 120 days, and short-lived server logs age out on their own. Share links are deleted automatically after 90 days, or sooner on request. Local data on your device (profiles, scan history, saved cards, device ID) persists until you delete it or the App.
Scannibal is not directed at children under 13, and children under 13 should not use it on their own. Users aged 13 to 17 should use the App with a parent's or guardian's permission. Parents may add family member profiles for their children; those profiles stay on the parent's device. Kid Mode only changes how results are worded for a parent scanning with their child. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information (for example, in a share link or an email), contact us and we will delete it.
Under the California Consumer Privacy Act (CCPA), as amended, California residents have the right to know what personal information is collected, to request its deletion or correction, and to opt out of its sale or sharing. Scannibal keeps very little on our servers: a hashed device ID used for rate limiting and anonymous daily usage totals, and any share links you create. You can ask us to delete a share link, or ask any question about your data, by emailing us. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use sensitive personal information for any purpose other than providing the answer you asked for. We will not discriminate against you for exercising your rights. We do not respond to "Do Not Track" signals because we do not track users across websites or apps.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We will not use health information in a new way without asking for your consent first.
If you have questions about this Privacy Policy, contact us at:
kiranrao@gmail.com