Savo — Privacy Policy

Effective date: 19 August 2026

Savo is a food-allergen scanning app made by Savo App Ltd ("we", "us"), a company registered in England and Wales, company number 17367906, registered office 7 Stafford Terrace, London W8 7BJ. Savo App Ltd is the data controller for the personal data described here. This policy explains what data the app handles and why. The short version: your allergen profile stays on your device and all allergen matching happens locally; our server stores only the minimum needed to watch your products and reply to your messages, under a random anonymous ID. Ingredients text read from labels may be kept unlinked from you, to improve product data for everyone.

Data stored on your device only

The following never leaves your phone and is deleted when you delete the app:

• Your allergen profile and sensitivity settings — every allergen match is computed on your phone; we never receive or store which allergens you have
• Your free-scan counter and app preferences

Data our server stores to run the Pantry watch

So Savo can keep checking your products after you buy them and alert you to changes, our server (hosted by Render) stores the following, keyed to a random, anonymous ID generated on your device — never your name, email, or Apple ID:

• Watched products: the barcodes you scan and a snapshot of each product's public ingredient data, so we can detect when it changes
• Push token and timezone (only if you enable notifications), so alerts and reminders reach your device at sensible local times via Apple's push service
• Support-chat messages you send us, so a real person can reply; please avoid including health details you would not want stored
• A log of notifications we sent you, used only to cap their frequency

Change alerts are personalised on your phone: the server notices a product changed and notifies your device; your device checks the change against your local allergen profile before showing you a warning. To erase server-side data, contact us (below) with the anonymous ID shown in the app, or simply delete the app — a reinstall starts a fresh ID and the old data is orphaned and periodically removed.

Data processed to provide features

• Barcode lookups. When you scan a barcode, the barcode number is sent to the Open Food Facts database (openfoodfacts.org) to fetch product information. No personal information is attached. Product data is provided by Open Food Facts under the Open Database License.
• AI label reading (Premium). When you photograph an ingredients label, the photo is sent over an encrypted connection to our server, which passes it to an AI provider (Anthropic) to read and analyse the ingredients, together with the allergen names from your profile so the result can be checked against them. Photos are processed to produce your result and are not used to build profiles about you; the photo itself and your allergen names are not stored. To investigate accuracy reports, our server keeps the text the AI extracted from the label, the overall verdict, and — when you photographed a label because the barcode was not found — that barcode, for up to 30 days (keyed to your anonymous ID, erasable on request like all server-side data), after which it is deleted automatically. The barcode is kept so we can tell which products the food databases we rely on are missing, and fix them. Where a label reading is complete, we may also keep the ingredients text itself, separated from your anonymous ID so it is no longer linked to you or your device, and use it to improve the product information Savo shows to everyone. What is kept in that form is the manufacturer's printed ingredients list, not anything about you. The 30-day record described above is deleted on the same schedule regardless.
• Recall alerts (Premium). The app periodically downloads a public food-recall feed (sourced from the UK Food Standards Agency) and compares it with your scan history on your device — that matching never leaves your phone. Ingredient-change alerts and reminders are sent through Apple's push-notification service as described above.

Purchases

Subscriptions are processed by Apple. We use RevenueCat to manage subscription status, identified only by a random, anonymous ID generated on your device. We never see your payment details, name, or Apple ID.

Analytics

We use PostHog (hosted in the EU) to understand how the app is used (for example which screens are opened and whether scans succeed) so we can improve it. Analytics events are tied to the same random anonymous ID, not to your identity. We never sell your data.

Advertising measurement in the app

Savo is made by one person and paid for out of pocket, so we need to know which ads actually bring people here. The app includes the TikTok Business SDK, which tells TikTok when an install came from one of our ads and when someone reaches a few basic milestones: having scanned a few products, opening an allergy card, seeing the subscription screen, or starting a subscription or free trial.

Those milestones are counts, nothing more. Your allergens, your allergy card, your scans and their results are never shared with TikTok or with any other advertising company.

If you allow tracking when we ask, an advertising identifier from your device is shared with TikTok, which lets them match the install to the ad and may be used to show you Savo ads. If you say no, or if you are never asked, that identifier is not shared and measurement falls back to Apple's own private system, which reports only anonymous totals. We only ask after you have used Savo a few times, never during setup, and you can change your mind at any point in iOS Settings under Privacy and Security, then Tracking.

Our website

Our marketing website (this site) uses the Meta (Facebook) advertising pixel to measure how our ads perform and to show Savo to relevant people on Facebook and Instagram. When you visit these pages, the pixel sets cookies and shares limited browsing data — such as the pages you view, your IP address and a browser identifier — with Meta Platforms, Inc. in the United States, acting as our advertising partner. This is separate from the app measurement described above, and Meta receives nothing from inside the app. You can limit this kind of tracking in your Facebook and Instagram ad settings, and on iOS through App Tracking Transparency.

These pages also use our own EU-hosted analytics (PostHog) to understand how visitors use the site — for example page views, how far you scroll, and which links you click — so we can improve it. This activity is tied to a random identifier, not to your identity, and is not used for advertising.

What the app never collects

• Precise location
• Advertising identifiers

We do not sell your data, and the Savo app shows no ads.

Legal bases

Where UK/EU data-protection law applies: we process barcode lookups, label photos, watched products, support messages, and subscription status because they are necessary to provide the service you request (performance of a contract); push notifications based on your consent (the iOS notification permission, withdrawable in Settings at any time); and anonymous analytics and improving the product information we show all users, under our legitimate interest in improving the app.

Important health note

Savo is an aid for checking food labels. It is not medical advice and not a guarantee. Product data can be incomplete or out of date and ingredients change. Always read the physical label and consult a healthcare professional about your allergies.

Children

Savo is not directed at children under 13, and we do not knowingly collect personal data from them.

Your rights

Your allergen profile lives only on your device: view, change, or erase it directly in the app, or remove everything on-device by deleting the app. For server-side data (watched products, chat messages, push token) or analytics, contact us and we will erase it, or delete the app and the anonymous record is orphaned and periodically removed. You also have the rights to access, correct, and complain to the ICO.

Changes

If we change this policy, we will update this page and the effective date above.

Contact

Savo App Ltd, 7 Stafford Terrace, London W8 7BJ, United Kingdom.
support@jerfan.co.uk