FoodHalo Privacy Policy
Last updated: 19 August 2026
FoodHalo is built so that we do not know who you are. There is no account, no email address, no password, and no sign-up. This document describes exactly what that means in practice.
Who is responsible
Davidovski GmbH ("we") operates FoodHalo and is the data controller. Contact: innovation@karpinity.com
What we do not collect
We do not collect your name, email address, phone number, postal address, date of birth, precise location, contacts, or health records. We do not use advertising identifiers, we do not run third-party analytics or advertising SDKs, and we do not track you across other apps or websites. We never sell or rent data to anyone.
Your identity in FoodHalo
When you first open the app it generates a random identifier for your device and stores an access token on the device. That random identifier is all that links your data together. It is not derived from your device's hardware identifiers and it is not connected to your Apple ID. If you delete your data (see below), that identifier and everything attached to it is destroyed.
What we store, and why
| What | Why | Example |
|---|---|---|
| Your Preference Halo | To personalize every verdict | goals, declared allergies, diets, values dials |
| Scan history | To show recent scans and measure speed | barcode, verdict score, response time, timestamp |
| Meal logs | To show your daily and weekly totals | product or meal name, nutrition values, portion, meal slot, time |
| Coach usage counter | To enforce the free-tier limit fairly | week number and a message count |
| Learned suggestions | To propose Halo updates you can confirm or reject | an inferred tag, a confidence value, why we inferred it |
| Data contributions | Only if you choose to submit a correction to Open Food Facts | barcode, the field you corrected, your value, an optional photo |
Declared allergies are the most sensitive thing FoodHalo holds. They are stored solely to warn you, they are never used for advertising or profiling, and they are never shared.
Camera and photos
Barcode scanning happens on your device; camera frames are not uploaded. If you log a meal from a photo, that photo is sent to our AI provider (below) to estimate what is in it, and is not retained after the estimate is produced. If you submit a product photo as a contribution, it is sent to Open Food Facts and becomes part of their public database by your choice.
AI coach
Messages you send the coach, and meal photos you choose to analyze, are processed by a third-party AI model reached through our own gateway. Today that provider is Google (Gemini). Only your message and the relevant product data are sent - not your identifier, not your allergy list unless your question includes it. Providers may process this data to serve the request. Do not send the coach information you would not want processed by a third party. The coach gives general wellness information, never medical advice.
Product data
Product information comes from Open Food Facts, made available under the Open Database License, and from USDA FoodData Central. Looking up a product may query Open Food Facts when we do not already hold it.
Server logs
Our servers keep short-term technical logs that include IP addresses, in order to operate the service and diagnose faults. These are not linked to your Preference Halo or used to build a profile of you.
Where your data is held
Your data is stored in Switzerland, on infrastructure we operate ourselves rather than a third-party cloud. Switzerland is outside the EEA, but the European Commission recognises Swiss data protection law as providing an adequate level of protection, so no additional transfer safeguards are required for data moving there from the EEA.
AI requests (see "AI coach") are processed by that provider, which may process them outside both the EEA and Switzerland under standard contractual clauses.
If we move to different infrastructure we will update this page before doing so.
How long we keep it
Your data is kept until you delete it. Delete the app's data from Settings and it is removed from our servers immediately, including scan history, meal logs, your Halo, usage counters and learned suggestions. Uninstalling the app alone does not delete server-side data - use the delete function first. Contributions already published to Open Food Facts cannot be withdrawn by us, because they become part of a public open database.
Your rights
Under the GDPR you may access, export, correct, or delete your data, object to processing, and complain to a supervisory authority. FoodHalo implements access, export and deletion directly in the app under Settings, without needing to contact us. For anything else, write to innovation@karpinity.com.
Because we hold no information that identifies you personally, we may be unable to locate your data from an email request alone - the in-app functions are the reliable route.
Legal basis
We process this data to perform the service you asked for (Article 6(1)(b)) and on our legitimate interest in operating and securing it (Article 6(1)(f)). Allergy information is processed with your explicit consent (Article 9(2)(a)), given when you enter it, and withdrawable at any time by removing it in the app.
Children
FoodHalo is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes materially we will update this page and the date above, and note it in the app.