Privacy policy

Last updated 2026-10-04

Effective date: October 4, 2026

This policy explains what the Loaf Scout app and the Loaf Scout website collect, why, who else handles it, and the choices you have. Loaf Scout is made by Viral Tandel, who publishes apps as Viral Labs ("we", "us", "our"). If you have a question, email viral.b.tandel@gmail.com.

The short version

• No account. The app never asks for your name, email address or phone number.

• Your bakes stay on your phone. Your bake log, photos, reads, recipes, notes and starter log are stored on your device, not on our servers.

• Photos are read, not stored. When you run a read, your photo goes through our server to Google Gemini to be read. We never store it; it is held in memory only for the length of the request.

• An anonymous random id lets us count requests and keep Pro working. It is not linked to you.

• Purchases go through Apple, and RevenueCat confirms them. We never see your payment details.

• No ads, no tracking, no selling of data.

1. What the app collects and why

Photos and read details

When you run a read, the app sends one photo (the cut face of a loaf, or a starter jar from the side), the kind of read (crumb or starter) and the optional details you entered to our server over an encrypted (HTTPS) connection. For a crumb read those details are when the loaf was cut, the flour and the hydration; for a starter read they are the hours since the last feed, the feeding ratio, how warm the room is and the smell. Our server passes them to the Google Gemini API, gets the read, and sends it back to your phone. The app asks for your consent, and names Google Gemini, before the first photo leaves your phone.

Our server handles the photo in memory only. We do not save it, log it, or keep a copy after the read comes back, and we do not use your photos to train any AI model. Try to keep faces, people and personal papers out of the frame; if they appear, they are handled the same way: read, returned, and not stored by us.

Google Gemini

Google provides the AI read as our service provider. We send Google the photo and the read details above, and nothing that identifies you: no name, no email, no Apple ID, no device identifier. Google's handling of data sent to the Gemini API is described in the Gemini API Additional Terms of Service and the Google Privacy Policy.

Your bakes, photos and starter log

Everything you save in Loaf Scout (your bakes, photos, reads, recipes, notes, starter details and feeding log) is stored on your phone in the app's own storage. There is no account, no cloud sync and no copy on our servers. Like any app's data, it may be included in your own iPhone backups (iCloud or a computer), which Apple handles under its terms.

A plan from the bake planner leaves your phone only if you choose to share it, and only with the people or apps you pick.

Anonymous device id

On first launch the app creates a random id and stores it on your phone. It is sent with each read so we can count reads, apply the free limit, fair-use and rate limits, and stop automated abuse. The only records our server keeps are a daily request counter and a Pro flag, both keyed to this id. It is not your Apple ID, your advertising identifier or your device's serial number, and it is not linked to your name or contact details.

Purchases

Loaf Scout Pro is sold through Apple In-App Purchase. Apple processes the payment; we never see your card or bank details. We use RevenueCat, Inc. to manage subscriptions. RevenueCat receives your Apple purchase receipt and the anonymous app user id so it can confirm Pro, keep it working after you reinstall, and support Restore purchases. From RevenueCat we see purchase status and history (which product, dates, country and currency), not your name or email. See the RevenueCat privacy policy.

Technical data

Our server runs on Cloudflare. As with any internet request, your IP address and basic request details pass through Cloudflare so the read can be delivered and the service protected from attacks. We do not store IP addresses with your reads or use them to identify you.

If you have turned on Share With App Developers in your iPhone settings, Apple may share anonymous crash reports with us. You can change this in Settings, Privacy & Security, Analytics & Improvements.

Camera, photo library and notifications

Camera access is used only to take the photo you read. Photo library access is used only for the photo you pick, one at a time through the system picker. The optional feeding reminder is a local notification scheduled on your phone when a feed is due; nothing is sent to us, and no other notifications are sent. You can turn any of these off at any time in iPhone Settings. The bake log, the starter page, the tools and the guide work without them.

2. What we do not do

• We do not show ads or include advertising code.

• We do not include third-party analytics or tracking code in the app.

• We do not track you across other companies' apps or websites.

• We do not sell your data or share it for advertising.

• We do not store your photos on our servers.

If any of this changes, we will update this policy and the App Store privacy label before the change ships.

3. Who handles data for us

• Google (Gemini API): reads the photo and read details to produce your result.

• RevenueCat: manages Loaf Scout Pro purchases and restores.

• Apple: distributes the app, processes payments, and handles your device backups.

• Cloudflare: hosts our server and this website.

Each handles data under its own terms and privacy policy. We may also disclose information if the law requires it, but because we hold almost nothing about you, there is very little we could disclose.

4. How long we keep data

• Photos: not stored by us. They are discarded once your read is returned.

• Anonymous device id, request counter and Pro flag: kept only as long as needed for the free limit, rate limiting and keeping Pro working.

• Purchase records: kept by Apple and RevenueCat for as long as needed to provide your subscription and to meet tax and accounting rules.

• Data on your phone: kept until you delete it or delete the app.

• Emails you send us: kept only as long as needed to help you.

5. Deleting your data

In the app, open Settings and tap Delete my data. This erases your bakes, photos, reads, notes and starter log from your phone and replaces the anonymous device id with a new one. Deleting the app does the same. There are no photos or bake logs on our servers to delete.

To have your purchase record removed from RevenueCat, email us and we will delete it. You can still restore a purchase later through Apple.

You can withdraw your consent to photo reading at any time by not running reads. The bake log, the starter page, the tools and the guide keep working without sending anything.

6. Your rights

Depending on where you live (for example the EU, the UK, or California and other US states), you may have the right to ask what personal data we hold about you, to correct or delete it, to object to or restrict how it is used, to receive a copy, and to complain to your local data protection authority. Because we hold almost no data that can identify you, most requests can be answered quickly. Email us and we will reply. We do not sell or share personal information as those terms are defined in California law.

If you are in the EU or UK, we rely on your consent to send photos for reading, on performing our contract with you to provide Loaf Scout Pro, and on our legitimate interest in keeping the service secure and free from abuse (the anonymous id and rate limits). Our service providers may process data in the United States and other countries, using legal safeguards such as the EU Standard Contractual Clauses where required.

7. Children

Loaf Scout is not directed to children under 13 (or the minimum age in your country). The app does not ask for personal information. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, for example by email, contact us and we will delete it.

8. Security

Reads travel over encrypted connections, and the data on your phone is protected by iOS. No system is perfectly secure, so we keep as little data as we can.

9. This website

The Loaf Scout website is a static website served by Cloudflare, which processes your IP address to deliver the pages. The launch-email form stores the email address you enter, the page you were on and your country, in a Cloudflare KV store, so we can send one message when the app is released; email us to be removed. If analytics are turned on (Google Analytics 4 and Microsoft Clarity), they load only after you interact with a page and collect anonymous usage data under those companies' policies. The free tools run entirely in your browser and send nothing.

10. Changes to this policy

If this policy changes, the effective date at the top changes with it. If a change is significant, we will also mention it in the app.

11. Contact

Viral Tandel (Viral Labs). Email: viral.b.tandel@gmail.com