1.Who we are
KidSafeScan (the “App”) is published by lolpick (“we”, “us”). We are the controller of the limited personal information described in this policy.
Questions, requests, or complaints: support@kidsafescan.com. We respond to privacy requests within 45 days.
2.What the App is — and what it is not
KidSafeScan helps a caregiver read a food label faster by matching printed ingredients against allergens they have entered for their own family. It is an information tool.
KidSafeScan does not provide medical advice, diagnosis, or treatment, and it does not replace reading the physical label. Manufacturers change formulations without notice. Always check the product packaging before serving, and follow your allergist’s emergency action plan if a reaction occurs. In an emergency, call 911.
3.Information stored only on your device
The following is created by you and stored locally on your device, and — if you have iCloud enabled — in your Apple iCloud account, which we cannot access:
- Family member names or nicknames, avatar colours, and birth years
- Allergens and free-typed restricted ingredients for each family member
- Reaction severity tags, including anaphylaxis flags
- Your scan history and any products you save
This information is never transmitted to our servers, and we have no technical means of retrieving it. If you delete the App, this data is removed from the device; data held in your iCloud account is governed by Apple’s terms and can be removed through your iCloud settings.
Because it never reaches us, this information cannot be sold, shared, subpoenaed from us, or exposed in a breach of our systems.
4.Information our servers do receive
| What | Why | Retention |
|---|---|---|
| Barcode numbers submitted for product lookup | To return ingredient data for that product. Sent without any account, device, or family identifier — we cannot tell which user or household asked. | Aggregated counts only, to measure database coverage. Not linked to individuals. |
| Email address, if you write to our support address | To answer your message. We do not run a mailing list and will not add you to one. | Until the conversation is closed, or sooner if you ask us to delete it. |
| Crash and performance diagnostics, if you opt in through iOS | To fix crashes. Provided by Apple in aggregated form and contains no allergen or profile data. | Per Apple’s retention schedule. |
| Purchase status for subscriptions | To unlock paid features. Apple processes the transaction; we receive a subscription receipt, not your payment details. | For the life of the subscription plus applicable tax records. |
We never receive your payment card details. All purchases are handled by Apple through your App Store account.
5.Information we do not collect
- We do not collect your family’s allergen, health, or medical information on our servers.
- We do not use Apple HealthKit, and we do not read from or write to the Health app.
- We do not collect precise or coarse location.
- We do not collect your contacts, photos library, or microphone.
- Camera frames used for barcode scanning and ingredient text recognition are processed on your device and are not uploaded. Text recognition uses Apple’s on-device Vision framework.
- We do not use advertising identifiers, and we do not display third-party advertising.
6.Analytics and third parties
No allergen, profile, or health information is sent to any analytics provider, advertising network, data broker, or other third party — not individually, not in aggregate, and not in de-identified form.
The service providers we rely on, and what each can see:
- Apple — App Store distribution, subscription billing, and optional crash reporting.
- Our hosting and database provider — serves anonymous barcode lookups. Sees barcode numbers and standard server logs (including IP address, retained briefly for abuse prevention and security).
- Our email provider — carries the support messages you send us, if you write in.
These providers act on our instructions and may not use the data for their own purposes. We may also disclose information where legally required, or to protect the safety and rights of our users — but we cannot disclose what we do not hold, which is the point of the design in Section 3.
7.We do not sell or share your personal information
We have not sold or shared personal information in the preceding twelve months, and we do not do so now. “Sale” and “sharing” carry the meanings given in the California Consumer Privacy Act, including sharing for cross-context behavioural advertising. We do not process personal information for targeted advertising in any jurisdiction.
8.Children
KidSafeScan is designed for parents and caregivers. It is not directed to children and we do not knowingly allow anyone under 13 to create an account or provide information directly to us.
The App is used to record information about children — that is its purpose. That information is entered by the adult caregiver and, as described in Section 3, remains on the caregiver’s own device and iCloud account. We never receive it, so we do not collect personal information from children as defined by the Children’s Online Privacy Protection Act.
If you believe a child has provided information directly to us, contact support@kidsafescan.com and we will delete it.
9.Your rights and choices
You may, at any time:
- Delete your family data — remove individual profiles in the App, or delete the App to remove all local data. This does not require contacting us.
- Delete your account, if you have created one. The App provides in-app account deletion; deletion removes your email address and subscription association from our systems.
- Access, correct, or delete any information we hold — in practice, your email address — by writing to support@kidsafescan.com.
- Unsubscribe from any email we send, using the link in that email.
- Withdraw camera access in iOS Settings. Barcode and ingredient scanning will stop working; nothing else is affected.
Residents of California, Colorado, Connecticut, Utah, Virginia and other states with comprehensive privacy laws have rights to know, delete, correct, and opt out of sale, sharing, or profiling. We honour these requests from all users regardless of residence, and we will not discriminate against you for exercising them. If we decline a request, you may appeal by replying to our response.
10.Security
Data in transit is encrypted with TLS. Data on your device is protected by iOS file-level encryption and your device passcode. Because your family’s allergen information never leaves your device, the largest category of sensitive data in this product is not exposed to our infrastructure at all.
No system is perfectly secure. If a breach affects information we hold, we will notify affected users and regulators as required by applicable law.
11.Data location and transfers
KidSafeScan is offered in the United States and our servers are located in the United States. If you use the App from outside the United States, the limited information described in Section 4 will be processed there.
12.Product data sources
Product and ingredient records are derived in part from Open Food Facts, made available under the Open Database License (ODbL), and from the USDA FoodData Central branded foods dataset. These are public datasets and contain no information about you.
13.Changes to this policy
If we change this policy materially — particularly if we ever begin collecting information we do not collect today — we will update the “last updated” date, notify you in the App, and where required obtain your consent before the change takes effect. Continued use after a change means you accept the revised policy.
14.Contact us
lolpick
support@kidsafescan.com