1. Introduction
FoodScan Pets (“we”, “us”, “our”) is committed to protecting your privacy and the privacy of your pet's data. This Privacy Policy explains how we collect, use, and safeguard your information.
We comply with the Malaysia Personal Data Protection Act 2010 (PDPA) and the EU General Data Protection Regulation (GDPR) where applicable.
2. Information We Collect
Account Information
- Email address (for authentication)
- Password (stored as a secure hash — we never see your plain-text password)
Pet Profile Data
- Pet name, species, breed, age, weight
- Health conditions and allergies you disclose
- Pet photo (optional, stored securely)
- Current food brand (optional)
Scan Data
- Food images submitted for analysis (processed by our AI, then deleted from temporary storage)
- Scan results and scores (stored in your account history)
- Barcode data from scanned products
Usage Data
- Anonymised product analytics (e.g., which features are used — via PostHog)
- Country/region for displaying relevant affiliate links
- Affiliate link clicks (to track revenue performance — no personal data shared with affiliates)
3. How We Use Your Data
- Providing personalised pet food analysis
- Storing your scan history and favourites
- Processing subscription payments (via Stripe — we never store card details)
- Improving the Service through anonymised usage analytics
- Sending transactional emails (e.g., account confirmation)
We do NOT sell, rent, or share your personal data or pet profile data with third parties for marketing purposes.
4. Data Storage and Security
- Data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure
- All data is encrypted in transit (TLS) and at rest
- Food images are processed temporarily and not stored permanently
- We implement access controls to limit who can view your data
5. Third-Party Services
We use the following third-party services, each with their own privacy policies:
- Supabase — database and authentication
- Anthropic Claude — AI analysis of pet food (images and text sent for analysis)
- Stripe — payment processing (we never receive card details)
- PostHog — anonymised product analytics
- Vercel — hosting infrastructure
6. Your Rights
Under PDPA (Malaysia) and GDPR (EU), you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Export your pet profile and scan history
- Object to processing for analytics purposes
To exercise any of these rights, email us at privacy@foodscanpets.com. We will respond within 30 days.
7. Data Retention
- Account data is retained while your account is active
- After account deletion, personal data is removed within 30 days
- Anonymised usage analytics may be retained for longer
8. Children's Privacy
FoodScan Pets is intended for users aged 13 and older. Users under 18 require parental or guardian consent. We do not knowingly collect personal information from children under 13.
If we learn that we have collected personal data from a child under 13 without verified parental consent, we will delete that information promptly. To report a concern, please contact us at privacy@foodscanpets.com.
We comply with the Children's Online Privacy Protection Act (COPPA) where applicable and similar child privacy laws including GDPR-K requirements for users under 18 in the European Economic Area.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email. The date at the top of this page indicates the last update.