Privacy Policy
We built EatSure to help you feed your family with confidence — not to harvest your data. Here's exactly what we collect, why, and how you stay in control.
On this page
Overview
EatSure is a mobile app and web service operated by NutriLogic Labs Inc. (“EatSure,” “we,” “us,” or “our”). This Privacy Policy describes how we collect, use, and share information when you use the EatSure app, the eatsure.app website, and our backend services (collectively, the “Service”).
Our principle is simple: we collect only what we need to read labels against your food profile and alert you about food recalls, and we don't sell your personal information to anyone, ever.
Information we collect
Account information
When you sign in with Apple or Google, we receive your email address and a unique identifier from the provider. We do not receive your provider password.
Receipts and scan history
When you scan a grocery receipt, we process the photo to extract line items (product names, brands, dates, store). We store the extracted items in your scan history so we can monitor them against recall databases. We also store the receipt photo securely so you can review the scan later; it is removed when you delete the scan or your account.
Your food profile
If you set up a food profile, we store what you told us: the allergens you avoid — including any you typed in yourself — the diets you follow, your health goals, the certifications you look for, and the ingredients you have marked as avoid or note. This is what lets a scan answer “is this for me?” instead of just listing what is in the pack.
Optionally, you can also add your height, weight, sex and birth year. These are used for one thing only: showing what share of your estimated day a nutrient is, next to the figure the label itself prints. They never change a rating. You can leave every one of them blank, clear them at any time, and the feature that uses them is off until you turn it on.
Your allergens and body stats are the private half of your profile. They are stored under your account, readable only by you, never sold, never used for advertising, and never shared with another user or copied to anyone else's profile — including in any future feature that lets people share food preferences. If you ask us to include what a nutrient means for you, that calculation happens on your own device.
Saved recalls and shopping list
Recalls you bookmark and items you add to your shopping list are stored under your account so they sync across your devices.
Payment information
Optional premium features are billed through Stripe. Stripe collects and stores your payment details directly — we never see or store your full card number. We retain a Stripe customer ID and a record of your subscription status.
Push notification tokens
If you enable push alerts, we store the device token issued by Apple or Google so we can deliver recall notifications. You can disable this anytime from your device settings.
Diagnostic and usage data
We collect technical information — app version, device type, OS version, and crash logs — to fix bugs and improve reliability. This data is not used for advertising.
Product analytics
To understand how people use EatSure and where we can improve it, we collect privacy-first product analytics through PostHog — which screens are viewed, which features are used, and anonymized funnels and retention. To do this we assign a pseudonymous analytics identifier (your account ID once you sign in, plus a session ID). We never send your searches, scanned items, chat messages, product names, or other personal content. Analytics is on by default; you can turn it off anytime (see “Your rights & choices” below). Session replay is disabled and will only ever run if you separately opt in.
How we use information
- Match the products you've purchased against FDA & USDA recall databases
- Send you push and email alerts when a recall affects something you've bought
- Sync your scan history, saved recalls, and shopping list across your devices
- Process payments and manage subscriptions for premium features
- Diagnose crashes, improve performance, and ship product updates
- Respond to support requests you send us
We do not use your data to serve ads, build advertising profiles, or sell to data brokers.
Camera & photos
EatSure requests access to your camera so you can scan a paper receipt directly. You may also pick a photo of a receipt from your photo library instead. Receipt images are processed to extract item data and stored securely with your scan history so you can review the scan; they are removed when you delete the scan or your account, and we don't access photos you haven't selected.
You can revoke camera or photo permission anytime in your device's system settings. The app will still work for browsing recalls and managing saved items.
Data retention
We keep your scan history and saved items for as long as your account is active so you can be alerted to future recalls of products you've bought. You can delete individual items from the app at any time.
Product-analytics events (PostHog) are retained only as long as needed for the analytics purposes described above, in line with our data-retention configuration, and are deleted when you request account deletion. Session replay is disabled.
When you ask us to delete your account (see “Your rights & choices”), we request deletion of your personal data — including your analytics data — within 30 days, except where we're required to retain limited records (for example, transaction records for tax and accounting purposes).
Your rights & choices
You can:
- Edit or delete individual scans and list items from the app
- Turn product analytics off anytime — from the “Privacy & Data” screen in the app, or the “Analytics” control in the website footer
- Disable push notifications from your device settings
- Cancel a premium subscription anytime through the App Store or Play Store
- Request access, export, or deletion of your account and personal data by emailing us at the address below
Depending on where you live (for example, California, the EU, or the UK), you may have additional rights to access, correct, port, or delete your personal information, and to object to certain processing. Email us at the address below to exercise these rights — we'll verify your identity and respond within the timeframe required by your local law. We honor Global Privacy Control (GPC) signals on our website. We do not sell or share your personal information.
Security
We use TLS for data in transit, encrypted storage at rest, and least-privilege access controls for our team. No system is perfectly secure, but we treat your data with the same care we'd want for our own families.
Children's privacy
EatSure is intended for adults. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your country). If you believe a child has provided us with information, please contact us and we'll delete it.
International users
EatSure is operated from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you in the app or by email before the changes take effect. Continued use of EatSure after the effective date means you accept the updated policy.
Contact us
Questions, requests, or privacy concerns? We read every message.
NutriLogic Labs Inc.
Email: dave@eatsure.app