EatSafe privacy policy
EatSafe uses your food profile to show compatibility guidance while you shop. Personal account and profile data stays separate from shared product evidence.
Effective 31 August 2026 · Technophobia Communications Limited
Our Chrome extension's single purpose
Compare food information on supported UK retailer websites with the user’s saved EatSafe food profile and display compatibility guidance.
Account, membership and household information
A normal account stores your email address, a salted one-way password hash, sign-in security counters and one-way hashes of one-time recovery codes. We never store the readable password or recovery code. Membership records contain trial and billing-period dates, plan and status, cancellation state, and the payment provider’s customer and subscription identifiers. Payment card details will be handled by the selected payment provider and not stored by EatSafe.
Your household can contain named permanent-member profiles. Each profile contains the allergies, medical or dietary needs, nutrition warnings, religious requirements and preferences you choose. Display names may be nicknames. EatSafe also stores the current “Shopping for” selection. We do not ask for a retailer password.
Private guest profiles
One visit invitation may name several guests, but every person keeps an independent food profile and completion status. The shared visit page shows names and progress, not another person’s saved answers. An adult can receive a separate private link instead. Invitation secrets are carried in the link fragment and stored by EatSafe only as one-way hashes. Invitations expire and can be revoked. Guests choose whether a host sees relevant reasons or only “Not suitable”; private is the default. Guests do not have to create a normal account or join marketing.
Extension connection
The extension retrieves saved profiles and the current selection through a random revocable credential stored only in that Chrome installation. A host’s extension receives only a guest’s name and active status; private guest restrictions are evaluated by EatSafe.
Product information
Supported retailer pages may provide product names, identifiers, URLs, ingredients, allergen statements, brand, manufacturer, size, barcode and nutrition. The mobile scanner sends a scanned barcode to EatSafe. EatSafe checks local evidence first and may send only an unknown barcode to Open Food Facts. No account, household, profile, allergy or compatibility information is sent to Open Food Facts.
Product evidence is global and may be retained for reuse with source, retrieval date and provenance. Open Food Facts remains separately identified. The product database has no user/profile field. EatSafe does not store your green, red or amber compatibility result.
No personal browsing history
EatSafe does not intentionally create a record linking an account or profile to products viewed. Product requests require a credential for security, but evidence records contain no account, household or profile identifier. Infrastructure may temporarily log the generic endpoint, time and network address for security and reliability; operational logs are rotated weekly and kept no longer than 35 days.
How we use and share data
We use personal data to operate and secure EatSafe. We do not sell it, use it for advertising or unrelated profiling, or share it except with infrastructure providers needed to operate EatSafe or where legally required.
Email choices
Service emails needed to operate your account, such as password resets and private invitations, are transactional. They do not depend on marketing consent. News and product updates are optional: the box is unticked by default, consent is recorded with its wording, time and source, and you can change your choice in Account or use the unsubscribe link in any update. Changing membership does not change newsletter consent, and unsubscribing does not cancel membership.
Security, trial and retention
Connections use HTTPS. Production sessions use secure HTTP-only cookies. Repeated failed sign-ins are temporarily locked. Account access is explicitly linked to its household. Trial and paid-period status is checked by the server. When access expires, checking pauses but profiles are retained so membership can resume without rebuilding them.
Extension credentials and invitation secrets are random and stored server-side only as one-way hashes. Personal account, membership, email-preference and household data remains until deletion, subject to any limited records the payment provider or EatSafe must retain to meet legal, accounting, fraud-prevention or dispute obligations. Newsletter suppression may retain the minimum email preference needed to honour an opt-out. Non-personal product evidence may remain while useful and lawful, with its provenance.
Your choices
You can sign out without deleting data. When transactional email is configured, password recovery uses a private, single-use link that expires after one hour. Existing recovery codes remain available as a fallback. Disconnecting the extension revokes its server credential and clears the local copy.
A household may grant one second adult separate, revocable management access using their own email and password. Under-18 profiles cannot receive this access. Private manager invitations expire after seven days.
Guest invitations store the guest email address and expected visit dates so the guest can respond in advance and the temporary profile can expire after the visit. Guest reasons remain private unless the guest chooses to share them.
Deleting your account removes its email, password and recovery hashes, household entitlement, email preferences and consent audit, household profiles, restrictions, nutrition rules, selections, guests, invitations, pairing records, consents and credentials from EatSafe. It does not remove legitimate non-user-specific product evidence. A payment provider may retain transaction records under its own legal obligations.
Contact and your rights
EatSafe is operated by Technophobia Communications Limited (company number 03295015), Stone Farm Nursery, Stone Street, Stelling Minnis, Canterbury, England, CT4 6DF. Write to us to request access, correction or deletion, or to raise a privacy concern. You may also complain to the UK Information Commissioner’s Office.