Last updated: 17 August 2026 · Applies to “Scan My Plate – NutriScan” for iOS
The short version. NutriScan has no user accounts and no analytics. Your allergen profiles, your family profiles, your food diary, your tolerance journal and your scan history never leave your iPhone. Exactly one feature sends anything off your device — AI plate photo analysis — and it only does so after you have explicitly agreed, on a screen that names what is sent and who receives it.
NutriScan is developed and operated by Giacomo Maria Pilia, an independent developer. For any question about this policy or about your data, write to aigiacomomaria@gmail.com.
The following features run completely on your iPhone. They transmit nothing, to us or to anyone else, and they work with no network connection at all:
This information is stored only in the app’s local database on your device. We have no copy of it, no server-side account, and no way to read it.
When you photograph a meal and ask NutriScan to estimate its foods and calories, that request cannot be answered on the device. It is sent to an artificial intelligence service. This section explains exactly what that involves.
| Data | Detail |
|---|---|
| The meal photograph | Resized to a maximum of 1024 pixels and JPEG-compressed on your device before it is transmitted. |
| Your restriction list | The dietary restrictions and allergens you have configured — for example “gluten”, “peanut” — so the analysis can warn you if it detects one of them on your plate. |
| Your correction text | Optional. If you type a correction about that same photo, such as “it was brown rice, not pasta”, that short sentence is sent with it. |
Nothing else is ever transmitted. We do not send your name, your email address, any account or device identifier, your food diary, your tolerance journal, your family profiles, your barcode history, or your location.
Only through your own deliberate action, and only after your explicit consent. The first time you attempt an AI plate analysis, NutriScan shows a full-screen notice describing what is sent, who receives it and what it is used for. Nothing is transmitted unless you tap “Allow and continue”. If you decline, no data leaves your device and every other feature of the app continues to work exactly as before.
You can withdraw that consent at any time in Settings → AI & data. Once withdrawn, no further photograph is sent. Resetting the app also clears it.
The data travels over an encrypted HTTPS connection to our own backend, which we operate and which is hosted on Vercel. Our backend immediately forwards it to OpenRouter, Inc., which routes it to Google’s Gemini 2.5 Flash-Lite model. The model identifies the foods visible in the image, estimates their calories and macronutrients, and flags any of your restrictions it detects. The result is returned to your iPhone and the image is discarded.
The photograph, the restriction list and the correction text are used for exactly one purpose: producing that estimate and those warnings, and displaying them to you. They are never used for advertising, profiling, analytics, model training, or any other purpose, and they are never sold.
We do not store your photographs or your restriction list on our servers. They exist only in memory for the duration of the analysis, and are discarded as soon as the estimate is returned. Our OpenRouter account is configured so that requests are never routed to providers that train on submitted data. We require the same or equivalent protection from every provider we use, and we will update this policy if that ever changes.
NutriScan asks for camera access to scan barcodes, read ingredient labels and photograph your plate, and for photo library access so you can pick an existing picture instead. Images used for barcode scanning and label reading are processed on your device and never transmitted. Only a plate photograph you explicitly submit for AI analysis is sent, as described in section 3.
NutriScan Premium is sold through Apple’s In-App Purchase system. We never see or receive your payment details. Apple processes the payment, handles VAT and issues your receipt. The app checks your subscription status locally through Apple’s StoreKit framework; that check happens between your device and Apple, and involves no server of ours. We do not use RevenueCat or any other third-party subscription service.
NutriScan contains no advertising, no advertising identifiers, no third-party analytics SDK, and no tracking of any kind across apps or websites. We do not build a profile of you. We do not know who you are.
NutriScan is not directed at children and we do not knowingly collect data from them. A parent may of course create a profile for a child within the app — that profile, like every other, is stored only on the parent’s device.
Because everything is stored locally and we hold no copy, you retain complete control:
Since we hold no personal data on our servers, there is nothing for us to export, correct or delete on your behalf. If you believe otherwise, or if you have a question about your rights under the GDPR, write to us at the address above and we will answer.
NutriScan provides indicative information to help you make your own decisions. It is not a medical device and it does not diagnose, treat or prevent anything. Ingredient databases and AI estimates can be incomplete or wrong. For a severe allergy, always read the packaging yourself and ask the restaurant. Never rely on this app alone.
If we change how data is handled, we will update this page and change the date at the top. If a change materially affects what is sent or to whom, we will ask for your consent again inside the app before it takes effect.
Questions, concerns or requests: aigiacomomaria@gmail.com. We answer every message.
Scan My Plate – NutriScan · Giacomo Maria Pilia · aigiacomomaria@gmail.com