Privacy Policy

1. Introduction

VeganScan ("we", "us", "our") is operated by Master 22 Solutions. This Privacy Policy explains what information we collect when you use veganscan.org and our mobile apps, how we use it, and the rights you have over it.

2. Information We Collect

We collect only what's needed to run the service:

• Account data: email, name, password hash (or Google account ID if you sign in with Google), preferred language, and subscription status.
• Scan history: the OCR text from your scans, detected ingredients, and the analysis result — tied to your account.
• Payment data: if you subscribe, billing is handled by Stripe. We never see or store your card number — only a Stripe customer ID.
• Technical data: standard server logs (IP address, user agent, request timestamps) used for security, rate-limiting, and debugging.

3. Photos and Image Privacy

The photos you scan are processed in memory only. They are sent to Google Cloud Vision for OCR text extraction and then immediately discarded — we never write your photos to disk or to our database. Only the extracted text and the resulting ingredient analysis are saved.

4. How We Use Your Information

• To provide and improve the scanning, ingredient lookup, and account features.
• To send transactional emails (password reset, subscription receipts).
• To prevent abuse and enforce our Terms.
• To comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising.

5. Third-Party Services

VeganScan relies on trusted providers: Google Cloud Vision (OCR), Google OAuth (sign-in), OpenAI (contest analysis), Stripe (payments), SendGrid (email), Neon (database), FatSecret, Spoonacular, USDA FoodData Central, Open Food Facts, and LibreTranslate (ingredient and translation lookups).

6. Cookies and Sessions

We use a single secure, HTTP-only session cookie to keep you logged in. We do not use tracking cookies or third-party advertising cookies.

7. Data Retention

We keep your account and scan history for as long as your account is active. You can delete your account at any time by contacting us, after which we permanently remove your personal data within 30 days.

8. Your Rights

Depending on where you live (EU/UK GDPR, California CCPA, and similar laws), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Contact us to exercise these rights.

9. Children

VeganScan is not intended for children under 13. We do not knowingly collect personal data from children under 13.

10. Security

We use industry-standard security: HTTPS everywhere, hashed passwords (scrypt), rate-limiting, security headers (Helmet), and input validation.

11. Changes to This Policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date above and, for material changes, notify you by email or in the app.

12. Contact

Questions? Contact Master 22 Solutions at master22solutions.com.