Snacco Privacy Policy

Last updated: 12 July 2026

The short version: Snacco has no accounts, no sign-in, no ads, and no third-party analytics. We don't know who you are, and we never sell data. Label photos are read on your device and never uploaded. Your scan history lives only on your phone.

Who we are

Snacco is developed by Josh Waller (Kovus), based in Australia. Contact:josh@kovus.dev. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What leaves your device, and when

Snacco is designed so that as little as possible leaves your phone:

Label scans (free): the photo of an ingredients label is processed entirely on your device using on-device text recognition. The photo is never uploaded. Only the recognised ingredient text is sent to our server to be checked against our toxin database, and it is not stored or linked to you.
Barcode scans: the barcode number is looked up againstOpen Pet Food Facts, an open public database. The returned product information is then checked against our toxin database the same way as label text.
"Can my dog or cat eat this?" photo checks: this optional feature sends the single photo you take to our server, where Anthropic's Claude API is used only to name the food in the photo. Before upload, the photo is downscaled and its metadata (including any location data) is stripped. Snacco does not store the photo.
Recall alerts (optional): if you enable recall alerts, an anonymous device push token is registered with our server so we can send a silent "recall list updated" signal. The token is not linked to your identity or to anything you have scanned — matching recalls against your scan history happens entirely on your device.
Purchases: the optional Snacco+ subscription is processed by Apple and managed through RevenueCat using an anonymous identifier. We never see your name, email, or payment details.

What stays on your device

Your scan history, favourites, and pet profile(s).
Recall matching against your history.
App preferences (onboarding state, notification choices).

Deleting the app deletes this data.

What we never collect

No name, email address, phone number, or account of any kind.
No location data.
No advertising identifiers, no ad networks, no third-party analytics SDKs.
No sale or sharing of personal information with data brokers — ever.

Service providers

We use a small number of infrastructure providers to run Snacco:

Supabase — hosts our backend and toxin/recall database.
Anthropic (Claude API) — processes photos from the optional "Can my dog or cat eat this?" feature, solely to identify the food.
Open Pet Food Facts — public product database queried for barcode lookups.
Expo — delivers push notifications for recall alerts.
RevenueCat & Apple — process and manage subscriptions.

Each provider receives only the minimum described above.

Data retention

Ingredient text and photos sent for checking are processed transiently and not stored by Snacco.
Anonymous push tokens are kept only while recall alerts are enabled and are removed when they become inactive.

Children

Snacco is not directed at children and does not knowingly collect personal information from anyone, including children.

Not veterinary advice

Snacco is an informational tool. It is not veterinary advice and not a medical device. If your pet has eaten something concerning, contact your veterinarian or the Animal Poisons Helpline on1300 869 738.

Changes and contact

If this policy changes, the updated version will be published at this address with a new "last updated" date. Questions, or want something deleted? Emailjosh@kovus.dev. You may also lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au).