1. Introduction
Welcome to EatSecure ("we," "us," or "our"), available at eatsecure.life. EatSecure is a Progressive Web App (PWA) designed to help users with dietary restrictions and allergies safely navigate restaurant menus by scanning physical menus, QR codes, uploading files, or pasting URLs.
We take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your information. By using EatSecure, you agree to the practices described here.
2. Information We Collect
- Account Information (Optional): If you choose to create an account via Magic Link (email-based login), we collect your email address for authentication and Pro subscription sync.
- Dietary Restrictions: Custom restrictions you add (e.g., nuts, eggs, shellfish, vegan) – considered sensitive health-related data.
- Scan History: Saved menu scans, results, and summaries (SAFE/AVOID/ASK) if you opt to save them.
- Payment Information (Pro Users): Processed securely by Paystack; we do not store full card details.
- Device Permissions: Camera access for scanning (temporary, no images stored unless you save a scan).
- Usage Data: Anonymous analytics on app usage (e.g., features accessed) via Supabase (no personal identifiers).
We do not collect precise location, contacts, or unnecessary personal data.
3. How We Use Your Information
We use data to:
- Provide core features: Analyze menus against your restrictions and display results (including multi-language breakdowns).
- Sync Pro status and history across devices (via Supabase Auth).
- Process payments securely (via Paystack).
- Improve the app (anonymous analytics).
4. Data Storage and Security
Your data is stored securely with Supabase (EU/US servers with encryption at rest/transit). We use industry-standard measures like HTTPS, Row Level Security, and minimal data retention.
Scanned images are processed temporarily and not stored unless saved to your history. Pro payment data is handled solely by Paystack (PCI-compliant).
5. Sharing Your Information
We do not sell your data. We share only with:
- Supabase (hosting/auth – see their Privacy Policy).
- Paystack (payments – see their Privacy Policy).
- Service providers for essential functions (under strict agreements).
6. Your Rights
Under GDPR/CCPA and similar laws, you have rights to:
- Access, correct, or delete your data.
- Withdraw consent or object to processing.
- Request data portability.
Contact us at privacy@eatsecure.life to exercise these rights. We respond within 30 days.
7. Children's Privacy
EatSecure is not intended for children under 13. We do not knowingly collect data from children.
8. Changes to This Policy
We may update this policy. Significant changes will be notified in-app or via email.
9. Contact Us
For questions: privacy@eatsecure.life