Privacy policy

In short

• Without an account, everything you enter stays on your phone.
• Scanning sends only the barcode or search words to Open Food Facts, a non-profit product database.
• With an account, your data is stored in Canada and only your account can read it.
• Photos and label text are read on your phone and never uploaded.
• No ads, no analytics, no tracking, no sale of data.
• You can export everything and delete your account from the app at any time.

What stays on your phone

The app keeps these in a database on your device:

• your profile: sex, age, height, weight, activity level, goal, diet, allergens and other alerts, skin type, and the daily targets worked out from them;
• your diary: meals, water, weight, fasting, recipes, favourites and shopping list;
• the people you add to your household and their diaries (see “Information about other people” below);
• a cache of products you have looked up, so they open offline.

Photos of plates, nutrition labels and recipe pages are analysed on your phone by models bundled with the app or built into your phone. They are not uploaded and not kept by Scrutina. On iPhones with Apple Intelligence, typed questions about a product are answered on the device; nothing is sent to us or to Apple.

Reminders are scheduled on your phone. Widgets and the watch app read from the phone.

What leaves your phone

Product lookups

When you scan or search, the app sends the barcode or search words to Open Food Facts or Open Beauty Facts, run by the French non-profit Open Food Facts. Like any web request, it carries your IP address and a label identifying Scrutina. No account details are sent. Their privacy policy: world.openfoodfacts.org/privacy.

Importing a recipe from a link

Your phone opens the page you paste, directly. That website sees the visit as it would from a browser. We do not receive the link.

Account and sync (optional)

You can use Scrutina without an account. If you sign in, we store:

• your email address, and for Sign in with Apple or Google, the identifier they provide;
• your profile, diary, weight log, water, recipes, favourites and household, so they follow you to another device;
• a display name, if you choose one, for friends and reviews.

Scan history and the product cache are not synced. Our database is hosted by Supabase in its Canada (Central) region, and access rules mean only your account can read your rows.

Sign-in emails

Sign-in links and codes are sent through Resend, our email provider, which processes your email address only to deliver the message. Sign in with Apple and Google sign-in are handled by Apple and Google under their own policies; Scrutina receives only what is needed to confirm it is you.

Reviews (optional)

If you are signed in and write a review, its stars and text are public to other Scrutina users. Your name appears only if you tick “Show my name” on that review. Reviews pass an automatic filter, and a moderator may hold or remove them. If you report a review, we keep the report and its reason. If you block someone from a review, we keep that block with a short excerpt of the review so you can recognise it in your blocked list; the person is not told, and you can unblock them at any time.

Friends (optional)

If you share your friend code and someone enters it, you each see the other’s display name, logging streak and the number of days logged this week. Meals, products, weight and scores are never shared. Either of you can remove the link.

Apple Health and Health Connect (optional)

Two separate switches, both off until you turn them on. Send copies the meals, water and weight you log into the health app on your phone. Read fills in your profile from your weight, height and, on iPhone, sex and date of birth; adds weights from your scale to the weight log; and reads today’s steps and active energy to show them and, if you choose, adjust today’s calorie target. What is read stays on your phone, except weights added to the weight log, which sync if you are signed in. We do not use health data for advertising or share it with anyone.

Tips (optional)

Tips are paid through the App Store or Google Play. They handle the payment; we never see your card or billing details. We only learn that a tip went through, and the app counts it on your profile to say thank you.

Information about other people

Household lets you keep a diary for people you cook for, such as a partner or child. Only add someone if you are entitled to, for example as their parent or guardian, and tell them. Their details are treated like yours: kept on your phone, and synced to your account if you sign in. Remove a person at any time from Settings, Household.

What we do not do

• No advertising, advertising identifiers or tracking across apps and websites.
• No analytics or crash-reporting tools.
• No sale, rental or sharing of personal data with others for their own purposes.
• No decisions about you made by software, beyond the targets and scores you can see and change.
• Scrutina is not a medical device and gives no medical advice.

Children

You need to be 13 or older to use Scrutina on your own or to create an account. A parent or guardian may keep a diary for a younger child through Household. We do not knowingly collect information directly from children under 13; if you think we have, write to us and we will delete it.

How long we keep data

Data on your phone stays until you delete it or the app. Synced data stays until you delete it or your account. Deleting your account removes it, and every synced row, from our database straight away; copies in our host’s backups expire on their normal schedule, within 30 days. Review reports are deleted with the review. Blocks are deleted when you unblock the person or delete your account.

Where data is processed

Synced data is stored in Canada. Sign-in emails are sent through Resend in the United States. Product lookups go to Open Food Facts in France. These providers may be subject to the laws of their countries.

Your rights and choices

• See and export: Settings, Export diary as CSV, gives you everything in your diary.
• Correct: change your profile and entries in the app at any time.
• Delete: Settings, Account & sync, Delete my account. Can’t open the app? See Delete your account.
• Withdraw consent: turn off the Health switches, or sign out to stop syncing; your data stays on the phone.

You can also ask us for a copy of what we hold about you, or to correct or delete it, at privacy@scrutina.app. We answer within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada, or, in Quebec, the Commission d’accès à l’information.

Changes

If this policy changes, we will post the new version here with a new date, and tell you in the app when the change matters.

Contact

HM Verge Consulting, Manitoba, Canada. Privacy questions and requests: privacy@scrutina.app. Everything else: support@scrutina.app.