Privacy Policy

Overview

MenuCheck ("the App") is designed with privacy in mind. We collect the absolute minimum data necessary to provide the service.

Menu Images

Menu photos are sent to our server for AI analysis. Images are processed in real-time and immediately discarded after analysis is complete. We do not store, log, or retain any images on our servers.

Device Identifier

A random, anonymous device identifier is generated on first launch and kept in your device's keychain. This ID is what our server uses to count your scans (rate limiting and your free-scan allowance), to know whether your subscription is active, and to record that you accepted the medical disclaimer. It is not derived from your device's hardware or from any Apple account, and it cannot be used to identify you personally.

Health Conditions

The health conditions you select (for example, gout or diabetes) are sent with each analysis request so the AI can tailor its response. These selections are stored only on your device and are never retained on our servers.

Subscription Status

If you subscribe, Apple tells our server that the subscription exists, which plan it is, when it renews, and its transaction identifiers. We store that against your anonymous device identifier so the app can unlock MenuCheck Pro. We never see your name, your Apple Account, or your payment details — Apple handles the purchase and shares none of that with us.

Data We Do NOT Collect

We do not collect names, email addresses, or contact information. We do not collect location data, advertising identifiers, analytics or tracking data, cookies or web tracking, or social media data.

Third-Party Services

Menu images and condition selections are sent to one AI provider for analysis. We try Google (Gemini) first; if Google is unavailable, the same request goes to OpenAI, and then to xAI. A request is sent to whichever provider answers it — never to all of them. Each provider processes the data under its own API privacy policy. All three are used through their paid API tiers, where inputs are not used to train models. We send only the menu photo and the dietary categories you selected; the anonymous device identifier and your subscription status are never sent to them. No other third party receives any data. We use no analytics, advertising, attribution, or tracking services of any kind.

Data Storage

On your device: your scan history, including results and thumbnail images, is stored locally using Core Data. You can delete individual scans or all history from the app at any time. On our servers: we keep no personal information and no menu images. What we store is keyed only to your anonymous device identifier — scan counts, subscription status from Apple, and a record that the medical disclaimer was accepted, including its version and when. Our request logs record timing and errors only and are not linked to any device.

Children's Privacy

MenuCheck does not knowingly collect data from children under 13. The App carries an age rating reflecting its medical and health content rather than any age-restricted material; see its App Store listing for the rating in your region.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated revision date.

Contact

If you have questions about this Privacy Policy, please visit wellforall.co/privacy-policy or contact us at hello@wellforall.co.