Back to ChoiceLens Home
C
ChoiceLens

Privacy Policy

Last Updated: November 2026

1. Overview

ChoiceLens is an application developed by Edglance LLC ("we", "our", or "us"). We are committed to transparency and adopt a privacy-minded design. This Privacy Policy outlines the types of data we collect, how it is processed, and your rights concerning that information when you use the ChoiceLens mobile application and its associated backend services.

2. Information Collection and Processing

ChoiceLens collects and processes information to deliver personalized food verdicts, meal estimates and daily targets. The specific categories of data processed include:

A. Camera, Photos and Scanning

Barcode scanning, including a barcode photo you upload, runs on your device with Apple's Vision frameworks; only the recognised barcode digits are sent to our servers.

If you use plate scans (estimating a meal from a photo), the App sends that meal photo, and any corrections you type, through our servers to Anthropic's Claude AI to produce the estimate. It does this only after you have agreed to it on the AI permission screen. We do not store the photo on our servers. The estimate (the foods, amounts and nutrients) is saved to your account.

B. Account, Profile and Body Data

Sign in with Apple gives us an account identifier and, if you choose to share it, your name and email address (Apple can hide your email). We store your goal, food lens, the priorities and watch-outs you choose, and any personal note you add in Profile.

If you set a daily calorie target, the App asks for your birth year, sex, height, weight and activity level to calculate it. These body details stay on your device until Pro is active and are then stored in your account. They are never sent to advertisers or attached to AI requests. You can remove them at any time with Delete my body data in Profile.

We also record your choices about AI features.

C. Scan History and Saved Products

When you scan a product, the associated barcode, product name, and verdict history are saved on our secure backend database to display your scan history and bookmarked products in the app.

D. Product Lookup Diagnostics

When a scan cannot be matched to a product, we record the barcode, what the outcome was, and which lookup source was attempted, together with your account identifier or the anonymous install identifier described below. We use this only to find and fix barcodes the app fails to resolve. It contains no camera imagery.

E. Product Analytics and Install Attribution

To understand how people move through the app, and which advertising brought them to it, we record a small set of first-party analytics events.

  • Anonymous install identifier: a random identifier generated on your device the first time the app runs and stored locally. It is not Apple's advertising identifier (IDFA) and is not derived from your device hardware. Deleting and reinstalling the app produces a new one.
  • Funnel events: we record when an account is created, when your first scan happens, progress through onboarding steps, when a subscription screen is shown, and when a subscription begins, along with the plan involved and which screen prompted it. These are linked to your account and to the install identifier.
  • Purchases: when you start a purchase, we record which screen it started from and its outcome, so we can see which parts of the App lead people to subscribe. These events never include food names, photos, body details or anything you type.
  • Tracking permission: in version 2.0.1 and later, we record whether Apple's tracking permission prompt was shown and the answer you gave.
  • Apple Search Ads attribution: if you arrived from an Apple Search Ads campaign, the app passes Apple's attribution token to our backend, which exchanges it with Apple for campaign, ad group, keyword and click-date information and stores that alongside your account. We store only a one-way hash of the token itself, never the token. If you did not arrive from an ad, no attribution record is created.

This processing is first-party: these events go only to our own backend and to Apple's attribution service. We do not sell this data. Version 2.0 and earlier contain no third-party advertising or analytics SDKs. Version 2.0.1 and later include Meta's SDK, which is used only as described in section G, and only if you allow tracking.

F. Food Log and Daily Targets

If you use the food log, we store the foods and amounts you log, their calories and nutrients, and your daily target, so you can see your progress across days and devices.

G. Advertising Measurement with Meta (version 2.0.1 and later)

We advertise ChoiceLens on Meta's apps (such as Facebook and Instagram). To learn which ads lead people to install and subscribe, ChoiceLens may collect information from the App and share it with third parties, including Meta, using Meta's SDK and our subscription provider RevenueCat. This happens only if all of these are true:

  • you are signed in;
  • the birth year you gave us shows you are an adult (we require at least 19 by calendar year, so no one under 18 is included); and
  • you tapped Allow on Apple's "Allow tracking" prompt.

What is shared: Apple's advertising identifier (IDFA) and the App's vendor identifier; a random identifier created by Meta's SDK; a one-way hash of your ChoiceLens account identifier; your IP address; basic device information (such as device model, iOS version, language, time zone and screen size); that you opened the App and created an account; and, when you start a free trial or pay for a subscription, the plan and the amount.

What is never shared: your food, scans, meal photos, food log, body details, targets, goals, watch-outs, Ask questions, name or email address.

How Meta uses it: Meta uses this information to provide measurement services and to target and deliver ads, under Meta's own terms and privacy policy. Meta may keep this event data for up to two years.

If you don't allow tracking, or we don't know you are an adult, Meta's SDK is not started and no identifiers are shared. Apple's SKAdNetwork may still report to ad networks, in aggregate and without identifying you, that an install, sign-up or free trial followed an ad.

Two limits. If you later turn tracking off, sign out, or delete your body data, the App stops sharing straight away and asks RevenueCat to remove the identifiers it holds. Until your device next connects to the internet, RevenueCat may still send a trial or payment event using the identifiers it already has. Also, if Meta's SDK is already running when you make the change, it may finish its own background work, including sending events it has already stored, until the App is closed.

How to opt out: on your iPhone, go to Settings > Privacy & Security > Tracking and turn off ChoiceLens. The Ad tracking row in the App's Profile takes you there. You can also manage how Meta uses information from other apps in Meta's settings under "Your activity off Meta technologies" (Accounts Center > Your information and permissions).

3. AI Features

ChoiceLens uses Anthropic's Claude API for three features. In version 2.0 and later, the App asks once for your permission to use them, and you can change it at any time in Profile > AI features. The Coach (version 2.0.3 and later) also asks for its own permission the first time you open it. Each feature sends:

  • Plate scans: the meal photo, any corrections you type, and your selected food lens.
  • Ask: your question, recent messages in that conversation, the product's details, and how it scored for your lens and focus.
  • The Coach: your food log (today's entries and the last 7 days' daily totals), your daily target and what's left of it, your goal and food lens, the personal note you add in Profile, the foods you recently scanned or snapped and any food you pick to ask about, the time of day, and your recent messages and the Coach's replies in that chat. We also use this food, target and profile information, without chat history, to write your daily note. We never send your saved birth year, height, weight or sex.

We never attach your name, email address, device identifiers or saved body details to these requests. Plate scans and Ask don't include your food log; the Coach does, as described above. Anything you type into a question, a correction, a Coach message or your personal note is sent as you wrote it, so avoid including personal details you don't want shared.

Anthropic deletes these requests and responses within 30 days by default, except where it needs to keep them longer to enforce its usage policy or to comply with the law, and it does not use them to train its models. We store your Ask conversations in your account until you delete your account. We keep each Coach message and daily note for 90 days, then delete it. You can delete a Coach chat at any time in the Coach, or all of them in Profile. Verdicts for scanned products are calculated by our own scoring rules, not by AI.

4. Subscription and Payment Processing

ChoiceLens uses RevenueCat and Apple App Store in-app purchases to manage subscriptions. All transaction events (such as renewals, cancellations, or upgrades) are processed directly through Apple and synchronized with RevenueCat. We store an entitlement tier token (e.g., Free, Pro, Admin) linked to your anonymized user identifier to unlock Pro features. We do not access, store, or process credit card numbers or billing addresses.

5. Data Sharing and Third-Party Subprocessors

We do not sell or lease your data, and we do not share it with data brokers. We share it with an advertiser (Meta) only as described in section 2.G, and only if you allow tracking. We use these service providers to run ChoiceLens:

  • Supabase: database and sign-in;
  • Render: our application servers;
  • Anthropic (Claude API): the AI features described in section 3;
  • RevenueCat: subscription management and, if you allow tracking, sending trial and payment events to Meta (section 2.G);
  • Apple: the App Store, Sign in with Apple, and Apple Ads attribution;
  • Meta: advertising measurement in version 2.0.1 and later, only if you allow tracking (section 2.G).

6. Data Retention and Deletion Rights

We keep your data while your account is active. In Profile you can:

  • Delete my body data: removes your birth year, sex, height, weight and activity level. Your daily target keeps its numbers.
  • Delete account: deletes your account and all associated data, including your scans, food log, targets, body details, Ask conversations and Coach chats.

Deleted data can remain in our database backups until those backups expire on their regular schedule. Requests to our AI provider are kept by Anthropic under its terms, as described in section 3. If you allowed tracking, information already shared with Meta (section 2.G) is kept by Meta under its terms, for up to two years; deleting your ChoiceLens account doesn't remove it, but you can manage it in Meta's settings.

7. Age Requirement

ChoiceLens is for people 13 and over and is not directed to children under 13. In line with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, contact support@edglance.com and we will delete it.

8. Contact Information

For any questions regarding this Privacy Policy or our data processing practices, please contact us at: support@edglance.com.