Privacy Policy

Effective date: July 16, 2026
Last updated: July 16, 2026
Contact: hello@scanfortwo.com

We do not sell your personal data. We collect only what is needed to run the app, enforce free-tier limits, and improve reliability.

This Privacy Policy describes how ScanForTwo (“we,” “us,” or “our”) collects, uses, and protects information when you use the ScanForTwo mobile application and related websites (collectively, the “Service”). By using ScanForTwo, you agree to this Policy.

1. Who we are

ScanForTwo is an informational app that helps users look up pregnancy and breastfeeding safety information about ingredients using public clinical sources (including FDA DailyMed and LactMed data). ScanForTwo is not a healthcare provider and is not affiliated with the FDA, DailyMed, or LactMed.

2. Information we collect

We collect minimal data:

Device / account identifiers. A device-generated or account identifier used to enforce free-tier usage limits (e.g., monthly scan quotas) and, if you create an account, basic authentication identifiers.
Scan / lookup history (optional). If history is enabled or you are signed in, we may store the ingredient names you searched, list checks you ran, timestamps, and the safety verdict returned, so you can revisit past results.
App preferences. Stage settings you choose (e.g., pregnancy week or breastfeeding), disclaimer acceptance, and similar settings.
Technical / diagnostic data. Crash reports, performance logs, and basic device metadata (app version, OS version) when error tracking is enabled, used solely to keep the Service reliable.
Communications. If you email us for support or ingredient review requests, we receive the content of that message and your email address.

3. Photos, camera, and OCR (important)

If you use the “Scan ingredient list” feature, the camera is used to capture text from a product label on your device using on-device text recognition (e.g., Google ML Kit).
Photos are processed locally on the device. We do not upload label photos or image files to our servers for OCR.
After on-device recognition, the app may send text strings only (the recognized and/or user-edited ingredient text) to our backend so we can extract and evaluate ingredients against our safety database.
You can edit the recognized text before it is sent. You may also type or paste ingredient text without using the camera.

4. How we use information

We use information to:

Provide ingredient lookup results and list safety evaluations;
Enforce free-tier quotas and premium entitlements;
Save optional history and preferences;
Respond to support requests;
Maintain security, prevent abuse, and improve app reliability;
Comply with legal obligations.

We do not sell personal data and we do not rent or trade personal data for advertising purposes.

5. Where data is stored (Supabase)

Our application database and related backend storage are hosted using Supabase (PostgreSQL and associated cloud infrastructure). Data may be stored in the United States or other regions where our providers operate. We use industry-standard access controls, including server-side keys that are never embedded in the public app for privileged operations.

6. Legal bases (where applicable)

If you are in a jurisdiction that requires a legal basis for processing (such as the EEA/UK), we process data based on: (a) performance of the Service you request; (b) our legitimate interests in security and product improvement; and/or (c) consent where required (e.g., optional analytics or notifications, if enabled).

7. Sharing of information

We share information only with:

Service providers who help us operate the Service (e.g., Supabase for database hosting, cloud infrastructure, crash reporting, payment processors for in-app purchases);
App platforms (Apple App Store / Google Play) for purchases and distribution;
Legal authorities when required by law or to protect rights, safety, and security.

Providers are permitted to process data only as needed to perform services for us.

8. Data retention

We retain account/device identifiers and optional history only as long as needed to provide the Service and enforce quotas, or as required by law. You may request deletion of your account-associated data by contacting us (see below). Local on-device history may remain on your phone until you clear app data or uninstall.

9. Security

We use reasonable administrative, technical, and organizational measures to protect information (including encrypted transport via HTTPS and restricted server credentials). No method of transmission or storage is 100% secure.

10. Children’s privacy

ScanForTwo is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

11. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. To exercise these rights, email hello@scanfortwo.com. You can also limit camera access in your device settings (the app will still allow manual text search).

12. International users

If you access the Service from outside the country where our servers are located, your information may be transferred across borders. Where required, we use appropriate safeguards for such transfers.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. Continued use of the Service after changes become effective constitutes acceptance of the revised Policy.

14. Contact us

Questions about this Privacy Policy or our data practices:
Email: hello@scanfortwo.com
Product: ScanForTwo