Privacy Policy
Last updated: 5 October 2026
Savio ("we", "us") is an app that scans the barcode of food, drinks and body care products and explains what is inside. This policy explains what data we collect when you use the Savio app and the website savioscan.com, why we collect it, who processes it for us, and the choices you have.
1. Who we are
Savio is operated by Graveton Oakshire Publishing LLC, 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States ("Savio"). We are the controller of the personal data described here. For any privacy question or request, write to privacy@savioscan.com.
2. The short version
- To use Savio you need an account: an email address to sign in and a first name to greet you. Everything else is optional.
- Your health details (weight, height, allergies, intolerances, diets) stay on your phone unless you choose to save them to your account.
- When you use the AI assistant, what you write, say or photograph is sent to an AI model to produce the answer. We do not keep your chats on our servers.
- We do not sell your data, show ads, or track you across other apps and websites.
- You can delete your account and its data at any time from the app.
3. Data we collect and why
Account
If you create an account we store your email address, the sign-in method (email and password, Google or Apple) and, if you give them, your first and last name. We use them to sign you in, keep your data in sync across devices and contact you about your account (for example, to send a confirmation code).
Profile
You can add your sex and year of birth to estimate your daily calorie needs, and optional details: weight, height, activity level, allergies and intolerances, and diets (including religious diets such as halal). These details can reveal information about your health or beliefs. They are saved to your account only if you give explicit consent in the app; otherwise they stay on your device. You can withdraw consent at any time in Settings, and the copy on our servers is deleted. We record when consent was given or withdrawn, as proof of consent.
Scans, history and favourites
When you scan a product we look up its barcode in our product database. If you are signed in, we save the barcode, product name, score and time of each scan, and your favourite products, so you can find them again on any device.
AI assistant (chat, voice and label photos)
When you ask the assistant a question, speak to it, or photograph an ingredient label of a product that is missing from our database, the text, audio or image is sent to an AI model to produce the answer, together with the products you are looking at and, for nutrition questions, your estimated daily calories. This happens only when you choose to use the assistant. We do not store your chat messages or voice recordings on our servers; your conversation stays on your device. Product analyses generated from ingredient lists (not from your messages) are cached by barcode so that the next person gets the answer faster.
Products you add
If a product is missing and you choose to add it, the photos and details you send are stored in our product database and may become part of the public product information shown to all users. Please do not include people or personal information in these photos.
Purchases
If you subscribe to Savio Premium we receive the status of your subscription (plan, start, renewal and expiry dates) from our subscription partner, linked to your account. We never see or store your full card details. If you redeem a Premium code, we store which code you used and until when it is valid.
Technical data
Like any online service, our servers receive technical data such as your IP address and device type when the app connects, used for security and to prevent abuse (for example, rate limits). The app also stores a random device identifier to limit how many products a device can submit. If the scanner has a problem, the app may send anonymous diagnostics (device model, browser version, error counters, barcodes read) to help us fix it.
On your device
The app stores your settings, profile, recent products and a cache of product data on your device so it works quickly and partly offline. You can clear it with "Start over" in Settings or by removing the app.
4. Legal bases (EU, EEA and UK users)
- Contract: to provide your account, scans, history and Premium.
- Explicit consent: to save health and diet details to your account. You can withdraw it at any time in Settings.
- Legitimate interests: to keep the service secure, prevent abuse and fix problems.
- Legal obligation: to keep purchase records required by tax law.
5. Who processes data for us
We use the following service providers. They process data only on our instructions and under data protection terms.
| Provider | What for |
|---|---|
| Supabase | Accounts, sign-in, profile, history and the product database |
| Cloudflare | Hosting of the app and website; Workers AI models for the assistant |
| RevenueCat | Managing subscriptions across the web and app stores |
| Stripe | Payments for subscriptions bought on the web |
| Apple | In-app purchases and Sign in with Apple (iPhone app) |
| Sign in with Google (if you choose it) and our support email | |
| Resend | Sending account emails such as confirmation codes |
Product information comes from our own database and from open sources such as Open Food Facts; we look up products by barcode only and do not send them your personal data.
6. International transfers
Our providers may process data in countries other than yours, including the United States, India and the European Union. Where required, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. How long we keep data
- Account, profile, history and favourites: until you delete your account.
- Health and diet details on our servers: until you withdraw consent or delete your account.
- Consent records and purchase records: as long as required to prove them or by law.
- Technical logs: for a short period, usually a few days.
- Safety backups of the database: kept for a limited time, then deleted.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent. You can delete your account directly in the app (Settings → Delete account). For anything else, write to privacy@savioscan.com; we will answer within 30 days. You also have the right to complain to your local data protection authority.
9. Children
Savio is not directed to children. You must be at least 13 years old, or the minimum age required in your country to consent to the use of your data (16 in some EU countries), to create an account.
10. Security
Data is encrypted in transit, access to customer data is limited by row-level security so each account can only reach its own data, and health details are separated by explicit consent. No system is perfectly secure; if a breach affects you, we will tell you as required by law.
11. Changes
We will update this policy when the app changes. If a change is significant, we will tell you in the app before it applies. The date at the top shows the latest version.
12. Contact
Graveton Oakshire Publishing LLC, 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States — privacy@savioscan.com