KindScan
Scan now
‹

Privacy Policy

KindScan
Privacy Policy
Last updated July 4, 2026
We built KindScan because we know how it feels to stand in a store aisle and have no idea if something is safe for your family. Here's the short version: we collect what we need to run the app. We never sell your data. We never use it for advertising. And you can delete everything, anytime, in seconds.
KindScan safety evaluations are informational and not a substitute for medical advice. Always consult a qualified healthcare provider for medical decisions involving your family.
Contents
1. What we collect
2. How we use your data
3. What we never do
4. Who processes your data
5. Your rights
6. Why we take this seriously
7. Children
8. Changes & contact
KindScan helps parents decide which products are safe for every member of their family. This page explains, in plain language, what data we collect, what we do with it, and how to delete it.

1. What we collect

•
Account information you give us — your email address and (if you sign in with Google, Facebook, or Apple) the basic profile data those providers return.
•
Family profiles you create — the names, ages, life stages, allergies, and sensitivities you enter for each profile. You control which profiles exist and can edit or delete them at any time.
•
Scan history — the products you scan and the verdicts we returned. Stored so you can revisit prior scans and so we can warn you about recalls on products you have already scanned.
•
Ingredient photos — when you photograph an ingredient list, we send the image to our OCR provider to extract text, then discard the image. We do not retain the photo after the scan completes.
•
Diagnostic data — crash reports and anonymized performance metrics so we can fix bugs. No personal content is included.

2. How we use your data

•
To produce per-profile Safe / Caution / Avoid verdicts for the products you scan.
•
To send you recall alerts for products you have scanned.
•
To improve the accuracy of our safety engine and the reliability of the app.

3. What we never do

•
We do not sell your data to third parties.
•
We do not use your data for advertising, and we do not show ads inside KindScan.
•
We do not accept payment from brands to influence safety verdicts. Verdicts are generated by our ingredient model based on your profiles — never by a sponsor.

4. Who processes your data on our behalf

We rely on a small number of companies to keep KindScan running. Here's who they are and why they see your data — each receives only the minimum needed to do its job:
•
Firebase (Google) — handles your sign-in. They verify your password so we don't have to store it ourselves.
•
Railway — runs our servers and database in the US. Your profiles and scan history live here.
•
Cloudflare R2 — file storage for the ingredient photos you upload, in the US.
•
Google Vision — reads the text from ingredient photos you take. We delete your uploaded photos when you delete your account.
•
Anthropic and OpenAI — power our AI safety analysis. They receive ingredient information, the per-person context needed to explain why something is flagged (life stage, allergies, and sensitivities you've entered), and — for the Ask KindScan feature — the question you type. They do not receive family member names or your contact information.
•
TruLayer — monitors the performance of our AI features — how fast they respond and how much they cost to run. It receives a scrambled partial account identifier (never your full ID), the type of scan you ran (barcode, photo, or web link), the overall safety result (Safe/Caution/Avoid), and AI response times. For web-link scans it also receives the public product page text we're processing. It never receives ingredient names, health profiles, or the text of anything you type. TruLayer doesn't yet offer a way for us to delete an individual record on request, so this technical data is kept under TruLayer's standard retention period even after you delete your KindScan account. We're working with TruLayer to add a deletion option and will update this policy when we do.
•
RevenueCat — processes your subscription. They handle the payment; we never see your card number. When you delete your account, we also delete your subscription record from RevenueCat.
•
Mixpanel — tells us which app features are used, in anonymized form. No personal content. When you delete your account, we also delete your usage profile from Mixpanel.
•
Resend — sends the emails we send you — like recall alerts and account confirmations — and keeps a short-term delivery log to troubleshoot bounced or failed messages. That log follows Resend's standard retention period and isn't something we can delete early on a per-account basis.
•
Sentry — receives crash reports when the app breaks. No personal content is included. Crash reports are automatically deleted after 90 days, whether or not you've deleted your account.

5. Your rights

•
You can view, edit, or delete any family profile from the Family tab.
•
You can delete your entire account — and everything in it — at any time. See the Delete Your Account page for instructions.
•
When you delete your account, we immediately erase your profiles, scan history, lists, and photos, and we also delete your records from RevenueCat and Mixpanel. A few background providers we rely on — TruLayer, Resend, and Sentry (see Section 4) — keep limited technical logs for a short time afterward under their own retention schedules. None of that residual data includes ingredient names, health profiles, or anything you've typed.
•
You can request a copy of the data we hold about you by emailing privacy@kindscan.com — we'll send it within 5 business days.

6. Why we take this seriously

Family health data is the most sensitive kind. We know that. We designed KindScan so that even our own team can't use your profiles to sell you products, target you with ads, or share your children's health information with brands. These aren't just policy words — they're enforced by how the system is built.

7. Children

KindScan is designed for parents and caregivers. The account holder must be 18 or older. Family profiles for children are created and managed by the account holder and are not separate user accounts.

8. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and notify active users inside the app before the changes take effect.

Contact us

Questions, concerns, or data requests? Email us at privacy@kindscan.com. We read every message.
KindScan
PrivacyTermsHelp
© 2026 OmniModa LLC