Privacy Policy

Last updated: June 2, 2026

What we collect

Account data: email address and hashed password (bcrypt) to authenticate you.
Food & health data: meals you log, calorie totals, weight entries, height, age, gender, activity level — stored to power your personal dashboard.
Photos: food images you choose to scan are compressed and sent to Google Gemini API for food recognition. Images are not stored on our servers after processing.
Activity data: if you grant permission, steps and active calories from Google Health Connect — read-only, never uploaded to our servers.

To provide calorie tracking, personalised targets, and nutritional insights.
Food images are sent to Google Gemini API (Google's privacy policy applies) solely to identify food items. We do not use your images for any other purpose.
We do not sell, share, or monetise your personal data.

Your data is stored on servers in Oracle Cloud (US region) secured with TLS. Passwords are never stored in plain text.

Google Gemini API — for food image recognition.
Open Food Facts — for barcode/packaged food nutrition lookup (public database, no personal data sent).
USDA FoodData Central — for food nutrition search (no personal data sent).

You can request deletion of your account and all associated data at any time by emailing support@bitescanapp.com. We will action this within 7 days.