Privacy Policy
Last updated: June 11, 2026
This Privacy Policy describes how Sholokhov Mikhail Andreevich (Sole Trader) ("we", "us", "our") collects, uses, stores, and shares personal data when you use the EatScan mobile application and related pages on typecode.app (collectively, the "Service").
1. Data controller
- Sholokhov Mikhail Andreevich (Sole Trader)
- 81/1 Manushyan St., Yerevan, Republic of Armenia
- Email: hello@typecode.app
- TIN: 20241649
- State registration number: 286.1574050
- Activity: 62.01.0 — Computer software development
The public brand Typecode and the app name EatScan refer to our products; the legal operator is the Sole Trader identified above.
2. Summary
EatScan helps you track nutrition, scan meals with AI, log water and activity, and get personalised dietary guidance. To provide this Service, we process account data, food diary entries, health metrics, and usage information.
3. Categories of personal data
Depending on how you use the Service, we may process:
- Account data: Email address, display name, and authentication identifiers (e.g. Apple Sign In, Google Sign In). Used to create and maintain your account.
- Health and nutrition data: Body measurements (height, weight, age, sex), dietary goals, food diary entries (meal names, portions, macros), water intake, and physical activity logs. Processed to compute calorie targets, display progress, and generate AI recommendations.
- Camera and photo access: Used only to photograph meals for AI scanning. Photos are sent to our AI service for ingredient recognition and are not stored permanently on our servers after analysis.
- HealthKit / Health Connect data (optional): Step count, weight, and activity data may be read from Apple HealthKit (iOS) or Health Connect (Android) if you grant permission. EatScan may write weight or water data back if you enable that feature. This data is processed in accordance with Apple's and Google's platform policies.
- Subscription and purchase data: If you subscribe to EatScan Premium, the relevant app store (Apple or Google) processes payment. We use RevenueCat to manage entitlements and subscription status.
- Push notification tokens: Used by OneSignal to deliver reminders and updates. You can disable notifications at any time in device settings.
- Analytics and crash data: We use AppMetrica (Yandex) to collect anonymised usage statistics and crash reports to improve the Service. No advertising identifier (IDFA/GAID) is used for ad targeting.
- Technical data: Device model, OS version, app version, session logs, and IP address, used to operate the Service and diagnose errors.
- Support communications: If you contact us, we process your message and email address to respond.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Provide core app features (diary, scanning, goals) | Performance of contract |
| Account creation and authentication | Performance of contract |
| Personalised nutrition recommendations (AI Coach) | Performance of contract / legitimate interests |
| Subscription management via RevenueCat | Performance of contract |
| Push notifications | Consent (revocable via device settings) |
| Analytics and crash reporting (AppMetrica) | Legitimate interests |
| HealthKit / Health Connect integration | Consent (requested in app) |
| Security and fraud prevention | Legitimate interests / legal obligation |
| Respond to support requests | Legitimate interests / performance of contract |
5. Camera and AI meal scanning
EatScan requests camera or photo library access to let you photograph meals. Photos are transmitted to our AI processing service solely to identify ingredients and estimate nutritional values. Photos are not stored on our servers after analysis is complete.
You can revoke camera access at any time in Settings → EatScan → Camera.
6. HealthKit and Health Connect
EatScan may request access to read step count, body weight, and activity data from Apple HealthKit (iOS) or Health Connect (Android) to display them on the dashboard. You may optionally allow EatScan to write body weight and water intake back to those platforms.
- You can revoke HealthKit access in Settings → Privacy & Security → Health → EatScan.
- You can revoke Health Connect access in the Health Connect app on Android.
We do not share HealthKit or Health Connect data with third parties for advertising or marketing purposes.
7. Sharing and processors
We may share personal data with:
- Apple Inc. / Google LLC — App distribution, in-app purchases, and platform services (HealthKit, Health Connect).
- RevenueCat — Subscription and entitlement management (RevenueCat Privacy Policy).
- OneSignal — Push notification delivery (OneSignal Privacy Policy).
- AppMetrica (Yandex) — Analytics and crash reporting (AppMetrica Privacy Policy).
- OpenAI — AI-powered meal recognition and Coach responses. Meal photos and text queries are sent to OpenAI's API for processing (OpenAI Privacy Policy).
- Hosting and infrastructure providers — To operate our backend servers, under data processing agreements where applicable.
We do not sell your personal data.
8. International transfers
Your data may be processed in Armenia and in countries where our processors operate (e.g. the United States for RevenueCat, OpenAI, and OneSignal). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Retention
- Account and diary data: Retained while your account is active and for a reasonable period after deletion to comply with legal obligations, then permanently deleted.
- Meal photos: Deleted from our servers after AI analysis is complete (typically within minutes).
- Analytics data: Retained in anonymised or aggregated form per AppMetrica's retention policies.
- Support communications: Retained for a reasonable period to resolve your request, then deleted.
10. Your rights
Depending on your location, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing.
Account deletion: You can delete your account and all associated data directly in the EatScan app (Profile → Account & Privacy → Delete Account). Deletion is permanent and removes your diary, health data, and account from our servers.
To exercise other rights, contact hello@typecode.app.
EEA/UK: You may lodge a complaint with your local supervisory authority.
11. Children
The Service is not directed at children under the applicable age of digital consent in your country. We do not knowingly collect data from such children.
12. Security
We implement appropriate technical and organisational measures to protect personal data. Connections to our servers use HTTPS. Authentication tokens are stored securely on your device.
13. Changes
We may update this Privacy Policy. We will post the updated version here and revise the "Last updated" date. Material changes may require additional notice.
14. Contact
Related documents: Terms of Service · Support