Privacy Policy — Clara
1. Who we are
Clara is a mobile app operated by Scandihouse Limited (registration number HE 493114), a company registered in Limassol, Cyprus. Scandihouse Limited is the data controller for the personal data described in this policy.
Contact: support@scandihouse.co
2. What Clara does
Clara lets you photograph a food label. The photo is analysed to read the product's ingredients and nutrition information, which Clara then presents to you along with scores and, if you have chosen to share health details, checks against those details.
Clara also has a food diary: you log what you eat — by scanning a label, photographing a plate, typing it or searching Clara's food table — and see your day's nutrition. The diary, Apple Health, plate photos and typed food are handled differently from the rest of your data; sections 4 to 7 explain how.
3. What we collect, and why
Account information. Your email address, used to create and sign in to your account.
Profile information you choose to enter. Your name, age, gender, country and region, and your dietary goal. This is used to personalise what Clara shows you.
Health information you choose to enter. Your allergies, medical conditions, and ingredients you wish to avoid. This is used for one purpose only: to check scanned products against those details and tell you when a product may be relevant to you. This is special-category data under the GDPR, and we process it only with your explicit consent, which you give during setup and can withdraw at any time (see section 11).
Photographs of labels. When you scan a product, the photograph is transmitted for analysis (see section 8) and the extracted result is saved to your scan history. The photograph itself is not stored — it is analysed and discarded, and only the extracted text-based result is kept.
Scan history. The products you have scanned and their results, so you can review them in the app.
Usage and diagnostic information. We collect events describing how the app is used (for example, that a scan was completed or a screen was viewed), linked to your account identifier, to understand and improve the app. If the app crashes or encounters an error, a technical report is sent to our crash-reporting service. We do not include your allergies, conditions or avoided ingredients in analytics events.
Subscription status. Whether you hold an active subscription. Payments are processed by Apple; we never receive or store your payment card details.
Plate photos and typed food. Sent for analysis and not kept; a free plate scan leaves only a record of who used it and when — see sections 6 and 7. Your food diary is not collected at all: it stays on your phone and in your own iCloud (section 4).
We do not sell your data. We do not use your data for advertising. We do not share your health information with anyone except the processors listed below, who act on our instructions.
4. Your food diary
The food diary holds what you log: each food, its amount, the meal and time, and its nutrition values — and, if you keep them, small photos of your plates (see section 6). Alongside it, Clara keeps your daily targets, the height, weight and activity you give for them, and your favourites.
Where it is stored. On your phone. If Sync with iCloud is on (Settings → Food diary; it is on by default when your phone is signed in to iCloud), your diary entries are also kept in your own iCloud account, in Clara's private CloudKit database, so your other devices signed in to the same Apple Account get them. Your targets, body details and favourites stay on the phone. Apple keeps the iCloud copy under your iCloud account and Apple's own terms.
Never on Clara's servers. The diary is not sent to us and is not part of your account on our servers — we cannot see it. Our usage analytics record only that the diary was used — for example that an entry was added, to which meal, and whether it came from a scan, a search or typed text — never a food, an amount, a calorie figure, a target or a body measurement.
Deleting it. Delete all diary data (Settings → Food diary) erases every entry, plate photo, favourite and target from your phone and, while Sync with iCloud is on, from your iCloud. Deleting your account (section 12) does the same. Signing out does not: the diary belongs to the phone and stays on it until you delete it. If you turned Sync with iCloud off before deleting, the copy already in your iCloud stays there until you remove it in your iPhone's iCloud storage settings.
5. Apple Health
Clara works with Apple Health only if you turn it on, in Settings → Food diary, and only for what each switch says. Apple asks your permission for each kind of data before Clara can write or read it, and you can change your choices at any time in the Health app.
- Write meals to Apple Health — Clara writes the nutrition of what you log to Health as nutrition samples: energy, protein, carbohydrates, fat, sugar, fibre, sodium, vitamins and minerals, caffeine and water. Editing an entry updates its samples, deleting it removes them, and Delete all diary data or deleting your account removes every sample Clara wrote.
- Use Apple Health for height and weight — Clara reads your latest height and weight, to suggest your daily targets. It reads nothing else.
Nothing Clara reads from Health is stored in iCloud or sent to Clara's servers: your height and weight from Health stay in the app's settings on your phone. We never use Health data for advertising, marketing or analytics, and never share it with anyone.
6. Plate photos and typed food
Plate photos. When you photograph a plate, a reduced-size copy of the photo is sent to Clara's server for a single analysis: our AI provider (section 8) estimates which foods are on the plate and how much of each. The photo is processed in memory and discarded once the answer is sent back — it is not stored and not logged. Our server's logs record only technical facts about the request, such as how many foods were found and how long it took — never the photo, a food name or an amount.
Typed food. When you type what you ate, only that text is sent, the same way, for a single read into foods and amounts. It is processed in memory; the text is not stored and not logged.
Both requests are tied to your account only to check your subscription or your free plate scan (section 7). What comes back goes into your diary on your phone only when you add it. If Keep plate photos is on (Settings → Food diary), a small copy of the plate photo is saved with that diary entry — on your phone and, with Sync with iCloud, in your iCloud (section 4), never on our servers. Turning the setting off deletes the photos already kept.
7. The free daily plate scan
Without a subscription you can scan a plate free each day. To count it, our server records who used a free plate scan and when — your account identifier and the time — and nothing else: no photo, no food and no estimate. If the scan fails or finds no food, the record is removed and the scan doesn't count. Records older than 24 hours are deleted the next time you use a free plate scan, and all of them are deleted with your account. Subscribers' plate scans are not recorded.
8. Who processes your data on our behalf
- Google (Gemini API) — label photographs and, where relevant to the check you have requested, your health details are sent to Google's Gemini service to extract and classify the label's contents; plate photos and the food you type are sent to it to estimate the foods and amounts (section 6). Google processes this data as our processor and does not use it to train its models.
- Supabase — hosts our database and authentication. Your account, profile, health details and scan history, and the free plate-scan record (section 7), are stored here, in Ireland (eu-west-1).
- Adapty — manages subscription status.
- Mixpanel — processes usage analytics events, hosted on Mixpanel's EU servers.
- Sentry — receives crash and error reports, hosted in Germany.
- Apple — processes payments and, if you enable it, delivers the app and updates.
Your food diary's iCloud copy and your Apple Health data are held by Apple in your own account, under Apple's terms; Clara's servers have no access to either.
9. Legal bases
- Explicit consent (GDPR Article 9(2)(a)) — for your allergies, conditions and avoided ingredients.
- Performance of a contract (Article 6(1)(b)) — for your account, scans (including plate photos and typed food), the free plate-scan record and your subscription, which are needed to provide the app.
- Legitimate interests (Article 6(1)(f)) — for keeping the service secure and working, for diagnosing faults and crashes, and for understanding how the app is used so we can improve it.
10. How long we keep it
Your account, profile, health details and scan history are kept until you delete your account or ask us to delete them. When you delete your account, this data is deleted immediately.
Your food diary is kept on your phone and in your iCloud until you delete it (section 4). Plate photos and typed food are not kept at all; free plate-scan records last 24 hours (section 7).
Clara also keeps a cache of product information — for example, that a particular ingredient carries a particular additive number. This information describes food products, contains nothing about you, and cannot be linked back to you or any other person. It is not deleted when an account is deleted.
Usage analytics and crash reports are retained by the processors above under their own retention schedules, and are deleted or de-identified when your account is deleted or on request.
Records of your purchases are held independently by Apple and by our subscription provider under their own policies and retention obligations; we cannot delete those on your behalf.
11. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- correct it if it is wrong;
- delete it (see section 12);
- withdraw your consent to health-data processing at any time — you can remove your allergies, conditions and avoided ingredients in the app at any time, and Clara will stop checking products against them. Withdrawing consent does not affect processing carried out before you withdrew it;
- object to or restrict processing;
- receive a copy of your data in a portable format;
- complain to a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (
www.dataprotection.gov.cy). You may also complain to the authority in your own country.
To exercise any of these, email support@scandihouse.co.
12. Deleting your data
You can delete your account from within the app, in Settings. This immediately deletes your profile — including all health details — your scan history and your free plate-scan records. On the phone you delete it from, it also erases your food diary (and its iCloud copy while Sync with iCloud is on) and removes the nutrition Clara wrote to Apple Health.
If you cannot access the app, email support@scandihouse.co and we will delete your account on request.
13. International transfers
Our processors may process data outside the European Economic Area. Where they do, transfers are covered by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
14. Children
Clara is not intended for children under 13 — or under the minimum age of digital consent in your country, if that age is higher — and we do not knowingly collect data from them. If you believe a child has given us personal data, contact support@scandihouse.co and we will delete it.
15. Security
Access to your data requires authentication, and database rules restrict each account to its own records. Data is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your information.
16. Clara is not medical advice
Clara is an informational tool. It is not a medical device, and it does not diagnose, treat, or provide medical advice. Clara reads labels using AI, which can misread or miss information, and the foods and amounts it gives for plates and typed food are estimates. Always check the physical packaging yourself, particularly for allergens, and consult a qualified professional for medical decisions.
17. Changes to this policy
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app.
18. Contact
Scandihouse Limited, Limassol, Cyprus — support@scandihouse.co
← Back to home