English
Privacy Policy · NutriScan
Who we are
INFRANOVASOFT Technology Solutions ("we") develops and operates NutriScan ("the app"), from Ecuador. This policy explains what data the app collects, what for, who else processes it and what you can do about it. Contact: desarrollo@infranovasoft.com.
Your account
Your name, your email and a hash of the password you choose when you create the account; nobody on our team can read your password. If you sign in with Google or Apple, we receive the name, email and identifier you authorize that provider to share (Apple may give us a private relay email).
What you save in the app
The products you look up, your scan history and favorites, and the market country you choose. The country is suggested from your device region; we do not use GPS. It is yours; we store it to show it to you, sync it across your devices and back it up.
Label photos
When you choose to analyze a label and authorize sending the photo, it goes to our server and, when a new reading is needed, to OpenAI to extract the ingredients, nutrients and a short summary. We do not include your name or email in that request. We do not store the original photo: we keep an image fingerprint, the extracted text and values, the barcode if you scanned one and the market country. Photograph only the package and avoid people, addresses and documents.
The shared catalogue
New readings are private drafts. Once you confirm one, the label information becomes part of a catalogue visible to other NutriScan users, without your name or email. We keep your account linked to the contribution internally to handle reports and deletion. Your history and favorites are never public.
Device and usage
The device model, operating system, app version and language, a notification token if you allow notifications, and a security log of account actions with the IP address they came from.
There is no third-party analytics SDK and no tracking across other companies' apps or websites.
Advertising
NutriScan is free and shows ads from Google AdMob. They are non-personalized ads: your profile and your activity are not used to choose them. AdMob does receive your device's advertising identifier, which it uses to limit repetition and detect fraud; you can reset it in your phone's settings.
What we use it for
- To make the app do what it promises
- To keep you signed in and back up your data
- To reply when you write to support
- To detect abuse and protect accounts
We do not sell your personal data and we do not share it with anyone for their own advertising.
Who else processes it
Only the providers we need to run the app, and only what each one needs. They act on our behalf and may not use your data for their own purposes. Some of them are outside your country; we rely on their contractual safeguards for those transfers.
| Provider | What for | Where |
|---|---|---|
| Contabo GmbH | Servers and database | European Union |
| Google Firebase Cloud Messaging | Push notifications | United States |
| Google AdMob | Non-personalized ads | United States |
| Google Sign-In | Sign in with Google, if you choose it | United States |
| Sign in with Apple | Sign in with Apple, if you choose it | United States |
| OpenAI | Read food labels from the photo | United States |
How long we keep it
- Your account and what you save: while the account exists.
- After you delete your account: erased within 30 days.
- Security log with IP addresses: 12 months.
- Backups: rotated within 35 days.
- Confirmed products stay in the catalogue while published and linked to an active account, unless removed through correction or moderation.
Your rights and deleting your account
You can access, correct, export and delete your data, and object to or restrict its processing. To delete your account and everything in it, open Settings → Delete my account in the app, or follow the steps at www.infranovasoft.com/nutriscan/eliminar-cuenta. You can also write to desarrollo@infranovasoft.com; we reply within 30 days.
Depending on where you live, laws such as the GDPR (European Union), the CCPA (California) or Ecuador's Organic Law on Personal Data Protection give you these rights and the right to complain to your data protection authority.
Children
The app is intended for adults 18 and over. We do not knowingly collect data from minors; if you learn that a minor created an account, write to us and we will delete it.
Security
All traffic travels encrypted over HTTPS, passwords are stored as a cryptographic hash and access to the servers is restricted to the team that operates them. No system is infallible, and we cannot guarantee absolute security.
Changes and contact
If we change this policy we will update the date at the top, and we will let you know in the app when the change is important. Questions: desarrollo@infranovasoft.com.