Privacy Policy for SafeBites

1. Information We Collect

Allergen Preferences

When you set up SafeBites, you select which food allergens apply to you. This information is stored locally on your device and is used solely to analyze menus for relevant allergen concerns.

Menu Images and Text

When you scan a restaurant menu, the App captures or imports a photo and extracts text using on-device optical character recognition (OCR). The menu image and/or extracted text are sent to Google's Gemini API for allergen analysis. These images and text are transmitted solely for processing and are not stored by us. Refer to Google's privacy policy for their data retention practices.

Subscription Information

SafeBites uses RevenueCat to manage subscription status. RevenueCat assigns an anonymous identifier to your device to track whether you have an active subscription. RevenueCat may also collect purchase history data as part of subscription management. No personal information (name, email, etc.) is collected or linked to your subscription by us.

Scan Count

SafeBites tracks the number of successful menu scans you have completed. This count is stored locally on your device (in UserDefaults and Keychain) and is used to enforce free-tier usage limits. It is not transmitted to any server.

Device Identifier

SafeBites generates a random, anonymous identifier for your device. This identifier is stored in your device's Keychain and is used solely for rate limiting (preventing excessive API usage). It is not linked to your name, email, Apple ID, or any personal information.

2. How We Use Your Information

We use collected information solely to:

• Analyze restaurant menus for allergen concerns based on your selected allergies
• Translate foreign-language menus to English (premium feature)
• Manage your subscription status
• Enforce free-tier scan limits

SafeBites does not use personal data for behavioral profiling, personalized advertising, or any purpose beyond core App functionality.

3. Third-Party Services

Google Gemini API

Menu images and extracted text are sent to Google's Generative AI API (Gemini) for allergen analysis and menu translation. Google's privacy policy governs how this data is handled during and after processing, including any data retention. No personal identifiers are included in these requests.

Cloudflare

Menu analysis requests are routed through a Cloudflare Workers proxy before reaching Google's Gemini API. Cloudflare processes these requests in transit and temporarily stores an anonymous device identifier with a request count for rate limiting purposes. This data expires automatically within 2 hours. Cloudflare does not receive your name, email, allergen selections, or any personal information. Cloudflare's privacy policy governs their handling of data processed through their network.

RevenueCat

RevenueCat manages in-app subscription validation. It receives anonymous device identifiers, Apple purchase receipts, and purchase history data. RevenueCat does not receive your name, email, allergen selections, or menu data.

Apple

All payments and subscriptions are processed through Apple In-App Purchases. SafeBites does not collect, store, or process payment or credit card information.

4. Data Storage

All user data — including allergen selections, saved menu scans, and preferences — is stored locally on your device. SafeBites operates a lightweight proxy server (hosted on Cloudflare Workers) solely to securely relay menu analysis requests to Google's API. This proxy temporarily stores anonymous rate-limiting data that expires within 2 hours. No allergen preferences, menu images, or personal information is retained on our servers.

5. Data Sharing

We do not sell, rent, or share user data with third parties for marketing or advertising purposes.

Data is shared with third parties only as described in Section 3, strictly for core App functionality (menu analysis and subscription management).

6. Analytics & Tracking

SafeBites does not use analytics SDKs, crash reporting services, or advertising/attribution tools. The App does not track users across other apps or websites and does not request App Tracking Transparency (ATT) permission.

7. Camera and Photo Library Access

SafeBites requests access to your device camera to photograph restaurant menus and access to your photo library to select existing menu images. These permissions are used solely for menu scanning functionality. Photos are processed on-device and sent to Google's Gemini API for analysis. They are not stored externally or used for any other purpose.

8. Children's Privacy

SafeBites is not directed toward children under the age of 13, and we do not knowingly collect personal information from children.

9. Allergen Information Disclaimer

SafeBites provides informational guidance only. Allergen analysis is generated by artificial intelligence and may be inaccurate or incomplete. SafeBites does not guarantee allergen-free dining and does not provide medical advice. Users should always confirm allergen information directly with restaurant staff.

10. Data Deletion

Since all personal data is stored locally on your device, you can delete all SafeBites data by deleting the App. The only server-side data (anonymous rate-limiting counters) expires automatically within 2 hours and cannot be linked to you.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be reflected by revising the "Last Updated" date above.

Continued use of the App after changes constitutes acceptance of the revised policy.

12. Contact Information

If you have questions or requests related to privacy, please contact:

support@voogllc.com

Voog LLC