Last updated: May 9, 2026
TL;DR: We don't store your photos, we don't track you, and we don't sell your data. Photos are analyzed in-memory and immediately discarded. Your scan history lives on your device and nowhere else.
CarbZen processes food photos to estimate carbohydrate content. Photos are sent to our secure server for AI analysis and are not stored after processing. We do not collect personal information, account data, or location.
Your scan history (photos, food items, carb estimates) is stored locally on your device using Apple's SwiftData framework. This data never leaves your device unless you choose to delete the app.
We use the following services to process food analysis:
Anthropic (Claude AI) — Analyzes food photos to identify items and estimate carbs. Photos are processed per Anthropic's privacy policy and are not used for training.
USDA FoodData Central — Provides verified nutritional data. Only food names are sent (no photos).
Subscription purchases are processed entirely by Apple through StoreKit. We do not have access to your payment information.
CarbZen uses TelemetryDeck for privacy-respecting product analytics. TelemetryDeck collects an anonymized device-derived identifier (hashed client-side, never transmitted in raw form), coarse device info (model, OS version, app version), and event names you trigger by using the app (for example, when a scan completes or the paywall is shown). It does not use advertising identifiers, does not track you across other apps or websites, and does not require an App Tracking Transparency prompt. See TelemetryDeck's privacy policy.
CarbZen does not knowingly collect data from children under 13.
Photos are processed in-memory by our server infrastructure and are never stored after analysis is complete. Server request logs are retained for up to 72 hours for operational monitoring and then automatically deleted. On-device scan history persists in Apple's SwiftData framework until you manually delete individual records or uninstall the app.
If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing. Because CarbZen does not store personal data on our servers, most of these rights are satisfied by design — your data lives entirely on your device under your control. To exercise any data rights or make a request, contact us at support@cognfy.com.
If you are a California resident, you have the right to know what personal information is collected, to request deletion of your data, and to opt out of the sale of personal information. CarbZen does not sell your personal information. Because all scan data is stored locally on your device, you can delete it at any time by removing individual records within the app or by uninstalling. For questions, contact support@cognfy.com.
When you scan food, image data is transmitted to our server infrastructure powered by Cloudflare Workers (processed at the nearest global edge location) and forwarded to Anthropic's Claude AI (US-based) for analysis. Food names may be sent to the USDA FoodData Central API (US-based) for nutritional enrichment. These transfers are governed by each provider's standard data processing agreements. See Cloudflare's Privacy Policy and Anthropic's Privacy Policy.
CarbZen does not use cookies, tracking pixels, or advertising identifiers. The app does not request App Tracking Transparency permission and has no mechanism to track you across apps or websites. The only third-party analytics SDK is TelemetryDeck, described in the Analytics section above.
CarbZen relies on the following third-party services to deliver its functionality:
Cloudflare — Edge compute and request routing. Privacy Policy
Anthropic (Claude AI) — Food photo analysis. Privacy Policy
USDA FoodData Central — Nutritional data lookup. Website
TelemetryDeck — Privacy-respecting product analytics. Privacy Policy
Questions about this policy? Contact us at support@cognfy.com.