Effective date: 6 June 2026
Last updated: 6 June 2026
GlyScan.AI is operated by Voyager One Labs UK Ltd ("we", "us", or "our"). This Privacy Policy explains what information is stored locally on your device, what information is processed when you use scan features, and how third-party providers help operate the app.
Contact: support@voyager-one-labs.com
Important Medical Disclaimer
GlyScan.AI provides general nutritional information and AI-estimated glycemic impact for educational purposes only. It is not medical advice, not a medical device, and not a substitute for professional healthcare, dietetic, or nutrition advice.
Do not use GlyScan.AI to diagnose, treat, manage, or prevent diabetes or any other medical condition, to dose insulin or medication, or to make emergency or treatment decisions. Always consult a qualified healthcare professional or registered dietitian for personal health decisions, medical conditions, allergies, medication decisions, pregnancy, eating disorders, or dietary changes.
Do not disregard professional medical advice or delay seeking medical advice because of anything shown in GlyScan.AI, on the GlyScan.AI website, or in related communications.
Information Stored Locally
GlyScan.AI does not require an account or login. The app may store the following data locally on your device:
- scan history and timestamps;
- compressed saved scan images or thumbnails;
- food names, product names, verdict categories, estimate quality, reasoning, smart swaps, macro estimates, and notes;
- favorites, safe-food lists, and user-selected goals or preferences;
- device language/locale, local membership display state, and local scan counters;
- an anonymous install identifier used for service operation and fair-use enforcement.
Saved history is local-first and is not account-synced. Local app data is stored within Apple's iOS application sandbox and benefits from Apple's built-in device security protections, including file-system encryption where supported by the user's device configuration. If you delete the app, clear local data, replace your device, or do not restore from a device backup, local history may be lost.
Camera And Photo Permissions
The app uses camera or photo-library access only when you choose to scan or select an image. Permission prompts are controlled by iOS. GlyScan.AI does not access your full photo library unless you grant the relevant iOS permission.
Information Sent For Food Photo Analysis
When you choose to scan a food, drink, meal, or product photo, the app prepares and recompresses the image before upload so original embedded photo metadata, such as EXIF or location metadata, is not included in the uploaded scan image. The optimized image, anonymous install identifier, language/locale, app version, and request metadata are securely routed through the GlyScan.AI backend to Google AI services for educational image analysis.
GlyScan.AI does not intentionally store original food photos on its servers after processing. Images may pass through temporary processing, security, or provider systems needed to return results. Google AI services process the submitted image and request data only to provide the requested analysis and under provider safeguards for privacy, security, confidentiality, and restricted use. Saved scan images are stored locally on your device if you save them to History.
Information Sent For Barcode Lookup
When you scan a packaged-food barcode, the app sends the barcode value, anonymous install identifier, language/locale, app version, and request metadata through the GlyScan.AI backend. The backend may query Open Food Facts for product names, brands, ingredients, categories, and nutrition data.
The backend may cache limited product lookup information to improve reliability, reduce repeated external requests, and control costs.
Purchases And Entitlements
Paid plans and premium subscriptions are processed by Apple. RevenueCat, our purchase-entitlement service provider, is used to help validate purchase status, entitlement state, renewal state, and anonymous app purchase identifiers. Your banking and payment-card information is handled by Apple and is not visible to us.
Support Messages
If you contact us for support, we may receive your email address and any information you choose to include in your message. Please do not include medical records, payment card details, passwords, or other sensitive personal information in support emails.
Privacy-Safe Analytics And Abuse Prevention
GlyScan.AI may record privacy-safe events to monitor reliability and prevent abuse, such as app opened, scan started, scan completed, scan failed reason code, paywall viewed, purchase flow status, restore purchase, export history, and delete history.
These events are designed not to include food photos, barcode values, product names, food names, full verdict text, or saved History content.
Educational Outputs And Automated Processing
GlyScan.AI uses automated AI and rules-based processing to return educational estimates and suggestions. These outputs do not make legal, financial, employment, insurance, medical, or similarly significant decisions about you.
Website Visitors
If you visit the GlyScan.AI website, our hosting or security providers may process basic technical information such as IP address, browser type, requested pages, timestamps, and security logs to deliver the website, prevent abuse, and maintain reliability. The current static website does not intentionally use advertising cookies or third-party marketing trackers.
Third-Party Providers
- Backend infrastructure provider: service routing, fair-use enforcement, security records, and reliability monitoring.
- Google AI services: educational image analysis for food, drink, meal, and product-photo scans.
- Open Food Facts: grocery barcode product lookup and product database information.
- Apple and RevenueCat: in-app purchase verification, subscription status, and entitlement handling.
- Website hosting and security providers: website delivery, basic request logs, and abuse prevention.
We share data with third-party service providers only as needed to provide GlyScan.AI features, operate purchases, maintain security, prevent abuse, provide support, and perform the uses described in this Privacy Policy.
We require third-party service providers that process personal data on our behalf to apply privacy and security protections that are the same as, or materially equivalent to, the protections described in this Privacy Policy, including appropriate confidentiality, security, access-control, and data-processing safeguards.
These providers may process data only for the purposes described in this Privacy Policy and not for their own independent advertising, cross-app tracking, or data-broker purposes.
Information We Do Not Collect
GlyScan.AI does not require your name, email address, phone number, postal address, contacts, location, microphone data, HealthKit data, CGM data, medical records, advertising identifier, or payment card details.
Do not scan sensitive personal documents, private photos, faces, medical records, payment cards, or other content you do not want processed by AI service providers.
GlyScan.AI does not use scan content for third-party advertising, ad targeting, or sale to data brokers.
GlyScan.AI does not use your scan content to train its own AI models and does not authorize AI service providers to use your scan content for model training where provider settings or agreements give us that control.
Legal Basis For UK GDPR
Where UK GDPR applies, we process scan requests, barcode lookups, purchase validation, and optional settings primarily to perform the service you request. We process operational, security, reliability, and privacy-safe analytics data based on legitimate interests in operating a secure and reliable app. We process support messages based on legitimate interests and legal obligations where applicable.
International Transfers
Providers used by GlyScan.AI may process data in the United Kingdom, European Economic Area, United States, or other countries. Where required, we rely on appropriate safeguards such as data processing agreements, adequacy decisions, standard contractual clauses, or equivalent provider safeguards.
Data Export And Deletion
You can export structured scan history as CSV or delete local app data from the Profile screen. Deleting local data removes saved scan history, local images, verdicts, favorites, goals, and preferences from that device.
Deleting local data does not automatically delete Apple purchase records, RevenueCat entitlement records, or operational and security records needed to operate the service, enforce limits, validate purchases, and support restore purchase.
Retention
- Local history remains on your device until you delete it, delete the app, clear app data, or replace/restore your device without preserving app data.
- Operational, entitlement, security, and analytics records are retained only as long as reasonably needed to operate the service, diagnose issues, prevent misuse, comply with legal obligations, and manage costs.
- Barcode cache data may be retained to improve reliability and reduce repeated external requests.
- Purchase and subscription records are handled by Apple and RevenueCat under their own retention policies.
Your Rights
Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal data. Much of your scan history is stored only on your device and can be exported or deleted directly in the app.
For privacy requests, contact support@voyager-one-labs.com. UK users may have the right to complain to their local data protection authority.
Children
GlyScan.AI is not directed to children under 13, or the applicable minimum legal age for data processing in your local jurisdiction. If you believe a child has provided personal information, contact us.
Security
The app uses HTTPS for network requests. Server-side API keys and backend administrative keys are not stored in the iOS app. Local scan data is stored within Apple's iOS application sandbox and benefits from Apple's built-in device security protections, including file-system encryption where supported by the user's device configuration.
Changes
We may update this Privacy Policy as GlyScan.AI changes. The latest version will be available from the app, website, or App Store listing.