Privacy Policy

Your privacy is important to us. This Privacy Policy explains how Vision Tech B.V. (“NimeScan,” “we,” “us,” or “our”) collects, uses, and discloses information about you when you access or use our websites, mobile applications, and other online products and services (collectively, the “Services”), and when you contact our customer support team, engage with us on social media, or otherwise interact with NimeScan.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice such as an in-app notification or email.

Table of Contents

1. Collection of Information
2. Use of Information
3. Disclosures of Information
4. Cookies and Analytics on Our Website
5. Signing In with Apple or Google
6. No Advertising, No Tracking
7. Data Transfer
8. Data Retention and Account Deletion
9. Data Security
10. Children’s Privacy
11. Your Privacy Rights
12. Do Not Track and Global Privacy Control
13. Information for California Residents
14. Information for Individuals in the EEA, UK, and Switzerland
15. Contact Us

1. Collection of Information

Information You Provide to Us

We collect information you provide directly to us when you create an account, set up your profile, use the app, submit feedback, or contact our support team. This includes:

• Account details: name, email address, password (stored only as a secure hash), and a profile photo if you add one
• Health and dietary information: allergens, dietary preferences, health conditions or goals, and household details you choose to enter so the app can personalise product scores and warnings for you. This is health data, a special category of personal data (see Section 2)
• Content you create: product photos you take or submit (for example of labels and ingredient lists), product corrections, feedback, and survey answers
• Places you save: locations you add in the app (such as your home area for tap-water and air-quality information), stored with their coordinates or postcode
• Preferences: language, notification settings, marketing opt-in, and leaderboard visibility

Information We Collect Automatically

When you use the app, we automatically collect:

• Scan and search history: the products you scan, look up, save, or compare
• Usage information: features used, screens viewed, and actions taken in the app
• Diagnostics: crash reports and performance data, including device model, operating system, and app version
• Push notification token: if you allow notifications, a device token so we can send them
• Location: only when you allow location access and use a location feature. We use your device location to show information for where you are; it is stored only if you save it as a place

We do not use advertising identifiers (IDFA or Android Advertising ID).

Information from Other Sources

• Apple or Google, if you sign in with them (see Section 5)
• Apple App Store and Google Play, via our subscription provider, about your subscription status and purchases. We never receive your card or bank details

Information We Infer or Generate

From your profile and the products you scan, the app calculates personal product scores, warnings and suggestions. These are shown only to you.

2. Use of Information

We use the information we collect to:

• Provide the app: scan and analyse products, show scores, ingredient explanations and alternatives (legal basis: performance of a contract)
• Personalise scores and warnings to your allergens, diet and health information (legal basis: your explicit consent, given when you enter this information; you can change or delete it at any time in your profile)
• Analyse product photos you take, using artificial intelligence, to read labels and ingredient lists (legal basis: performance of a contract)
• Manage your account and subscription (legal basis: performance of a contract)
• Send transactional messages such as account emails, recall alerts and trial reminders (legal basis: performance of a contract or legitimate interest)
• Send newsletters and promotional emails, only if you opted in (legal basis: consent)
• Understand how the app is used and fix crashes and bugs (legal basis: legitimate interest)
• Detect and prevent fraud and abuse (legal basis: legitimate interest)
• Comply with legal obligations such as tax and accounting rules (legal basis: legal obligation)

Profiling and Automated Decision-Making

Personal product scores are a form of profiling: they combine your profile with product data. They are advice only. NimeScan does not make automated decisions that produce legal or similarly significant effects for you.

3. Disclosures of Information

We do not sell your personal information and we do not share it with advertisers or data brokers. We share it only in these cases:

• With service providers that process it on our behalf, under a data processing agreement:
  • Supabase (database, file storage, sign-in, and server functions)
  • Google Cloud / Gemini (AI analysis of product photos and text)
  • RevenueCat (subscription management)
  • PostHog, EU hosting (product analytics)
  • Sentry, EU hosting (crash and error reports)
  • Google Firebase Cloud Messaging and Apple Push Notification service (push notifications)
  • Resend (sending emails)
  • Vercel and Google Analytics (our website, see Section 4)
• With Apple and Google, who process payments for subscriptions under their own privacy policies
• With professional advisors (lawyers, auditors) bound by confidentiality obligations
• If required by law or in response to lawful requests from public authorities
• To enforce our agreements, protect rights and safety, or investigate fraud or security issues
• As part of a corporate transaction, such as a merger, acquisition, or sale of assets
• With other NimeScan users, through the community leaderboard (see below)

We may also share aggregated or anonymised information that cannot reasonably identify you.

Community Leaderboard

The app has a community leaderboard that other signed-in NimeScan users can see. If you take part, it shows a generated food name (for example “Crisp Kiwi 42”), the mascot you picked, and your scan, badge and challenge counts. It never shows your email address, your profile photo or your full name. You can choose to show your first name and the initial of your last name instead of the generated name, or hide yourself from the leaderboard entirely, at any time in the app under Profile › Edit profile. We show this information on the basis of our legitimate interest in running the community feature; accounts you delete are removed from the leaderboard.

4. Cookies and Analytics on Our Website

Our website (nimescan.com) uses Vercel Analytics and Google Analytics to understand how visitors use the site. Google Analytics uses cookies. You can block or delete cookies in your browser settings. The app itself does not use cookies.

5. Signing In with Apple or Google

You can create an account with Sign in with Apple or Google. We then receive your name and email address (with Apple, you can choose to hide your email address). We use this only to create and manage your account. We do not control how Apple or Google use your information; please review their privacy policies.

6. No Advertising, No Tracking

The NimeScan app shows no third-party advertising and does not track you across other companies’ apps or websites. Brands do not pay for scores. We use analytics only to improve the app.

7. Data Transfer

NimeScan is operated by Vision Tech B.V., based in the Netherlands. Our main database is hosted by Supabase in South Korea, a country the European Commission recognises as providing an adequate level of data protection. Some service providers (such as Google, RevenueCat and Resend) may process data in the United States. For those transfers we rely on the EU–US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses. You can request a copy of these safeguards at support@nimescan.com.

8. Data Retention and Account Deletion

We keep your personal information for as long as your account exists. You can delete your account at any time in the app under Profile › Delete account. This permanently deletes your account, profile, health and dietary information, saved places, scan history and photos linked to your account, and, if you used Sign in with Apple, revokes our access to your Apple ID. Deleting your account does not cancel a subscription; cancel it in your App Store or Google Play settings.

Some records are kept longer where the law requires it, such as payment and tax records. Crash reports and analytics events are deleted automatically after the retention period of those services (at most 12 months). Product data you contributed, such as a corrected ingredient list, may be kept without any link to you.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction, including encryption in transit and access controls on our database. However, no security system is completely secure, and we cannot guarantee the absolute security of your information.

10. Children’s Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children below this age. If you believe we have collected such information, please contact us at support@nimescan.com so we can promptly delete it.

11. Your Privacy Rights

Depending on your location and subject to applicable laws, you may have the right to:

• Know what personal information we hold about you
• Access, correct, or update your information
• Request deletion of your personal information (you can also delete your account yourself in the app)
• Receive your data in a portable format
• Object to or restrict processing of your personal information
• Withdraw your consent at any time, for example by removing your health information from your profile or turning off marketing emails (this does not affect the lawfulness of earlier processing)

To exercise your rights, email us at support@nimescan.com. We do not discriminate against individuals for exercising their privacy rights.

Verification

To protect your privacy, we may take steps to verify your identity before fulfilling your request. You may also designate an authorised agent to make a request on your behalf, subject to verification.

Appeals

If we deny your request, you may appeal by emailing support@nimescan.com. If you remain dissatisfied, you may contact your local data protection authority or state Attorney General, as applicable.

12. Do Not Track and Global Privacy Control

We do not sell or share personal information for targeted advertising, so there is nothing to opt out of. We honour Global Privacy Control signals where applicable law requires it.

13. Information for California Residents

This section supplements the Privacy Policy for California residents under the California Consumer Privacy Act (CCPA), as amended.

Categories of Personal Information Collected

Purposes for Collection

We collect personal information to provide and personalise the app, process subscriptions, fix bugs, prevent fraud, and comply with legal obligations. We use sensitive personal information only to provide the features you ask for.

Sale and Sharing

We do not sell personal information and do not share it for cross-context behavioural advertising. We disclose it only to the service providers listed in Section 3.

Sources of Personal Information

We collect personal information directly from you, automatically from your device and use of the app, from Apple or Google if you sign in with them, and from app stores via our subscription provider.

Your CCPA Rights

California residents have the right to know, access, delete, and correct their personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. To exercise these rights, email support@nimescan.com.

Financial Incentives

NimeScan may offer discounts or free Pro time in exchange for referrals or survey participation. Participation is voluntary, and you may withdraw at any time by contacting support@nimescan.com.

14. Information for Individuals in the EEA, UK, and Switzerland

Vision Tech B.V. is the data controller for personal data collected from individuals in these regions.

Your Rights

In addition to the general rights described in Section 11, you may also have the right to:

• Object to processing or restrict processing of your data
• Request data portability
• File a complaint with your local supervisory authority

Relevant supervisory authorities include the Autoriteit Persoonsgegevens (Netherlands), the European Data Protection Board (edpb.europa.eu), the UK Information Commissioner’s Office (ico.org.uk), and the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch).

Legal Bases for Processing

We process your personal information based on performance of a contract, your consent (including your explicit consent for health information under Article 9(2)(a) GDPR), compliance with legal obligations, and our legitimate interests (such as improving the app and preventing fraud). Where we rely on legitimate interests, we balance these against your rights and freedoms.

15. Contact Us

If you have questions about this Privacy Policy, please contact us:

Vision Tech B.V.
Amsterdam, the Netherlands

Email: support@nimescan.com

© 2026 Vision Tech B.V. All rights reserved.