Privacy, in plain language.

Who operates KetoScanner

KetoScanner is operated by Gianluca Lo Vecchio. Questions and privacy requests can be sent through the contact form on ketoscanner.io.

Data the app handles

Account and authentication

If you create an account, KetoScanner processes your email address, authentication provider, account identifier, and session credentials through Supabase. Passwords and social sign-in credentials are handled by the authentication provider; KetoScanner does not receive your social-provider password.

Barcode and product data

When you scan a barcode, the barcode number is sent to Open Food Facts to retrieve product information. Product results, scan history, favorites, and the daily carbohydrate target are stored locally on your device.

Nutrition-label images

Label scanning is optional and requires an account. When you choose “Use photo,” the selected image is reduced in size and sent over HTTPS to the KetoScanner OCR proxy, which sends it to Google Gemini to extract nutrition values. The KetoScanner proxy does not intentionally write label images to disk or application logs. Google processes the request under its applicable service terms.

Security and support data

The service uses IP addresses and one-way hashes of account identifiers for rate limiting, abuse prevention, and operational security. If you contact support, the name, email address, and message you provide are used to answer your request.

Why data is used

• Provide sign-in, password recovery, account deletion, barcode lookup, and label scanning.
• Return nutrition values and calculate keto suitability.
• Prevent automated abuse and control OCR usage and cost.
• Diagnose service failures and respond to support or privacy requests.

KetoScanner does not sell personal data and does not use label photos for advertising.

Service providers

• Supabase — authentication and account records.
• Open Food Facts — barcode and product-information lookup.
• Google Gemini — extraction of nutrition information from a label image you choose to submit.
• Hostinger — hosting for the KetoScanner website and secure OCR/account-deletion proxy.
• Apple and Google — optional social sign-in and app distribution.

These providers may process technical information such as IP address, device/browser data, request time, and service logs under their own terms and privacy notices.

Storage and retention

Local scan history, favorites, and settings stay on your device until you delete them, clear the app’s data, delete your account in the app, or uninstall the app. Account information is retained while the account is active and then deleted following a verified deletion request. Minimal security records may be retained temporarily where necessary to prevent abuse, resolve incidents, or meet legal obligations.

Your choices and deletion

You can use barcode scanning without creating an account. You can decline camera access and continue using History and Favorites. You may delete your account from the app’s Account screen.

Depending on where you live, you may also have rights to access, correct, object to, restrict, or receive a copy of personal data. Use the contact form to make a request. Identity verification may be required before acting on it.

Children

KetoScanner is not directed to children under 13, and the operator does not knowingly collect personal information from children under 13. Contact us via the form above if you believe a child has provided personal information.

Security and changes

KetoScanner uses HTTPS for network requests and encrypted device storage for persisted authentication sessions on iOS and Android. No security method is perfect. This policy may be updated as the app or its providers change; the effective date at the top identifies the current version.