CLARIFOOD PRIVACY POLICY

Effective Date: October 24, 2026 Last Updated: October 24, 2026 Regulatory Compliance: GDPR (EU 2016/679), CCPA/CPRA, COPPA, KVKK (No. 6698) Data Protection Contact: [email protected]

  1. INTRODUCTION AND ARCHITECTURE OVERVIEW ClariFood is committed to personal data protection and user privacy. This Privacy Policy details our data practices across the ClariFood mobile application in compliance with international data protection frameworks.
  2. PRIVACY-BY-DESIGN AND ON-DEVICE LOCAL STORAGE ClariFood is architected upon the principle of Data Minimization. Your health goals, dietary preferences (e.g., vegan, celiac, halal), allergen flags, daily macro targets, and scanned product history are stored exclusively within your device's sandboxed local storage. ClariFood operates without requiring user registration, legal names, email addresses, or telephone numbers. We do not maintain centralized cloud user databases, nor do we construct behavioral or advertising user dossiers. You can permanently wipe all locally saved application data at any time via the "Reset My Data" control in the Profile settings.
  3. HARDWARE PERMISSIONS AND USAGE Camera permission is requested solely to scan EAN/UPC product barcodes in real-time, execute on-device Optical Character Recognition (OCR) over printed packaging, and capture meal photos for nutritional composition analysis. The camera is never accessed in the background, is never recorded without explicit user intent, and is never broadcast. Photo library access is used strictly when you choose to import an image of food from your gallery for analysis.
  4. SUB-PROCESSORS AND THIRD-PARTY SERVICES When scanning a product barcode, only the numeric barcode sequence (EAN/UPC) is queried against the Open Food Facts public repository. No personal credentials or device telemetry are transmitted. For meal photo scanning or ingredients label parsing, image or text data is transmitted securely via TLS 1.3 encrypted HTTPS channels to enterprise cloud AI services solely to generate nutritional composition reports. These inputs are not linked to your personal identity, are not permanently stored, and are contractually prohibited from being used to train public foundation models. Pro subscription entitlements and receipt validations are processed through RevenueCat alongside Apple StoreKit and Google Play Store billing APIs. Credit card numbers and financial credentials are never collected, viewed, or stored by ClariFood.
  5. ZERO ADVERTISING AND PROHIBITION ON DATA MONETIZATION ClariFood contains zero third-party advertising SDKs (such as Meta Audience Network or Google AdMob). We do not participate in cross-app tracking (Apple IDFA or Google GAID tracking). We never sell, lease, or monetize personal data, complying fully with CCPA "Do Not Sell or Share My Personal Information" requirements.
  6. INTERNATIONAL DATA TRANSFERS Where data transit to certified infrastructure providers is required, transfers are carried out strictly in accordance with recognized international data transfer mechanisms, including European Commission Standard Contractual Clauses (SCCs) and GDPR Article 46 safeguards.
  7. STATUTORY DATA RIGHTS Under applicable privacy legislation (GDPR, CCPA, KVKK), you have the right to access your data, rectify inaccurate records, permanently erase your data ("Right to be Forgotten") via the in-app reset function, restrict or object to processing operations, and lodge an inquiry with your competent Data Protection Authority.
  8. PROTECTION OF MINORS ClariFood does not target or knowingly collect personal data from children under the age of 13 (or under 16 where required by local statute).
  9. DATA PROTECTION CONTACT Direct all inquiries and requests regarding your personal data to: [email protected]