Where your food is actually from.
Privacy Policy
Last updated 2 September 2026
The short version. Fíor has no accounts, no trackers and no advertising, and we run no analytics of our own. Your allergen list never leaves your device. The only thing Fíor sends anywhere is the barcode number you scan, because that is the only way to look a product up — plus usage figures that Google's barcode reader sends to Google, which we disclose in full below.
What stays on your device
All of the following is held in local storage on the phone or browser you are using. It is not transmitted to us, and there is no server that could receive it:
- Your list — the allergens and dietary preferences you ask Fíor to watch for.
- Saved products and your scan history.
- A 30-day cache of product records, so a product you have already scanned still opens when you have no signal.
Deleting the app, or clearing your browser's site data, deletes all of it permanently. There is no backup and no copy held anywhere else.
What is sent, and to whom
Fíor does not hold a food database of its own. Product information comes from Open Food Facts, an independent open database.
- When you scan or type a barcode, that barcode number is sent to Open Food Facts so the product can be looked up.
- When you use search or “Better options”, the words you typed, or the product category, are sent for the same reason.
- As with any web request, Open Food Facts will also see your IP address. Their handling of it is governed by their own privacy policy, not ours.
On the website, some of these requests are relayed through this site's own address before going to Open Food Facts. That relay exists for a technical reason — browsers block the direct request — and it forwards the request without storing it. In the iOS app there is no relay; the app talks to Open Food Facts directly.
Your allergen list is never part of any of these requests. Matching happens on your device, after the product record arrives.
The camera
Fíor asks for camera access only when you tap to scan. The barcode is decoded on the device. No photograph or video is recorded, saved, or transmitted, and no image ever leaves the phone.
What Fíor never collects
- No name, email address, phone number or account of any kind.
- No location data.
- No contacts, photos or health records.
- No advertising identifiers, and no data is sold or shared with brokers.
- No analytics of our own, and no crash-reporting service. Nobody here receives a record of what you scanned, or that you opened the app at all.
The barcode reader, and the one thing we do not control
The iOS app reads barcodes using Google's ML Kit, which runs entirely on your phone — that is why the camera image never leaves the device. But ML Kit is Google's code, not ours, and its own privacy disclosure covers a wider set of categories than the usage figures above: a non-permanent device identifier, performance and diagnostic data, general interaction counts, and two broader categories Google reserves for user content and other data types across all apps that use ML Kit. We do not control what Google's code reports under those last two, and are not in a position to promise they are empty. It is not linked to your identity and it is not used to track you across apps.
We would rather it did not happen. It is disclosed here because it is real, and because a privacy policy that quietly omits somebody else's SDK is worth nothing. What we can promise is narrower and about our own code: Fíor itself never sends your allergen list, your saved products or your scan history anywhere — they stay in this app's storage on your phone, and no code we wrote transmits them. Replacing ML Kit with Apple's built-in barcode reader, which sends nothing at all, is the plan for a future update.
Children
Fíor is not directed at children. We ask for no personal information from anyone, and nothing that identifies a person is collected by us at any age.
Your rights
Under the GDPR you have rights of access, correction, erasure and portability over personal data held about you. Because Fíor holds no personal data on any server, there is nothing for us to retrieve or delete on your behalf — the data is in your hands, on your device, and you can erase all of it at any time by clearing the app's data or deleting the app.
Changes
If this policy changes, the date at the top of this page changes with it.
Contact
Questions about privacy can go to allenjoshsamson99@gmail.com.