Identifood
Draft: being reviewed before Identifood accepts a single real account. Nothing here is in force yet. Items marked [confirm] need a decision or a lawyer's check.
Identifood privacy policy
Last updated 28 September 2026
Identifood tells travellers what a dish is and what it commonly contains, and writes a food card in the local language. This page explains, in plain English, what we collect to do that, who else handles it, and how to delete it. Identifood is made by Nth Finite Labs [confirm the exact legal entity and address].
The short version
- No ads, no tracking and no selling of anything about you, ever.
- Photos are sent to be read and then thrown away. We don't keep them.
- Your food card (your allergies and diets) is kept in your account so it works on any phone. It never changes a scan result, and nobody else can see it.
- You can delete your account and everything in it from Settings, in the app, at any time.
What we collect, and why
| What | Why | How long |
|---|---|---|
| Your email address, or your Sign in with Apple identifier (which can be a private relay address) | Your account: it holds your scans, your plan and your food card | Until you delete your account |
| Photos you scan (a plate, a menu, a packet) | To identify the food | Not stored: read, answered, discarded |
| Your food card: allergies, diets, how serious, anything you add. This is health information. | To write your card in the local language and keep it on any phone you sign in to | Until you change it or delete your account |
| A record of each scan (when, what kind, and its cost to us), without the photo | To count your monthly scans and keep our costs in check | Kept, but when you delete your account your name is removed from it |
| Your plan and purchases (from Apple) | To give you the scans you paid for | As long as the law requires for records [confirm] |
| Messages in Contact us, reports about a dish's answer ("Something wrong? Tell us", which names the dish), and problem reports you send by shaking your phone or from Settings, with a screenshot if you keep it attached. We add the screen's name, Identifood's version, your iPhone model and iOS version. Your account and email are not sent with them. | To help you, fix problems and correct wrong answers | Until you delete them: "Delete this conversation" at the bottom of any conversation, or Delete account, erases its messages and screenshots from our support inbox as well as your phone [confirm a retention period] |
| Usage and crash information: which screens you open, that a scan happened and how it ended (never what was in it), purchases, and crash reports [confirm: switched off in the app until our analytics service is live] | To see what works, fix crashes and understand our subscriptions | [confirm] |
A screenshot shows whatever was on your screen, which can include your food card or your email. You can remove it before sending.
Your location is used only on your phone, to choose the language of your food card. It is never sent to us or stored.
Apple Health (optional). If you tap "Save to Apple Health" on a dish, its estimated calories, protein, carbs and fat are saved to Apple Health on your phone. Identifood only writes these entries; it never reads your Health data, and none of it is sent to us.
The dish catalogue
When Identifood identifies a dish, the dish itself (its name, what it usually contains, how it's made, nutrition and culture notes) is kept in a shared catalogue, so the next person who scans it gets an instant answer. The catalogue contains nothing about you: no photo, no account, no food card. Dishes may also be shared with our sister app Kcal 360's food catalogue on the same terms: dish information only, never anything about a person.
Who else handles your data
| Service | What they do for us | What they see |
|---|---|---|
| Supabase (hosting, database, sign-in) | Runs Identifood's server and database, in Singapore | Your account, food card, scan records |
| Anthropic (AI) | Reads the photo and writes the dish breakdown; translates your food card | The photo, and your card's sentences (no name or email) |
| Apple | Sign in with Apple, purchases and subscriptions | What Apple's own privacy policy describes |
| Our support inbox (run by us, on our own server in Germany) | Holds Contact us conversations and problem reports | Your messages, screenshots and the device line above |
| Our analytics service (run by us) [confirm hosting when live] | Usage, purchase and crash information | Your account's ID number, never your email, food card or photos |
| Email delivery [confirm provider] | Sends your sign-in code | Your email address |
None of them may use your data for their own advertising. [confirm each provider's data-processing terms and whether photos sent to the AI are retained by the provider]
Your choices and rights
- Delete everything: Settings › Delete account. It erases your account and food card, and your Contact us conversations and reports (from our support inbox, not just your phone), and removes your name from scan records. If the support inbox can't be reached, nothing is deleted and the app tells you, so you can try again. Cancel an Apple subscription separately in Settings › Apple ID › Subscriptions.
- See or correct your data: your food card is editable in the app; for anything else, email us.
- Wherever you live (including the EU/UK under GDPR and California under the CCPA) you can ask for a copy of your data, or for it to be corrected or erased, by emailing hello@identifood.app. We answer within 30 days.
Children
Identifood is not intended for children under 13 [confirm age: 13, or 16 for the EU]. We don't knowingly collect data from them.
Security
Everything travels over encrypted connections. Your sign-in token is kept in your phone's Keychain. On our server each account can only read its own data, and the shared catalogue can only be written by the server itself.
Changes and contact
If this policy changes in a way that matters, we'll tell you in the app before it takes effect. Questions: hello@identifood.app.
This website
When you first visit, we ask before using any cookies. Nothing below runs until you choose: Reject all turns everything off, Accept all turns it all on, and Choose lets you pick Analytics and Marketing separately. You can change your mind at any time with Cookie settings at the bottom of every page; switching something off deletes its cookies from this site.
If you say yes, these companies receive information about your visit, such as the pages you open, your browser and device, and your internet (IP) address:
- A session-recording service: how people use the site, including recordings of clicks, scrolling and mouse movement on our pages (it hides anything you type).
- A social-media advertising platform: whether a visit came from one of our ads on social media, so we can see which ads work.
We keep a record of the choice you made (a random ID made by your browser, what you chose and when, the page, and your browser type, but not your IP address) so we can show we asked. Your choice is remembered in your browser for 12 months, then we ask again.
If you send us a message from the Support page, it goes to our support inbox so we can reply.