Privacy Policy

Last updated: 11.02.2026

1. Introduction & Data Controller

Scaneaza Eticheta, owned and operated by NICOLAE ELISEI PERSOANĂ FIZICĂ AUTORIZATĂ ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information through the use of our application "Scaneaza Eticheta" (the "Application") and our website scaneaza-eticheta.ro (the "Website").

NICOLAE ELISEI PERSOANĂ FIZICĂ AUTORIZATĂ acts as the data controller for all personal data processed through the Service, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").

2. Information We Collect

a. Personal Information

When you register with us, we collect personal information such as your IP address, email, name, and details provided by Google or Apple during signup. We use this information to manage your account and make our Application more useful and user-friendly.

b. Non-Personal Information

We collect non-personal information through analytics tools such as Google Analytics, Google Tag Manager, and other software. This includes usage details, actions within the app, and preferences to enhance your experience and track errors.

c. Scanned Product Images

When you scan a product using the Application, the images you capture (including but not limited to ingredient lists, nutritional tables, and product front images) are collected and stored. These images are associated with the product's barcode and may be displayed to other users who scan the same product, in order to provide faster and more accurate product information. This data is retained even after account deletion. For more details on the license you grant us for these images, please refer to our Terms & Conditions.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

Contract performance: Processing necessary to provide you with the Service you registered for, including account management and delivering scan results.
Consent: Where you have given explicit consent, such as for email marketing communications via Brevo and for app tracking on iOS devices.
Legitimate interests: Processing necessary for our legitimate interests, such as improving the Service, error tracking, analytics, and fraud prevention, provided these interests are not overridden by your rights.

4. How We Use Your Information

Your information helps us understand your needs, improve our services, and provide you with personalized content. Specifically, we use your data to:

Provide and maintain the Service, including AI-powered ingredient analysis;
Manage your account and subscriptions;
Track and resolve application errors;
Analyze usage patterns to improve user experience;
Send marketing communications (with your consent);
Ensure the security and integrity of the Service.

5. Data Sharing & Third-Party Processors

We may share your information with third parties in accordance with this Privacy Policy and our Terms & Conditions. We rely on the following third-party services (data processors) to operate and improve our Application:

OpenAI (for AI analysis): We use OpenAI models to analyze product ingredients and generate health scores.
Google Vertex AI (for AI analysis): We use Google AI models via Vertex AI as an additional AI provider for ingredient analysis.
Firebase (for authentication): We use Firebase to manage user registrations and logins.
Google Analytics & Google Tag Manager (for analytics): We use these services to collect and analyze usage data.
Bugsnag (for error tracking): We use Bugsnag to monitor and fix application crashes and errors.
UXCam (for session recording and analytics): We use UXCam to record user sessions in order to understand how users interact with our Application and improve user experience.
RevenueCat (for subscription management): We use RevenueCat to handle in-app purchases and subscriptions.
Brevo (for email marketing): We use Brevo to manage our email marketing campaigns.
Cloudflare (for infrastructure): We use Cloudflare for content delivery, security, and data storage including backups.
Hetzner (for hosting): We use Hetzner Online GmbH for server hosting and backups. Servers are located in the European Union.

For more information about how these services handle your data, please review their respective privacy policies:

6. International Data Transfers

Your data is primarily stored on servers located in the European Union (Hetzner). However, some of our third-party processors, including OpenAI, Google Vertex AI, and Cloudflare, may process your data outside the European Economic Area (EEA).

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you request account deletion, your account and associated personal data will be deleted within 30 days of the request.

Scanned product images that have been associated with a product barcode will remain in our system after account deletion, but will be de-linked from your account. These images are retained to continue providing product information to other users of the Service.

8. Data Storage & Security

Your data is stored and managed by the infrastructure providers listed in Section 5. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

9. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can request correction of inaccurate or incomplete personal data.
Right to erasure: You can request deletion of your personal data, subject to certain legal exceptions.
Right to restriction of processing: You can request that we limit how we use your data in certain circumstances.
Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at hi@scaneaza-eticheta.ro. We will respond to your request within 30 days.

10. Automated Decision-Making

Our Service uses AI technology (OpenAI and Google AI models via Vertex AI) to analyze product ingredients and generate health scores. These AI-generated results are provided for informational purposes only and do not constitute medical advice or any legally binding decision.

11. Children's Privacy

Users under the age of 16 must have the consent of a parent or legal guardian to use the Service. By using the Service, you confirm that you are at least 16 years old or that you have obtained parental consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

13. Contact Information

For support, inquiries, or to exercise your data protection rights, please email us at hi@scaneaza-eticheta.ro.

By using our Application and Website, you acknowledge that you have read and understood this Privacy Policy.