Privacy Policy — Vita-Scan

Overview

Axis Creative ("we," "us," or "our") operates the Vita-Scan web application ("the Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding it. We take your privacy seriously and will never sell your personal information to third parties.

1. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password. We do not store your password in plain text.

Scan content: When you use the camera, upload an image, scan a barcode, or paste ingredient text, that content is transmitted to our servers for AI analysis. Images are processed and then discarded — we do not store your scan images permanently.

Usage data: We record the number of scans you perform each day to enforce free-tier limits. We store your subscription tier (free or Pro) in our database.

Device and session data: We may collect basic technical information such as your browser type, operating system, and IP address for security and service operation purposes.

Cookies and local storage: We use browser local storage to save your scan history on your device. This data stays on your device and is not transmitted to our servers unless you are signed in.

2. How We Use Your Information

To provide and operate the Service, including processing scans and returning analysis results.
To manage your account, authenticate your identity, and enforce scan quotas.
To process subscription payments (when applicable).
To communicate with you about your account or changes to the Service.
To improve the reliability and performance of the Service.
To comply with legal obligations.

We do not use your scan content to train AI models. Scans are processed in real time and are not retained for model improvement.

3. Third-Party Service Providers

We share data with the following providers solely to operate the Service:

Supabase Authentication and database. Stores your email address, hashed password, scan count, subscription tier, and account metadata. Data is stored on servers in the United States. Supabase Privacy Policy →

Cloudflare Hosting, CDN, and serverless compute. Processes requests between your device and our backend. Cloudflare Privacy Policy →

OpenAI AI analysis engine. Ingredient text extracted from your scans is sent to OpenAI's API for classification. Images may be included. OpenAI's API terms prohibit using this data for training. OpenAI Privacy Policy →

We do not sell, rent, or share your personal information with advertisers or other third parties for their own marketing purposes.

4. Data Retention

We retain your account information for as long as your account is active. Scan images are not stored after analysis is complete. Scan count data resets daily. You may request deletion of your account and associated data at any time by contacting us at [email protected].

5. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access-controlled databases. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your account and personal data.
Portability: Request your data in a portable format.
Objection: Object to certain uses of your data.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion of your personal information, and to opt out of the sale of personal information. We do not sell personal information. To make a request, contact us at [email protected].

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date above. We encourage you to review this page periodically. Continued use of the Service after changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, contact us at:

Axis Creative
Email: [email protected]