PrivacyPolicy

Section 01 · The short version

If you remember nothing else

FoodFat is built to be useful without watching you. The on-device scoring engine runs offline. Scan history lives on your phone, in a local SQLite file, not on a server. The only data that leaves the device is what you explicitly need to leave: a barcode lookup to Open Food Facts, an authentication token to Firebase, and — if you opt in to AI label reading — the photo of a pack to Anthropic.

• No analytics, no ad networks, no SDK that tracks you across apps.
• No selling, sharing, or renting of your data to anyone.
• Your Anthropic API key is stored on your device only.
• You can use the app without an account. Anonymous sign-in is the default.

Section 02 · Who we are

The publisher

FoodFat is published by Arju Singh ("we", "us"). The app is distributed under the bundle identifier com.arju.foodfat on iOS and com.foodfat.foodfat on Android. Questions or requests: connect@arjusingh.com.

Section 03 · The data we handle

What's collected, why, and where it goes

Section 04 · What we deliberately don't do

The list of things we avoid

• No analytics. Firebase Analytics is disabled in the iOS configuration (IS_ANALYTICS_ENABLED = false) and is not initialised in the Android build.
• No advertising SDKs. The "ads" we serve are first-party promo cards from our own Firestore, authored by us, never personalised.
• No third-party tracking. No Facebook Pixel, no Google Tag Manager, no Segment, no Mixpanel, no anything.
• No cross-app identifiers. We do not read your Advertising ID (IDFA / GAID).
• No location. We never request location permission. We don't need it.
• No microphone. Camera is requested for scanning; mic is not.
• No contacts, calendar, health-kit, photos library — unless you tap "Pick from gallery" in the label-reader, in which case you pick one image, we read it, that's it.

Section 05 · Third-party services

Who else sees a slice of the data

Section 06 · Your rights and controls

How to see, fix or delete your data

• See it. Open the History tab to view every scan we've kept. Open Settings to view the Anthropic key state and your account email (if any).
• Delete a scan. Swipe a row in History → delete. Removes the local copy and the Firestore copy.
• Clear the API key. Settings → "Forget my Anthropic key."
• Sign out / delete account. Settings → Sign out. To delete the account itself, email connect@arjusingh.com from the email on file; we remove your user doc and every scan attached to your UID within 7 days.
• GDPR / CCPA. Residents of the EU, UK and California have the right to access, correct, port and delete their data. We honour these requests free of charge; email us.
• Children. The app is not directed at children under 13 (under 16 in the EU). If you believe we've collected data from a child, email us and we'll delete it.

Section 07 · Permissions, on each platform

What the OS dialogs really mean

Section 08 · Security

What protects the data

Firestore access is gated by the rules in firestore.rules: each user can only read/write their own documents; only members of the admins/ collection can read everyone's scans or edit promo cards. The Anthropic API key is stored using the OS's secure preference storage (Keychain on iOS, EncryptedSharedPreferences on Android). All network calls are over HTTPS / TLS 1.2+.

No system is perfectly secure. If you believe you've found a vulnerability, email connect@arjusingh.com.

Section 09 · International transfers

Where the data physically sits

Firebase data is stored in Google's US multi-region by default. If you are accessing the app from the EU / UK, your data is transferred to the US under the EU-US Data Privacy Framework and Google's Standard Contractual Clauses. Anthropic processes vision requests on their own infrastructure under their terms.

Section 10 · Changes to this policy

What happens when this page changes

If we change how the app handles data in any material way, we'll bump the "Last updated" date at the top and surface an in-app notice on next launch. We won't silently broaden what we collect.