SafeBite Privacy Policy

Last updated: September 26, 2026

SafeBite ("we", "our") is operated by Coheron Lab. This policy explains what data the SafeBite iOS app handles and how.

What we collect

• Your account. You sign in with Apple, Google or your phone number through Google Firebase Authentication. We receive an account identifier and, when the provider shares it, your first name, email address or phone number.
• Your profile. The people you scan for, and their allergies, severities, diets and custom ingredients. It is kept on your device and backed up to your private account so it survives a reinstall or a new phone. It is sent with each scan solely to perform the analysis.
• Your scans. Label and menu photos are sent securely to Google's Gemini API (via Firebase) to read them. They are not used to train models. Each scan (the photo, the result, and the barcode when there is one) is kept in your history on your device and backed up to your private account.
• Shared product information. When you photograph the label of a product whose barcode you scanned, the ingredient list read from it and the product's name are added to a shared product record keyed by that barcode, so the next person who scans it gets an answer. This record contains no photo and nothing that identifies you.
• Usage analytics. Events such as "a scan finished" with its verdict and timing, through Google Analytics for Firebase and PostHog, so we can see where the app works and where people get stuck. Once you sign in they are linked to your random account identifier, never to your name, email or phone number. Never the product, your photo, your profile or what was flagged.
• Install source. If you installed SafeBite from an Apple Ads advertisement, Apple's AdServices framework tells us which campaign it was, as numeric identifiers. This uses no advertising identifier and does not track you across apps.
• Purchase information is processed by Apple and RevenueCat to manage your subscription. We receive transaction status, never your payment details.

Where it is kept

Account backups are stored in Google Cloud Firestore in the United States, readable only by your signed-in account. We access them only to provide the service or when the law requires it.

What we don't do

• We do not sell your data.
• We do not show third-party ads or use advertising trackers.
• We do not use your photos or profile to train AI models.

Data retention & deletion

Deleting a scan in the app deletes it from your account too. Profile › Delete Account permanently deletes your account, your profile and every scan and photo stored with it. Shared product records contain no personal data and are kept. To delete subscription records held by RevenueCat, contact us at the address below.

Service providers

• Google Firebase (Authentication, Cloud Firestore backups, Analytics and the Gemini API for image analysis): Firebase privacy
• Open Food Facts, USDA FoodData Central and UPCitemdb (barcode lookups): they receive the barcode you scanned, never your profile or photos
• RevenueCat (subscription management): RevenueCat privacy
• PostHog (product analytics, United States): PostHog privacy
• Apple (payments, App Store)

Important health disclaimer

SafeBite is an informational tool, not a medical device. AI analysis can make mistakes or miss ingredients. Always verify the printed label yourself and consult a medical professional about your allergies and diet. Never rely solely on SafeBite for decisions that could affect your health.

Children

SafeBite is not directed at children under 13. A parent or guardian may use SafeBite to check products for their family.

Contact

contact@coheronlab.com