Privacy Policy — CheckYrFood

Last updated: 2026-05-29 Effective: 2026-05-29

This Privacy Policy explains how CheckYrFood ("the app", "we") collects, uses, and protects information when you use the app. We follow Regulation (EU) 2016/679 (GDPR) and Romanian Law 190/2018.

1. Who we are

Operator: TBD (to be updated before public launch) Contact: support@blackhammer.work

For any data-protection question, request, or complaint, reach out at the email above. We will respond within 30 days.

2. What information we collect

CheckYrFood is designed around local-first data. Most of what you create stays on your device.

2.1. Data stored locally on your device (never sent to us)

Your allergen profile — the foods and ingredients you mark to avoid, including sensitivity level, notes, and aliases
Scan history — products you scanned, verdicts, timestamps, and the photo's content hash
App preferences — onboarding completion, tutorial-seen flag, locale
Cached AI responses — to reduce duplicate API calls

This data lives in a SQLite database in your app's private storage. It is not transmitted to any server, never backed up to our infrastructure, and is deleted entirely when you tap "Delete everything" in Settings or uninstall the app.

2.2. Data sent to third parties when you scan a product

When you tap "Scan" or "Add analysis," the following may be transmitted:

The photograph you captured (compressed JPEG)
The list of allergens in your profile (names + aliases, no personal identifiers)
A short text excerpt from on-device OCR (label content)
A locale code (e.g. "ro", "en")

These are sent to:

Anthropic, PBC (USA) — for AI-based ingredient analysis. Provider's data handling: https://www.anthropic.com/legal/privacy
Cloudflare, Inc. (USA/EU edge) — acts as a thin proxy to Anthropic; does not retain payload content

Anthropic processes requests in real time and does not retain user inputs for model training when accessed via API.

2.3. Device identification (anonymous)

To enforce free-tier quotas and prevent abuse:

A random per-install identifier is generated and stored locally
A short-lived signed token (JWT) is issued by our Cloudflare Worker
We track per-device daily/monthly request counts in a Cloudflare KV store

We do not know who you are. We do not collect your name, email, phone, IP geolocation, advertising ID, or any direct identifier.

2.4. Crash reports and anonymous usage events

To improve stability and the product, we use Sentry (Functional Software Inc., d/b/a Sentry, hosted in the EU region — Germany). It captures:

Crashes and exceptions, with stack traces
Anonymous usage events (e.g. "scan started", "allergen added") without personal content
App version, OS, device model

sendDefaultPii is disabled — we explicitly do not send IP addresses, user identifiers, or input content. See Sentry's GDPR posture: https://sentry.io/legal/privacy/

You can opt out of crash reporting by uninstalling the app or by clearing data via Settings → Delete everything.

3. Why we process this data (legal basis)

Purpose	Legal basis
Provide the core scanning feature	Art. 6(1)(b) GDPR — performance of contract
Enforce quotas / prevent abuse	Art. 6(1)(f) GDPR — legitimate interest
Improve stability via crash reporting	Art. 6(1)(f) GDPR — legitimate interest
Comply with legal obligations	Art. 6(1)(c) GDPR

4. How long we keep data

On your device: until you delete it (via Settings or uninstall)
In Cloudflare KV (quotas): rolling 30 days
In Anthropic API logs: per Anthropic's retention policy (default 30 days, not used for training)
In Sentry: 90 days for events, then automatic deletion

5. Who we share data with

We do not sell, rent, or share your data with advertisers, data brokers, or social networks.

We share only with the processors listed in Section 2.2 and 2.4, strictly for the purposes described.

6. International transfers

Data may be processed in:

European Union (Cloudflare edge, Sentry Germany)
United States (Anthropic, Cloudflare US)

Transfers to the US are protected by Standard Contractual Clauses (SCCs) under Art. 46 GDPR.

7. Your rights (under GDPR)

You have the right to:

Access your data — but since data lives on your device, you can see it in the app directly
Rectify or delete your data — use Settings → Delete everything, or simply edit/remove items
Object to processing — by uninstalling the app
Lodge a complaint with ANSPDCP (the Romanian data-protection authority): https://www.dataprotection.ro

To exercise any right, email us at the address in Section 1.

8. Children

CheckYrFood is intended for users 16 years or older. We do not knowingly process data from anyone under 16. If you believe a minor has used the app, contact us and we will take appropriate steps.

9. Security

HTTPS/TLS for all network calls
Worker proxy enforces request signing (JWT) and rate limits
Sentry communications are TLS-encrypted with PII filters

No system is 100% secure. We recommend keeping your device OS updated.

10. Important — this app is not medical advice

CheckYrFood is an informational tool, not a medical device. Verdicts produced by AI are best-effort and may contain errors. Always read the product label yourself. In case of severe allergy, consult your physician. We disclaim liability for decisions made based solely on the app's output.

11. Changes to this policy

We may update this policy. Material changes will be communicated within the app. Continued use after changes constitutes acceptance.

12. Contact

Questions, requests, or complaints: support@blackhammer.work