Privacy Policy

Last updated: March 10, 2026

1. General Provisions

This privacy policy describes how MB "Tumas AI" (hereinafter - "we", "our", "Service Provider"), operating the FoodScan.ai service (hereinafter - "Service"), collects, uses, stores and processes your personal data when you use our website foodscan.ai, mobile application and/or Telegram bot.

By using the Service, you confirm that you have read this privacy policy and agree to the data processing described herein.

2. Data Controller

MB "Tumas AI" Email: [email protected]

3. Personal Data We Collect

3.1. Registration Data

• Email address
• Selected language
• Platform used to connect (Telegram, web)
• Platform user identifier

3.2. Profile Data (provided voluntarily)

• Sex
• Age
• Weight
• Height
• Personal goals / intention (e.g., "I want to eat healthier")

3.3. Usage Data

• Conversation history with the AI assistant
• Food product photos you send
• Number of scans and messages per day
• Subscription plan and expiry date

3.4. Technical Data

• IP address
• Browser type and version
• Device type
• Website traffic statistics (via Google Analytics)

4. Purposes and Legal Bases for Processing

Purpose	Legal Basis
Account creation and administration	Performance of contract
Providing food product analysis	Performance of contract
Personalising analysis based on your profile	Consent
Payment processing	Performance of contract
Service improvement and statistics	Legitimate interest
Compliance with legal obligations	Legal obligation

5. Artificial Intelligence and Data Processing

5.1. The Service uses third-party artificial intelligence (AI) technologies to perform food product photo and label analysis.

5.2. Your submitted photos and profile data (goals, age, weight, etc.) may be transmitted to AI service providers for analysis purposes.

5.3. AI-generated responses are informational in nature and should not be considered medical, nutritional, or other professional advice.

6. Cookies

Our website uses cookies - small text files stored on your device. Cookies help us:

• Analyse website traffic and usage (Google Analytics)
• Remember your preferences and settings
• Improve your browsing experience

You can manage cookies in your browser settings. Please note that disabling cookies may affect some website functionality.

7. Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects anonymous information about visitor numbers, pages viewed, devices and browsers used. This information is used for statistical purposes only and does not personally identify you.

More information: Google Privacy Policy

8. Payments

Payments are processed by Stripe - a secure and reliable payment platform. We do not store your payment card details. All payments are processed through Stripe's encrypted system.

More information: Stripe Privacy Policy

9. Data Sharing with Third Parties

Your personal data may be shared with:

• AI service providers - for food product analysis
• Stripe - for payment processing
• Google Analytics - for website statistics
• Email service providers - for sending verification codes and notifications
• Competent state authorities - as required by applicable law

Data may be processed outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are applied in accordance with GDPR requirements.

10. Data Retention Periods

• Account data - retained while you use the Service or until you request account deletion
• Conversation history - retained for the duration of your account
• Product photos - retained for analysis purposes for the duration of your account
• Payment data - retained as required by accounting regulations (10 years)

11. Your Rights

Under the GDPR (General Data Protection Regulation), you have the right to:

• Know - what data we collect about you
• Access - obtain a copy of your personal data
• Rectify - request correction of inaccurate data
• Erase - request deletion of your data (you can do this independently in your profile settings)
• Restrict - request restriction of data processing
• Portability - receive your data in a structured format
• Object - object to data processing for marketing purposes
• Complain - to the State Data Protection Inspectorate (ada.lt)

To exercise your rights, contact us at: [email protected]

12. Data Security

We apply appropriate technical and organisational measures to protect your personal data from unlawful or unauthorised processing, accidental loss, destruction or damage, including:

• Data encryption in transit (TLS/SSL)
• Access control and authentication
• Regular security assessment

13. Minors

The Service is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors. If we learn that we have collected data from a person under 16, we will delete it promptly.

14. Policy Changes

We may periodically update this privacy policy. We will inform you of significant changes on our website and/or by email. Continued use of the Service after changes are published constitutes your acceptance of the updated policy.

15. Contact

If you have questions about this privacy policy or wish to exercise your rights:

MB "Tumas AI" Email: [email protected]