Score My Food · last updated August 2026
Your profiles, allergies, health conditions, diets, goals, scan history, saved scores, progress and settings are written to this phone's own storage. They are not uploaded to us, not backed up to our servers, and not shared between devices. Deleting the app deletes them.
The photograph, and the dietary constraints needed to score it: your allergies, diets, priorities, things you avoid, and any note you typed. That is sent to the model that reads the label. Your name is not sent. Photographs are not retained after the reading.
Your profile names, your scan history, your progress and points, the contents of past reports, and any email address or phone number you type to invite someone. Invite details are used to open your own mail or messages app and are discarded immediately; they are never written to storage or transmitted to us. Your name is not attached to a scan, a shared label reading or a contribution anywhere.
A rating or comment you post is stored against the product and a random device identifier, never against your name or profile. Other people see the rating and the words, and nothing about who wrote them.
A price you report for a product is stored against that product's barcode and your country, so the next person scanning it sees what shoppers have paid. The shop name is what you type; no location is stored, and your device identifier is hashed and never shown to anyone.
When a nutrition label is photographed for a barcoded product, the facts read from the pack, name, serving, nutrition figures, ingredients, are stored against that barcode so the next person scanning it gets them instantly. What the pack says is the same for everyone; nothing about you travels with it: no name, no allergies, no goals, and the device identifier is hashed. Your allergen alerts and score are always computed on your own phone from your own profile.
If you choose to share a correction, only facts about the food are sent: its name, brand, serving size, nutrition figures and ingredient list. Your allergy alerts are deliberately not included, because those are produced by matching the product against your own profile and so describe you rather than the food. Nothing about you, your profile or your score goes with a contribution. You can turn this off in Settings at any time, and it is off until you agree to it.
A random identifier is generated on this device the first time the app runs. It is not your name, your email or any advertising ID, and it is not linked to an account because there are no accounts. It is used to apply rate limits and to keep one label reading and one price report per device on shared products. Where it is stored alongside a shared label reading or a contribution it is hashed first, so those records cannot be matched to each other or back to your device.
Location is off unless you enable it. When on, your position is turned into a city and postal code on the phone and rounded to about a kilometre. That rough point is used to look up nearby shops through OpenStreetMap. Your exact position is never stored and never sent to us. You can use a typed city or postal code instead and never enable location at all.
A profile marked as a child asks only for an age range, which is used to apply age-appropriate nutrition limits. The app never asks for a child's name to be shared, their contact details, or any other information about them.