Privacy Policy

Last updated: March 15, 2026

TL;DR: We don't store your photos, we don't track you, and we don't sell your data. Photos are analyzed in-memory and immediately discarded. Your scan history lives on your device and nowhere else.

What We Collect

CarbZen processes food photos to estimate carbohydrate content. Photos are sent to our secure server for AI analysis and are not stored after processing. We do not collect personal information, account data, or location.

On-Device Data

Your scan history (photos, food items, carb estimates) is stored locally on your device using Apple's SwiftData framework. This data never leaves your device unless you choose to delete the app.

Third-Party Services

We use the following services to process food analysis:

Anthropic (Claude AI) — Analyzes food photos to identify items and estimate carbs. Photos are processed per Anthropic's privacy policy and are not used for training.

USDA FoodData Central — Provides verified nutritional data. Only food names are sent (no photos).

Subscriptions

Subscription purchases are processed entirely by Apple through StoreKit. We do not have access to your payment information.

Analytics

CarbZen does not include any analytics, tracking, or advertising SDKs.

Children's Privacy

CarbZen does not knowingly collect data from children under 13.

Data Retention

Photos are processed in-memory by our server infrastructure and are never stored after analysis is complete. Server request logs are retained for up to 72 hours for operational monitoring and then automatically deleted. On-device scan history persists in Apple's SwiftData framework until you manually delete individual records or uninstall the app.

Your Rights Under GDPR (EEA Users)

If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing. Because CarbZen does not store personal data on our servers, most of these rights are satisfied by design — your data lives entirely on your device under your control. To exercise any data rights or make a request, contact us at support@cognfy.com.

Your Rights Under CCPA (California Users)

If you are a California resident, you have the right to know what personal information is collected, to request deletion of your data, and to opt out of the sale of personal information. CarbZen does not sell your personal information. Because all scan data is stored locally on your device, you can delete it at any time by removing individual records within the app or by uninstalling. For questions, contact support@cognfy.com.

International Data Transfers

When you scan food, image data is transmitted to our server infrastructure powered by Cloudflare Workers (processed at the nearest global edge location) and forwarded to Anthropic's Claude AI (US-based) for analysis. Food names may be sent to the USDA FoodData Central API (US-based) for nutritional enrichment. These transfers are governed by each provider's standard data processing agreements. See Cloudflare's Privacy Policy and Anthropic's Privacy Policy.

Cookies & Tracking

CarbZen does not use cookies, tracking pixels, advertising identifiers, or any third-party analytics SDKs. We have no mechanism to track you across apps or websites.

Sub-Processors

CarbZen relies on the following third-party services to deliver its functionality:

Cloudflare — Edge compute and request routing. Privacy Policy

Anthropic (Claude AI) — Food photo analysis. Privacy Policy

USDA FoodData Central — Nutritional data lookup. Website

Contact

Questions about this policy? Contact us at support@cognfy.com.