Privacy Policy

Last updated: 28th September 2026

1. Who We Are

NutriScanner is operated by Longevia Group Ltd, a company registered in England and Wales. Throughout this policy, 'we', 'us' and 'our' refer to Longevia Group Ltd.

Data Controller:
Longevia Group Ltd
124/128 City Road, London, EC1V 2NJ, United Kingdom
Company number: 16793530
Email: longeviagroupltd@gmail.com

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store and share your personal data when you use the NutriScanner app on iOS or Android, including its NutrAssist chat assistant, and our website at nutriscanner.app. It applies to all users in the United Kingdom and European Economic Area (EEA) and is written to comply with the UK GDPR, the EU GDPR and the Data Protection Act 2018.

3. Personal Data We Collect

3.1 Data You Provide Directly

  • Photos, descriptions and barcodes you scan (see 3.4).
  • Questions you ask NutrAssist (see 3.5).
  • Support requests and communications you send us.
  • Your email address and first name, if you sign up on our website for the recipe ebook or updates (via MailerLite).

The app itself has no accounts and does not ask for your name or email.

3.2 Data Stored Only on Your Device

Your scan history, including food names, scores, comments, dates and a smaller copy of any photo, is stored only on your device. We cannot see it. The app keeps your most recent 200 results. You can delete individual results in the app, and deleting the app removes them all.

3.3 Automatically Collected Data

  • Subscription status and purchase history, managed by RevenueCat using an anonymous identifier, along with basic device information such as model, operating system and app version.
  • Crash and diagnostic reports, only if you have chosen to share them with Apple or Google in your device settings.
  • Minimal technical logs on our servers, and the network address requests come from, kept briefly by our hosting provider.

3.4 Food Scan Data

To analyse a food, the app sends what you scan to our server: the photo, your description, or the product details found for a barcode. Our server passes it to OpenAI for analysis and does not store it. Barcodes are looked up in Open Food Facts, an independent public food database. Please avoid including people or personal information in your food photos.

3.5 NutrAssist

NutrAssist, the chat assistant in the app, sends your questions and the conversation to OpenAI through our server to generate replies. We do not log or store the content of conversations. To apply a daily question allowance, NutrAssist stores a random code on your device; our server keeps that code and a count for the current day only. It does not identify you.

4. Legal Basis for Processing

We process your personal data on the following legal grounds under UK and EU GDPR:

  • Contract performance: to provide the NutriScanner service, including analysing your scans and answering your NutrAssist questions.
  • Legitimate interests: to keep the app working reliably, prevent fraud and abuse, and ensure security.
  • Consent: for marketing communications by email.
  • Legal obligation: to comply with applicable laws and regulations.

5. How We Use Your Data

  • To provide, operate and improve the NutriScanner app and its features.
  • To analyse the foods you scan and answer your NutrAssist questions, using OpenAI.
  • To look up barcoded products in Open Food Facts.
  • To manage your subscription and billing via RevenueCat.
  • To send you product updates and newsletters where you have consented (via MailerLite).
  • To respond to support queries.
  • To detect and prevent fraudulent or unauthorised activity.

6. Third-Party Services and Data Sharing

We work with the following third-party services. Where they process data on our behalf, appropriate agreements and safeguards are in place.

6.1 OpenAI

Purpose: analysing scanned foods and answering NutrAssist questions.
Data sent: the photos, descriptions and product details you scan, and NutrAssist conversations.
OpenAI does not use data received through its API to train its models. OpenAI may retain requests for up to 30 days to monitor for abuse.
Transfer mechanism: OpenAI's Standard Contractual Clauses cover EEA and UK data transfers to the United States.
Policy: platform.openai.com/privacy

6.2 RevenueCat

Purpose: in-app purchase management, subscription entitlements and receipt validation.
Data sent: an anonymous user ID, basic device information and purchase transaction data.
Transfer mechanism: RevenueCat's EU Standard Contractual Clauses.
Policy: revenuecat.com/privacy

6.3 Railway

Purpose: hosting for our servers.
Data sent: scans and NutrAssist conversations, relayed to OpenAI. Content is not stored; minimal technical logs are kept briefly.
Policy: railway.app/legal/privacy

6.4 Open Food Facts

Purpose: product lookup for barcode scans.
Data sent: the barcode number. As with any website, Open Food Facts also sees your device's network address. Open Food Facts is an independent, non-profit public food database.
Policy: openfoodfacts.org

6.5 MailerLite

Purpose: email marketing, product updates and recipe content delivery.
Data held: email address and first name (where provided).
Transfer mechanism: MailerLite's EU Standard Contractual Clauses.
Policy: mailerlite.com/legal/privacy-policy

6.6 Apple (iOS)

The App Store and StoreKit are provided by Apple Inc. Apple's privacy practices govern its own collection of data. We do not control Apple's data processing.

6.7 Google (Android)

Google Play and Google Play Billing are provided by Google LLC. Google's privacy practices govern its own collection of data. We do not control Google's data processing.
Policy: policies.google.com/privacy

We do not sell your personal data to anyone, and we do not use it for advertising.

7. International Data Transfers

Some of our third-party services, notably OpenAI and RevenueCat, are based in the United States. Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Agreement (IDTA) where applicable.

8. Data Retention

  • Scan history: stored only on your device, until you delete results or the app. The app keeps your most recent 200 results.
  • Scan content and NutrAssist conversations: not stored by us.
  • NutrAssist daily code: kept on our server for the current day only.
  • Email marketing data (MailerLite): retained until you unsubscribe or ask us to delete it.
  • Purchase records: retained for 7 years to meet HMRC requirements.
  • Server logs: kept briefly by our hosting provider.

9. Your Rights Under UK and EU GDPR

You have the following rights in relation to your personal data:

  • Right of access: request a copy of the data we hold about you.
  • Right to rectification: ask us to correct inaccurate or incomplete data.
  • Right to erasure ('right to be forgotten'): request deletion of your data where no legitimate retention basis applies.
  • Right to restriction: ask us to limit how we process your data in certain circumstances.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision-making: we do not make solely automated decisions with legal or similarly significant effects on you.

Because your scan history is stored only on your device, we cannot access, export or delete it for you; you control it within the app.

To exercise any of these rights, email us at longeviagroupltd@gmail.com. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Children's Privacy

NutriScanner is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us at longeviagroupltd@gmail.com and we will delete it promptly.

11. Cookies and Tracking

The app does not use cookies or tracking for advertising. NutrAssist stores a random code on your device to apply its daily allowance (see 3.5). Our website (nutriscanner.app) may use essential cookies to ensure the site functions correctly, and analytics cookies where you have consented. You can manage cookie preferences via the banner on the website.

12. Security

We take appropriate technical and organisational measures to protect your data, including encrypted data transmission (HTTPS/TLS) and access controls on our servers. No method of transmission over the internet is completely secure; we cannot guarantee absolute security, but we use commercially reasonable means to protect your data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will highlight them on this page and, where possible, in the app. The 'Last updated' date at the top of this policy shows when it was most recently published. Continued use of NutriScanner following changes constitutes your acceptance of the updated policy.

14. Contact Us

For any privacy-related queries, requests or complaints:

Longevia Group Ltd
Email: longeviagroupltd@gmail.com
Website: nutriscanner.app

For complaints not resolved directly with us, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.