← Back to homeLEGAL

Privacy Policy for VitaBaby

Last Updated: 8 October 2026 · Effective Date: 8 October 2026

This Privacy Policy explains how VitaBaby — operated by Vitaledger Group (“we”, “us”, “our”) — collects, uses, stores, shares and protects your personal information when you use the VitaBaby app and related services (the “Services”). VitaBaby helps adults see what is in the packaged food they buy: you scan a barcode or snap a pack, see a plain verdict, keep a collection of what you have scanned, and get told if something you scanned is recalled.

You can use most of VitaBaby without an account. What we collect depends on whether you have one, so this Policy describes the two cases separately.

1. Information we collect

1.1 If you use VitaBaby without an account

  • Kept only on your phone: your buddy's name, the products you have scanned and when, your sticker collection, streak and growth progress, the allergens you choose to watch for, and your notification choices. We do not receive this information.
  • Barcodes you look up: when you scan or type a barcode, the app sends that barcode to our server to find the product. It is not linked to you.
  • Recall checks: to tell you about recalls, the app periodically sends the barcodes of products you have scanned to our server. They are compared with current recall notices and then discarded; we do not store them or link them to you. Your IP address is used briefly to limit how often these checks can be made.

1.2 If you create an account

  • Account data: your mobile phone number (with its country code) and a password, which we store only as a secure hash.
  • Scan history: the products you scan, when you scanned them (including your local date) and how (barcode, photo or label), so your sticker collection, streak and buddy's growth follow your account across phones. If you used VitaBaby as a guest first, the scans on your phone are added to your account when you sign up or sign in.
  • Your buddy: its name and progress.
  • Your allergen watch list: the allergens you choose to watch for (from the UK's 14 major allergens). This can reveal information about your health; see section 3.
  • Photo reads: a count of how many photos you have had read each day, so we can apply the daily limit.

1.3 Photos you snap

“Snap it” is available only with an account. When you snap a pack or an ingredients list, the photo is sent to our server and to our AI provider (Google's Gemini) to identify the product or read the ingredients. We use the photo only for that read and do not keep it afterwards. Please avoid photographing people or anything other than the product.

1.4 The camera

Barcodes are recognised on your phone. The live camera picture is not sent to us or stored.

1.5 Information collected automatically

  • Usage data: limited app usage events (for example, that the app was opened) through Google Firebase Analytics, together with device information such as model, operating system and language.
  • Server logs: our server records technical information about requests (such as time, the address requested and your IP address) to keep the Services running and secure.

Reminders (“nudges”) and recall alerts are local notifications scheduled on your phone. We do not collect a push notification token.

1.6 If you used the earlier version of VitaBaby

The earlier version of VitaBaby was a baby feeding and growth tracker. Information you recorded with it (such as profiles, logs and photos) remains in your account until you delete your account or ask us to delete it. The current app no longer shows or adds to it. To get a copy of it, email us (section 9).

2. How we use your information

  • To provide the Services: look up products, read photos you snap, show allergens you watch for, keep your collection, streak and buddy in step, and check what you have scanned against recall notices.
  • To keep your account working: sign-in, password resets (we text you a code) and account deletion.
  • To keep the Services secure and fair: prevent abuse and apply limits such as the daily photo-read limit.
  • To improve VitaBaby: understand, in aggregate, which features are used and fix problems.

We rely on our contract with you to provide the Services, on our legitimate interests for security and improvement, and on your explicit consent for your allergen watch list (section 3). We never sell your personal information and we do not use it for advertising.

3. Your allergen watch list

Allergen information you choose to add can be health information. We ask for it only so the app can show you, first, when a product contains or may contain something you watch for. You add it yourself, you can change or clear it at any time in the app, and we use it for nothing else. Without an account it stays on your phone; with an account it is stored with your account so it follows you. VitaBaby shows what product data and labels say; it cannot guarantee that a product is free from an allergen. Always check the pack.

4. Sharing your information

We share personal information only with these service providers, who act on our instructions:

  • Amazon Web Services: hosts our server, database and backups.
  • Google: Firebase (sending password-reset codes by text message, and app analytics) and Gemini (reading photos you snap).

Product information comes from Open Food Facts and other product sources; we do not send them your personal information. Verified records and recall records published on the Cardano blockchain are about products, never about you. We may also disclose information where the law requires it, to protect the safety of our users, or as part of a merger or sale of our business (in which case we will tell you).

5. Where your information is stored and for how long

  • Location: our servers are in Singapore (Amazon Web Services, ap-southeast-1), so your information may be transferred outside the UK and EU. Where required, we use appropriate safeguards such as standard contractual clauses.
  • Account data is kept while your account is active. When you delete your account in the app (me → delete account), we delete your account, scan history, buddy and watch list; copies in backups are removed when those backups expire.
  • Guest data stays on your phone until you clear it (me → clear this phone) or delete the app.

6. Security

  • Encryption in transit (TLS) and secure password hashing.
  • Access to personal data limited to the people who need it.
  • Regular dependency updates and security reviews.

Keep your password private. If you think your account has been compromised, contact kinson@vitaledger.info.

7. Your rights

Depending on where you live (for example under UK or EU GDPR, California CCPA/CPRA or Hong Kong PDPO), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its use, and to withdraw consent at any time. You can delete your account and clear your watch list in the app yourself. For anything else, email amanda@vitaledger.info with the subject “VitaBaby Data Rights Request”. In the UK you can also complain to the Information Commissioner's Office (ico.org.uk).

8. Children

VitaBaby is meant for adults and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.

9. Changes and contact

We will post any change to this Policy here with a new date, and tell you in the app about material changes.

VitaBaby shows product information and published records. It does not give medical or allergy advice and is not a substitute for reading the pack or for professional advice.