Privacy Policy

What2Know is operated by CHASM AI Inc. ("we", "us"), North Vancouver, BC, Canada. Questions: privacy@what2know.app.

• Product photos you scan. When you scan, the photo is sent to our AI provider to read the label. See "AI analysis" below.
• Account data (optional). If you create an account, your email and the household profiles you set up (names and the allergy/diet/additive preferences you enter). Scanning works without an account.
• Scan history. Stored on your device, and synced to your account only if you sign in.
• Purchase status. Your subscription entitlement, via the app store and RevenueCat. We never see your card number.
• Prices you choose to submit (where that feature is available).

We do not run ads, we do not sell your data, and we do not track you across other apps or websites.

To generate your result, your photo is sent to Anthropic (Claude), a third-party AI provider, and is used only to produce your result. Anthropic does not use it to train its models, and Anthropic automatically deletes uploaded images (typically within 30 days; up to two years only if a copy is retained for a policy or safety review). Our own servers do not store your photo -- it is held in memory only for the moment needed to call the AI and is then discarded. You consent to this transfer before your first scan, and you can revoke that consent at any time in Settings.

We share the minimum data needed with: Anthropic (AI analysis), Supabase (account and data storage), RevenueCat and the Apple App Store / Google Play (subscriptions), Vercel (hosting), and, for the price feature where available, Kroger and SerpApi(product price lookups). Each acts on our instructions under its own data-processing terms.

We are based in Canada; some providers (including Anthropic and Vercel) process data in the United States. Where required (including under Quebec Law 25 and the GDPR), we assess that recipients provide adequate protection through their contractual data-processing terms before transferring.

What2Know is not directed to children and is intended for adults managing a household. If you record a family member who is a minor, please use a first name or label only -- do not enter a child's full identity. We do not knowingly collect personal information directly from children.

You can access, correct, export, or delete your data. Delete your account and all associated data in Settings then Delete account, or email privacy@what2know.app. Residents of the EU, the UK, California, and Canada (including Quebec) have additional statutory rights, including the right to lodge a complaint with a supervisory authority.

We will post any changes here and update the date above. Material changes will be surfaced in the app.