ScoreBite Privacy Policy

Last updated: 2 November 2026

Overview

ScoreBite is a food scanning app. You scan a product’s barcode, and ScoreBite looks it up in Open Food Facts, a public food product database, to show a health score, nutrients, additives and healthier alternatives. When a product has no usable data, you can instead photograph its ingredients or nutrition label, and that photo is sent to OpenAI, a third-party artificial intelligence provider in the United States, to produce a health check. This policy explains exactly what data ScoreBite collects, how it is collected, every purpose it is used for, and every third party it is shared with.

A photo is only ever sent to OpenAI when you choose to analyze a label, take the photo yourself and crop it. Barcode scans and searches never send photos anywhere.

What data we collect, and how

ScoreBite has no user accounts. We never ask for and never receive your name, email address, phone number, contacts, precise location, or advertising identifier. The app handles only the following:

• Barcodes and search terms. Collected when you point the camera at a barcode or type a product or brand name into search. The camera is only used after you grant the camera permission, and barcode scanning happens on your device; no camera images are sent anywhere during a barcode scan.
• Label photos you capture. Collected through your device camera, only when you choose to analyze a label. You then crop the photo to the ingredients or nutrition label. ScoreBite does not read your photo library, does not save these photos to your gallery, and does not use the camera in the background.
• Scan results and history. Product details, health scores and breakdowns for products you scan, including the cropped label photo for AI-analyzed products, plus cached healthier alternatives.
• An anonymous sign-in identifier. Generated automatically by Firebase Anonymous Authentication the first time you analyze a label photo. It is a random string tied to this app installation and is not linked to any personal identifier. Its only job is to let our relay server apply a daily request limit.
• App preferences and usage counters. Theme, language, whether you have seen onboarding, your subscription status flag, how many products you have scanned today and their barcodes. Collected from your own interactions with the app.
• Subscription receipts. When a subscription purchase succeeds, the store-issued product ID, transaction ID, order ID, transaction date, purchase token, raw store receipt and device platform (iOS or Android) are recorded in our Firebase Realtime Database so we can verify entitlements and resolve billing disputes. This record contains no name, email or payment card data.

Scan history, photos, preferences and counters are stored only on your device. You can delete individual entries from your history in the app, and deleting ScoreBite removes this data, with one exception: on iPhone and iPad, today’s scan counter (the date, a count, and the barcodes scanned that day) is also kept in the device keychain, which iOS preserves after the app is deleted, so that reinstalling does not reset free scans. We keep no copy of your photos or scan history on any server we operate; subscription receipts are the only record held on our side.

How we use this data

• To look up the product you scanned or searched for and show its health score and details.
• To analyze a label photo you chose to send and show you the result. This is the only purpose the photo is used for.
• To suggest healthier alternatives in the same product category.
• To show your own scan history on your device.
• To enforce free-tier daily scan limits and unlock Premium features.
• To remember your settings between launches.

We do not sell your data, do not share it with advertisers or data brokers, do not use it for advertising or tracking across apps or websites, and do not build a profile about you.

Third parties we share data with

These are the only third parties that receive any data from ScoreBite. Each processes it under its own published terms and privacy policy, linked below.

Open Food Facts — France

Receives: the barcodes you scan, the search terms you type, product categories (to find alternatives), your app language, and the technical data inherent in any internet request, such as your IP address and the app name and version. Product photos shown in the app are also loaded from Open Food Facts servers.
Purpose: returning product information, search results and alternatives to the app. Open Food Facts does not receive your photos, your scan history or any account identifier.
Open Food Facts Privacy Policy

OpenAI, L.L.C. — United States

Receives: the cropped label photo you chose to analyze, and a fixed text instruction asking for a product name, health score and ingredient breakdown.
Purpose: generating that health check and returning it to the app.
Under the OpenAI API terms that govern our use, content submitted through the API is not used to train OpenAI models; it may be retained for up to 30 days for abuse monitoring and is then deleted. OpenAI does not receive your name, email, device identifiers or location.
OpenAI Privacy Policy · OpenAI API data usage terms

Cloudflare, Inc. — United States

Receives: the same label analysis request, in transit.
Purpose: ScoreBite’s own relay server runs on Cloudflare Workers so that our OpenAI key never ships inside the app. The relay verifies your anonymous sign-in, counts requests for rate limiting, and forwards the request to OpenAI. It does not store your photo.
Cloudflare Privacy Policy

Google LLC (Firebase) — United States

Receives: a request to create and verify an anonymous sign-in for this app installation, plus the technical data inherent in that request such as your IP address; and, when you subscribe, the store-issued subscription receipt described above.
Purpose: issuing the anonymous token our relay checks before forwarding anything to OpenAI, and verifying subscription entitlements. No profile, email or name is created.
Firebase Privacy Information

Apple Inc. and Google LLC (app stores)

Receive: your purchase and subscription activity, handled entirely by the store. We never see your card details.
Purpose: processing subscriptions and confirming entitlement.

Label photos and AI

Analyzing a label is optional. ScoreBite only offers it when a scanned product is missing from Open Food Facts or lacks usable data, and nothing is sent until you take the photo and crop it. If you never use this feature, no photo ever leaves your device and no data is sent to OpenAI, Cloudflare or Firebase Authentication.

Please photograph only the product packaging, and avoid capturing faces, documents or other personal information.

Retention and deletion

• On your device: history, photos and preferences are kept until you delete them in the app or delete the app. On iPhone and iPad, the daily scan counter remains in the keychain after the app is deleted.
• At OpenAI: up to 30 days for abuse monitoring, then deleted, and never used for model training.
• On our relay: a per-day request counter keyed to your anonymous identifier, which expires automatically after 48 hours. No photos, prompts or responses are stored.
• In our Firebase database: subscription receipts, kept as long as needed for billing and entitlement records.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent. Because ScoreBite keeps your scans only on your device and holds no account, you can exercise deletion yourself by deleting history entries or the app. For anything else, including subscription receipts or what an anonymous identifier is associated with, write to archimidias@gmail.com and we will respond within 30 days. We do not sell or share personal information as those terms are defined under US state privacy laws.

Diagnostics

We may use basic crash and stability diagnostics provided by the app stores. These are aggregated and do not aim to identify you personally. ScoreBite contains no third-party advertising or analytics SDKs.

Children’s privacy

ScoreBite is a food and nutrition scanning app and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted personal information through the app, contact archimidias@gmail.com and we will delete what we can and disable the relevant identifier.

International transfers

OpenAI, Cloudflare and Google process data in the United States, and Open Food Facts operates from France. If you use ScoreBite from another country, your barcodes and searches, and any label photo you choose to analyze, are transferred to those countries for processing.

Changes

We may update this policy to reflect changes in the app, in the providers we use, or in legal requirements. When we do, we will update the “Last updated” date above, and when a change materially affects what is shared or with whom, we will also tell you inside the app.

Contact

Questions about this policy or about your data: archimidias@gmail.com