Privacy Policy

Last updated: June 30, 2026

1. Who we are

This service ("EatWellScan") is operated by Andranik ("we", "us"), acting as the data controller for personal data processed through the app and website. Contact: support@eatwellscan.com.

2. Data we collect

Account data: email address, authentication identifiers, language preference.
Usage data: scanned barcodes, saved recipes, meal plans, scan history.
Technical data: IP address, device/browser type, log data for security and fraud prevention.
Support data: messages you send us.

Payment data (card details, billing address) is collected and processed by Paddle, our Merchant of Record. We do not store full payment details.

3. Purposes & legal basis

Providing the service and your account — performance of contract.
Premium features, subscription management — performance of contract.
Security, fraud prevention, abuse mitigation — legitimate interests.
Product improvement and analytics — legitimate interests.
Customer support — performance of contract / legitimate interests.
Legal compliance — legal obligation.

4. Sharing

Hosting and infrastructure providers (subprocessors).
Paddle.com Market Ltd — Merchant of Record for sales, subscription management, payments, tax compliance, invoicing, and refunds.
Professional advisers (legal, accounting) where necessary.
Authorities where required by law.

5. International transfers

Where personal data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We retain personal data only for as long as needed to provide the service, comply with legal obligations, and resolve disputes. Account data is deleted or anonymised after account closure.

7. Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing. You may also withdraw consent and lodge a complaint with your local data protection authority. Contact support@eatwellscan.com to exercise these rights; we respond within one month.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and least-privilege practices.

9. Cookies

We use essential cookies/local storage for authentication and language preference. We do not use third-party advertising cookies.

10. Changes

We may update this policy. Material changes will be communicated through the app or via email.