Privacy Policy

• Account information. Email address, and (if you sign in with Apple or Google) your name, profile photo URL, and the account identifier and sign-in tokens that provider gives us. For each signed-in session we also store the IP address and device/browser type, for security.
• Menu photos you scan. Sent to our servers and to AI providers (Section 3) so we can read and translate the menu. We keep the photos with the scan in your history so you can look back at them. They are stored at unlisted web addresses (anyone given the exact link could open one) and are deleted when you delete that scan (on the website) or your account.
• Scan history and favourites. The translated dishes, target language, and anything you add yourself (a scan title, notes, or the restaurant’s name, city, and address, all typed by you). The app does not read your device location.
• Dish photos you upload on the website. If you add your own photo of a dish, it is stored and is publicly visible to other FoodLens users who view the same dish, and to anyone with its link. Please don’t upload photos of people. You can delete your uploads, and we remove photos that break these rules.
• Usage records. For each scan we record which AI calls were made, the dishes involved, and their cost, linked to your account, so we can charge credits, prevent abuse, and keep the service affordable.
• Subscription and purchase information. Apple, Google, Stripe, and RevenueCat share a transaction identifier, product, and renewal state with us. We never receive your full payment card number.
• Promo codes. If you redeem a friend code, we log which code was used and how many credits or trial days were granted. We keep that record after account deletion so a code can’t be redeemed twice.
• Diagnostic data. Standard request logs (timestamp, IP address, requested address, browser or app type) kept by our hosting provider for debugging and abuse prevention. No third-party analytics, advertising, or crash-reporting SDKs run inside the app, and we do not track you across other apps or websites.

• Read and translate menus, and generate illustrative dish images with AI for your scans.
• Maintain your account, scan history, and favourites.
• Process subscriptions and credits, including detecting duplicate or fraudulent purchases.
• Send account emails (sign-in magic links, billing notices).
• Investigate abuse, debug crashes, and meet legal obligations.

We share only the minimum information necessary with each provider, under each provider’s own terms.

• Vercel

  Hosts our web app and API

• Neon

  Managed PostgreSQL (account, scans, credits)

• Cloudflare

  Stores menu photos and dish images (R2); runs our AI gateway

• Anthropic (Claude) · Google Gemini

  Read menu photos and generate dish images

• RevenueCat

  In-app subscription orchestration

• Apple · Google · Stripe

  Payment processing

• Resend

  Transactional email delivery

• Apple · Google sign-in

  Sign in with Apple and Google

• Expo

  Delivers app updates (sees IP address, device and app version)

• Account data — kept while your account is active.
• Scans and menu photos — kept until you delete the scan (on the website) or your account.
• Usage records — kept for cost accounting; when you delete your account they are detached from you and no longer identify you.
• Server logs — kept by our hosting provider for a limited period under its own retention settings.
• Billing records — retained for the period required by Australian tax law (typically 7 years).
• Data held by providers — Stripe, RevenueCat, Apple, Google, and Resend keep their own records of payments, purchases, and emails sent, under their own policies, after your FoodLens account is deleted.

We protect your data with encryption in transit (TLS) and at rest with our hosting providers, and only the operator can reach account data, through authenticated admin tools. If a data breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

You can, at any time:

• Access or export your data — email us and we will respond within 30 days.
• Correct inaccurate information — email us.
• Delete your account from the mobile app under Profile → Privacy → Delete Account, or by emailing us. In-app deletion is immediate and permanently removes your account, scans, menu photos, dish photos you uploaded, favourites, and credits. We also cancel any web (Stripe) subscription; if you are ever charged after deleting, email us and we will refund it. App Store and Google Play subscriptions are cancelled in your store account settings.
• Cancel a subscription via the App Store, Google Play, or our web billing portal at any time.

FoodLens is not directed to children under 13 (or under 14 where local law sets that floor). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us so we can delete it.

Our primary database is hosted in Australia (Sydney). Our web host (Vercel), storage and AI gateway (Cloudflare), AI providers (Anthropic, Google), payment providers, and email provider (Resend) may process your information in other countries, including the United States. Menu photos are read by Anthropic’s Claude models, with Google Gemini as a fallback, and Gemini draws the dish images; each handles your content under its own terms and privacy policy.

If you believe we have mishandled your personal information, email us at support@hajir.pro with the subject “Privacy Complaint”. We will acknowledge within 7 days and aim to resolve within 30 days. If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy as FoodLens changes. We will post the new version here, and tell you in the app or by email about significant changes. The “Last updated” date above always reflects the current version.