SnackMatters Privacy Policy

1. WHO WE ARE

1.1 This Privacy Policy is published by Lemona Limited, a company registered in England and Wales ("Lemona", "we", "us", "our"). Lemona Limited is the data controller in respect of personal data collected through the App.

1.2 We are committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1.3 Questions about this Privacy Policy or our data practices should be directed to: hello@lemona.uk

2. WHAT DATA WE COLLECT

Data you provide directly:

• Account information: email address and password (if you create an account);
• Child profile information: your child's first name and age or date of birth;
• Food data: barcodes scanned, ingredient lists entered, or photographs of food taken within the App;
• In-app communications: any feedback or support requests you send us.

Data collected automatically:

• Device information: device type, operating system, unique device identifiers;
• Usage data: features used, pages viewed, time spent in the App, crash reports;
• Approximate location: country or region derived from IP address, used for regional content relevance only. We do not collect precise GPS location.

3. CHILDREN'S DATA — SPECIAL CONSIDERATIONS

3.1 The App is designed for use by adults (parents and guardians) and is not directed at children. We do not knowingly collect personal data directly from children.

3.2 You may enter your child's first name and age within the App to personalise the AI-generated output. This information is stored as part of your account and used solely for that purpose. We do not use your child's name or age for any marketing, advertising, or profiling purpose.

3.3 We process your child's first name and age on the basis of your consent (Art. 6(1)(a) UK GDPR). You may remove this information at any time through the App's settings.

3.4 Given the sensitivity of data relating to children, we take particular care to ensure that this data is stored securely and retained no longer than necessary.

4. HOW WE USE YOUR DATA

4.1 We use the data we collect for the following purposes:

• to provide and operate the App and its features;
• to generate AI-powered nutritional assessments and recipe suggestions based on food data and your child's age;
• to improve the accuracy, performance, and functionality of the App;
• to respond to support and feedback requests;
• to comply with our legal obligations;
• to detect, prevent, and address fraud, security incidents, and technical issues;
• to send you important service-related notices. We do not send marketing emails without your separate, explicit consent.

5. SHARING OF DATA WITH THIRD PARTIES

5.1 We share data with the following categories of third party only where necessary:

• AI service providers (such as OpenAI): food data and your child's age are transmitted to generate the App's assessments. These providers process data on our behalf under appropriate data processing agreements. They do not use your data to train their public models without your consent;
• Barcode and food database providers: barcode data is transmitted to retrieve product information;
• Cloud infrastructure providers: for secure data hosting and storage;
• Analytics providers: anonymised or aggregated usage data only;
• Legal and regulatory authorities: where we are required to do so by law.

5.2 We do not sell your personal data to any third party. We do not share your data with advertisers.

5.3 Where data is transferred outside the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or an adequacy decision) in accordance with UK GDPR requirements.

6. LEGAL BASIS FOR PROCESSING

6.1 We process your personal data on the following legal bases:

• Contract (Art. 6(1)(b) UK GDPR): processing necessary to provide the App's services to you;
• Consent (Art. 6(1)(a) UK GDPR): for child profile data and any optional features;
• Legitimate interests (Art. 6(1)(f) UK GDPR): for fraud prevention, security, App improvement, and analytics, where these interests are not overridden by your rights;
• Legal obligation (Art. 6(1)(c) UK GDPR): where we are required to process data to comply with applicable law.

7. DATA RETENTION

7.1 We retain your account data and child profile information for as long as your account is active. You may delete your account at any time via the App settings, whereupon we will delete or anonymise your personal data within 30 days, except where retention is required by law.

7.2 Scan and usage logs are retained for a maximum of 12 months in identifiable form, after which they are anonymised or deleted.

8. YOUR RIGHTS

8.1 Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you;
• Right to rectification: to request correction of inaccurate or incomplete data;
• Right to erasure ("right to be forgotten"): to request deletion of your personal data in certain circumstances;
• Right to restrict processing: to request that we restrict our use of your data in certain circumstances;
• Right to data portability: to receive your data in a structured, machine-readable format;
• Right to object: to object to processing based on legitimate interests;
• Rights in relation to automated decision-making: we do not make solely automated decisions that have legal or similarly significant effects on you.

8.2 To exercise any of these rights, please contact us at hello@lemona.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. SECURITY

9.1 We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including encryption in transit and at rest.

9.2 No method of transmission over the internet or electronic storage is completely secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security.

10. COOKIES & TRACKING

10.1 If you access the App via a web browser, we may use cookies and similar technologies. Mobile app versions may use device identifiers and analytics SDKs. You may be able to adjust these preferences via your device or App settings. Our Cookie Policy (where applicable) sets out further detail.

11. CHANGES TO THIS PRIVACY POLICY

11.1 We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email. The date at the top of this document indicates when it was last revised. Continued use of the App following notification of changes constitutes acceptance of the revised Policy.

12. CONTACT US

For any privacy-related queries or to exercise your data rights, please contact:

Lemona Limited
Email: hello@lemona.uk

For general Terms of Service enquiries: hello@lemona.uk