Privacy Policy — Clara
1. Who we are
Clara is a mobile app operated by Scandihouse Limited (registration number HE 493114), a company registered in Limassol, Cyprus. Scandihouse Limited is the data controller for the personal data described in this policy.
Contact: support@scandihouse.co
2. What Clara does
Clara lets you photograph a food label. The photo is analysed to read the product's ingredients and nutrition information, which Clara then presents to you along with scores and, if you have chosen to share health details, checks against those details.
3. What we collect, and why
Account information. Your email address, used to create and sign in to your account.
Profile information you choose to enter. Your name, age, gender, country and region, and your dietary goal. This is used to personalise what Clara shows you.
Health information you choose to enter. Your allergies, medical conditions, and ingredients you wish to avoid. This is used for one purpose only: to check scanned products against those details and tell you when a product may be relevant to you. This is special-category data under the GDPR, and we process it only with your explicit consent, which you give during setup and can withdraw at any time (see section 7).
Photographs of labels. When you scan a product, the photograph is transmitted for analysis (see section 4) and the extracted result is saved to your scan history. The photograph itself is not stored — it is analysed and discarded, and only the extracted text-based result is kept.
Scan history. The products you have scanned and their results, so you can review them in the app.
Usage and diagnostic information. We collect events describing how the app is used (for example, that a scan was completed or a screen was viewed), linked to your account identifier, to understand and improve the app. If the app crashes or encounters an error, a technical report is sent to our crash-reporting service. We do not include your allergies, conditions or avoided ingredients in analytics events.
Subscription status. Whether you hold an active subscription. Payments are processed by Apple; we never receive or store your payment card details.
We do not sell your data. We do not use your data for advertising. We do not share your health information with anyone except the processors listed below, who act on our instructions.
4. Who processes your data on our behalf
- Google (Gemini API) — label photographs and, where relevant to the check you have requested, your health details are sent to Google's Gemini service to extract and classify the label's contents. Google processes this data as our processor and does not use it to train its models.
- Supabase — hosts our database and authentication. Your account, profile, health details and scan history are stored here, in Ireland (eu-west-1).
- Adapty — manages subscription status.
- Mixpanel — processes usage analytics events, hosted on Mixpanel's EU servers.
- Sentry — receives crash and error reports, hosted in Germany.
- Apple — processes payments and, if you enable it, delivers the app and updates.
5. Legal bases
- Explicit consent (GDPR Article 9(2)(a)) — for your allergies, conditions and avoided ingredients.
- Performance of a contract (Article 6(1)(b)) — for your account, scans and subscription, which are needed to provide the app.
- Legitimate interests (Article 6(1)(f)) — for keeping the service secure and working, for diagnosing faults and crashes, and for understanding how the app is used so we can improve it.
6. How long we keep it
Your account, profile, health details and scan history are kept until you delete your account or ask us to delete them. When you delete your account, this data is deleted immediately.
Clara also keeps a cache of product information — for example, that a particular ingredient carries a particular additive number. This information describes food products, contains nothing about you, and cannot be linked back to you or any other person. It is not deleted when an account is deleted.
Usage analytics and crash reports are retained by the processors above under their own retention schedules, and are deleted or de-identified when your account is deleted or on request.
Records of your purchases are held independently by Apple and by our subscription provider under their own policies and retention obligations; we cannot delete those on your behalf.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- correct it if it is wrong;
- delete it (see section 8);
- withdraw your consent to health-data processing at any time — you can remove your allergies, conditions and avoided ingredients in the app at any time, and Clara will stop checking products against them. Withdrawing consent does not affect processing carried out before you withdrew it;
- object to or restrict processing;
- receive a copy of your data in a portable format;
- complain to a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (
www.dataprotection.gov.cy). You may also complain to the authority in your own country.
To exercise any of these, email support@scandihouse.co.
8. Deleting your data
You can delete your account from within the app, in Settings. This immediately deletes your profile — including all health details — and your scan history.
If you cannot access the app, email support@scandihouse.co and we will delete your account on request.
9. International transfers
Our processors may process data outside the European Economic Area. Where they do, transfers are covered by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
10. Children
Clara is not intended for children under 13 — or under the minimum age of digital consent in your country, if that age is higher — and we do not knowingly collect data from them. If you believe a child has given us personal data, contact support@scandihouse.co and we will delete it.
11. Security
Access to your data requires authentication, and database rules restrict each account to its own records. Data is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your information.
12. Clara is not medical advice
Clara is an informational tool. It is not a medical device, and it does not diagnose, treat, or provide medical advice. Clara reads labels using AI, which can misread or miss information. Always check the physical packaging yourself, particularly for allergens, and consult a qualified professional for medical decisions.
13. Changes to this policy
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app.
14. Contact
Scandihouse Limited, Limassol, Cyprus — support@scandihouse.co
← Back to home