Privacy Policy
Privacy Policy v4.0 — Revised per attorney review rounds 1 and 2. Effective Date: [DATE].
This Privacy Policy describes how Archer Intel LLC collects, uses, stores, and discloses information about you when you use archerfoodgenius.com and any AFG applications. By using the Service, you agree to the collection and use of information as described here.
Information We Collect
Information You Provide Directly:
- account registration email and password (passwords are hashed and never stored in plain text);
- food product photographs and images you upload for analysis;
- text inputs including food questions, nutrition claims, and dietary preferences;
- dietary preferences, restrictions, and wellness goals for meal planning; and
- feedback and support communications.
Information Collected Automatically:
- usage data including features accessed, scan counts, session duration, and interaction patterns;
- device information including device type, operating system, browser type, and screen resolution;
- IP address collected at account creation and at the time you accept our onboarding disclaimer;
- server log data;
- anonymized usage analytics via PostHog (you may opt out by contacting support@archerfoodgenius.com); and
- anonymized error monitoring via Sentry.
Information from Third-Party Services:
- if you sign in with Google OAuth, we receive your Google account email and profile identifier but not your password.
- Payment information is processed by Stripe — we store only a Stripe customer identifier and subscription status and never store payment card details.
How We Use Your Information
We use the information we collect to:
- provide, operate, and improve the Service;
- process food scans, comparisons, fact-checks, and meal suggestions;
- enforce weekly scan limits for free tier users;
- maintain legally required records of disclaimer acceptances including user ID, acceptance timestamp, and IP address;
- process payments and manage subscriptions;
- send transactional emails;
- monitor service performance and identify errors;
- comply with applicable law; and
- detect and prevent fraud and security incidents.
We do not sell your personal information. We do not use your food scan data, health goals, or dietary preferences for advertising targeting.
Food Scan Data, Health Information, and Automated Processing
The Service processes food-related information you provide including dietary restrictions, allergen sensitivities, and wellness goals. This information is used solely to provide the Service to you and is not shared with third parties for marketing purposes.
Certain outputs including food assessments, comparisons, nutrition claim verdicts, and meal suggestions are generated through automated AI processing. These outputs are informational only and are not intended to make legal, medical, insurance, employment, or healthcare decisions on your behalf. You may request human review of any automated output by contacting support@archerfoodgenius.com.
Scan history and query logs are retained for twelve (12) months from the date of creation. Disclaimer acceptance records are retained for seven (7) years from the date of acceptance.
How We Share Your Information
We do not sell, rent, or trade your personal information. We share information only with the following service providers subject to confidentiality obligations:
- Anthropic PBC (AI model provider — food scan images and text queries are transmitted to Anthropic's API for processing);
- Supabase Inc. (database and authentication);
- Vercel Inc. (hosting and infrastructure);
- Stripe Inc. (payment processing);
- PostHog Inc. (anonymized usage analytics); and
- Sentry / Functional Software Inc. (anonymized error monitoring).
We may disclose your information if required by law, court order, or governmental authority, or to protect rights, safety, or security.
If AFG is acquired or merged, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
Cross-Border Data Transfers
Your personal information may be processed, stored, and transferred to countries outside your state or country of residence, including the United States. The service providers listed in Section 4 may process data in the United States and other jurisdictions where they operate. These jurisdictions may have data protection laws that differ from those in your location. By using the Service, you consent to the transfer of your information to these jurisdictions. If you are located in the European Economic Area, United Kingdom, or Switzerland, transfers of your personal data to the United States are made in reliance on appropriate transfer mechanisms including Standard Contractual Clauses where applicable.
Legal Basis for Processing (GDPR and EEA Users)
If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Consent — for optional health goals and dietary preferences;
- Contract Performance — for account registration, subscription information, and usage data necessary to provide the Service;
- Legitimate Interests — for usage analytics, error logs, and security monitoring; and
- Legal Compliance — for disclaimer acceptance records and payment records retained to comply with applicable law.
EEA, UK, and Switzerland users may have additional rights including the right to access, rectify, erase, restrict processing of, and port their personal data, and the right to object to processing based on legitimate interests. Contact support@archerfoodgenius.com to exercise these rights.
AI Training Disclosure
AFG does not use your personal data, food scan images, or query content to train its own AI models. AFG does not build or operate its own AI foundation models.
Food scan images and text queries are transmitted to Anthropic PBC via their API. As of the effective date of this Privacy Policy, Anthropic's API usage policy provides that data submitted via the API is not used to train Anthropic's AI models by default. This policy is subject to change by Anthropic independently of AFG. Review Anthropic's current policies at anthropic.com.
PostHog and Sentry receive only anonymized analytics and error data that does not include food scan images or personal health information and is not used for AI model training.
Data Retention
We retain your personal information as follows:
- account data retained until account deletion plus 30 days;
- scan history and query logs retained for 12 months then permanently deleted;
- disclaimer acceptance records retained for 7 years for legal compliance;
- payment records retained for 7 years as required by applicable financial regulations; and
- food scan images transmitted to Anthropic for processing and not stored by AFG beyond the duration of the API request.
You may request account deletion by emailing support@archerfoodgenius.com or through your account settings. We will process deletion requests within 30 days subject to legal retention requirements.
Data Security
We implement the following security measures:
- TLS encryption for all data in transit;
- encryption of data at rest;
- Row Level Security policies so each user can only access their own data;
- API keys stored as encrypted environment variables never in source code; and
- hashed password storage.
We cannot guarantee absolute security.
Your Rights and Choices
Access and Correction: you may access and update your account information through your account settings or by contacting support@archerfoodgenius.com.
Account Deletion: request deletion by contacting support@archerfoodgenius.com. We will process requests within 30 days subject to legal retention requirements.
California Residents — CCPA and CPRA Rights: California residents have the right to know, delete, correct, and opt out of the sale of personal information, and the right to non-discrimination. We do not sell personal information. Contact support@archerfoodgenius.com to exercise your rights. We will respond within 45 days.
EEA, UK, and Switzerland: see Section 6 for legal basis and additional rights.
Email Communications: you may opt out of marketing emails via the unsubscribe link or by contacting support@archerfoodgenius.com. Transactional emails cannot be opted out of while your account is active.
Cookies and Tracking Technologies
The Service uses session cookies and browser local storage to maintain your login session and user preferences. We use PostHog for anonymized usage analytics and Sentry for anonymized error monitoring. We do not use third-party advertising cookies or behavioral tracking for advertising purposes. You may opt out of PostHog analytics by contacting support@archerfoodgenius.com.
Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact support@archerfoodgenius.com if you believe we have inadvertently done so.
FTC Health Breach Notification Policy
We treat AFG as subject to the FTC Health Breach Notification Rule (16 C.F.R. Part 318) given our collection of health-related information.
Individual Notification: We will notify affected individuals without unreasonable delay and in no case later than 60 calendar days after discovery of a breach, by email to their registered address.
FTC Notification: For breaches affecting fewer than 500 individuals, we will notify the FTC within 60 calendar days of discovery. For breaches affecting 500 or more individuals, we will notify the FTC contemporaneously with individual notice and in no case later than 10 business days after discovery.
Media Notification: For breaches affecting 500 or more residents of a given state, we will notify prominent media outlets in that state as required by 16 C.F.R. Section 318.5(b).
Vendor Incident Reporting: We require service providers to notify us of security incidents affecting our users' data within 24 to 48 hours of discovery. Contact support@archerfoodgenius.com immediately if you believe your information has been involved in a security breach.
Operational Compliance Commitments
Clinical Features Separation: We maintain strict separation between food database information and clinical dietetics and will not introduce medication-food interactions or clinical decision support without regulatory review.
In-App Disclaimers: No Medical Advice and Allergen Detection disclaimers are displayed during mandatory onboarding and on allergen alert screens.
Photo Data Alignment: Food photographs are transmitted to Anthropic solely for generating food assessments and are not stored by AFG beyond processing.
Vendor Data Flows: We are implementing Data Processing Addendums with all service providers confirming incident notification SLAs.
Changes to This Privacy Policy
We will notify you of material changes by posting the updated Privacy Policy at archerfoodgenius.com/privacy and sending notice to your registered email address at least 30 days before changes take effect.
Contact Us
Archer Intel LLC — A Florida Limited Liability Company