Back to the front page

Privacy policy

Last updated 7 August 2026

The short version: the photo never leaves your phone, and we never learn what you scanned. We do not run a server that could receive it. The app's only connection is downloading the ingredient list from a static host. The detail is below.

Who is responsible

Bloodsugar Guide is provided by GF Consulting ApS, Lykkesholms Allé 11, 1902 Frederiksberg C, Denmark. We are the data controller for the limited information described in this policy. You can reach us at blodsukkerguiden@gmail.com.

What happens on your phone

When you point the camera at an ingredients list, the text is recognised by your own phone, using the text recognition built into iOS and Android. The image is handled on the device. It is not uploaded, not stored by us, and not sent anywhere.

The ingredient list itself is built into the app, so looking something up does not require a network request or an internet connection. We keep no history of your scans, because we never receive them in the first place.

What the app sends

Updates to the ingredient list

The app checks whether a newer version of the ingredient list is available. The list is a single file hosted on GitHub Pages. We do not run a server of our own, and we receive no logs of these requests at all.

The request carries no identifier: no account, no device ID, no advertising ID. As the host, GitHub handles the request technically and can see the IP address it came from and the time it arrived, under its own privacy statement. We never see any of it, and there is nothing in the request that says anything about you or what you scanned.

App store statistics

Apple and Google give us aggregated statistics about installations and use of the app — for example how many people opened it in a given week. These are sums across everyone, carry no identifier, and cannot be traced back to a person or a phone. This is standard for every app on their stores and we cannot switch it off.

What we never collect

• Your name, email address, or phone number. The app has no account and no sign-up.
• Photos, or the text read from them.
• A history of what you have scanned.
• Your location.
• Your contacts, calendar, or data from Apple Health or Google Fit.
• Advertising identifiers. There are no adverts and no third-party advertising trackers in the app.

We do not sell data and we do not share it for marketing. The app contains no analytics tools, no crash reporting, and no third-party components that send anything anywhere.

Our legal basis

We do not collect personal data through the app, so for most of what is described here there is nothing for us to have a legal basis for. When the app requests the ingredient list, our host handles that request in order to deliver the file, which rests on our legitimate interest in providing the app's content (Article 6(1)(f) of the GDPR).

Who else is involved

GitHub, Inc. hosts the ingredient list file on GitHub Pages. Apple and Google distribute the app and provide the aggregated store statistics described above. There is no one else — the app contains no analytics or crash reporting services.

Transfers outside the EU

GitHub is a US company, so the technical details of a request for the ingredient list — an IP address and the time it arrived — may be handled outside the EU and EEA, under contractual safeguards based on the European Commission's standard contractual clauses. Apple and Google operate internationally under their own terms. Nothing about what you scan is included in any of it.

How long anything is kept

We keep nothing, because we receive nothing. We run no server and hold no logs of requests for the ingredient list. The aggregated statistics from Apple and Google sit in their consoles under their own retention rules and cannot be linked to a person.

Your rights

You have the right to ask for access to, correction of, or deletion of personal data we hold about you, and to object to how we process it.

In practice we hold nothing that can be linked to an individual, which is deliberate. That also means we cannot find data belonging to a particular person, because there is no identifier to search by and no store to search in. You are welcome to contact us at blodsukkerguiden@gmail.com regardless. If you are unhappy with how we handle it, you can complain to Datatilsynet, the Danish Data Protection Agency, at datatilsynet.dk.

Children

The app is not aimed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes, the date at the top will be updated. Any material change will be shown in the app before it takes effect.

Contact

Questions about this policy: blodsukkerguiden@gmail.com. GF Consulting ApS, Lykkesholms Allé 11, 1902 Frederiksberg C, Denmark.