Consumer Health Data Privacy Policy

Opie keeps a record of what you scanned, what you avoid, and how your body reacted. Laws in some states call that consumer health data and hold it to a higher standard than ordinary account information. This page is only about that data: what it is, why Opie has it, who ever sees it, and how you take it back.

Last updated 2 September 2026.

This sits alongside the main Privacy page, which covers everything Opie stores. Where the two overlap they say the same thing, because they were written from the same data model. This one exists because health data is required to have a policy of its own.

The short version

Opie collects health data only to do the one job you opened it for: reading a label against what you react to, and remembering your reactions so it gets more useful to you over time.
It is never sold, never rented, and never handed to an advertiser or data broker.
The only outside services that touch it are the ones that make the app run, listed below by name and role, and none of them may use it for anything of their own.
You can see it, get a copy of it, delete it, and withdraw your consent, from inside the app or by one email. Deleting is real and irreversible.

1. What consumer health data Opie collects

Only what the feature you are using needs:

Your alpha-gal settings. The ingredients you have told Opie to flag, and how strongly you react to each, so a scan can be read for you rather than for everybody.
Your reaction log. When you record that something disagreed with you, and how badly, so Opie can show you patterns in what you ate beforehand.
Your scans. The label text and the photo taken to read it, the product if it was identified, and what Opie flagged.
Your own avoid list. Any extra ingredients you typed in beyond alpha-gal, and the packs you switched on.
Your questions to Opie. What you asked the research feature, since a question about an ingredient or a symptom is itself health information.
Your verdicts on products. When you mark an item as one you can or cannot have.
The county you pick, if you choose to appear on the map. Chosen from a list of counties, not read from your device.

Opie does not read your device location at all. It does not ask for location permission, does not use GPS, does not collect background location, does not track you across other apps or sites, and runs no advertising or analytics trackers of any kind.

2. Where it comes from

All of it comes from you, in the moment you use the feature: what you type, what you photograph, what you log, what you tap. Opie does not buy health data about you, does not receive it from data brokers, and does not infer it from third-party sources. The one indirect source is your device camera, and only at the moment you take a photo of a label.

3. Why Opie collects it, and how it is used

To read a label for you: your settings and avoid list are matched against the ingredients Opie reads from a scan.
To learn your pattern: your reaction log is compared with what your scans contained, so Opie can point at a possible trigger. Opie never decides this for you, and it never tells you a product is safe.
To answer what you ask: a question, and a label if one is attached, are researched and answered.
To run your account and membership, including showing whether a scan budget applies.
To keep you safe in an emergency: a message to the research feature that reads as a medical emergency or a crisis is answered with fixed guidance to call emergency services, before anything else happens with it.

It is not used to advertise to you, is not used to build a profile for anyone else, and is not used to train any AI model. See the note on AI below.

4. What is shared, and what is not

Opie does not sell consumer health data and does not share it for anyone else's purposes. It is processed only by the services that make the app work, each acting on Opie's instructions and nothing more. Two of your own actions can share data, and both are things you choose:

Contributing a label to the shared database. If you choose to share a scanned label so other members benefit, that label photo becomes readable by other members. It is the only data that leaves your private account this way, it happens only on an explicit share, and your name is not attached to it.
Appearing on the community map. If you pick a county, it is added to the count other members see for that county. Nobody can read your individual pick, only the totals per county. Off by default, changeable at any time, and removed when you delete your account.

5. Who processes it

These are the categories of third party that handle consumer health data on Opie's behalf. None of them receives it for their own purposes, and none may use it to train a model or build a profile.

Our database and authentication provider stores the data described above and runs sign-in.
Our application host serves the app.
Our automation service carries a scan or a question through the steps that answer it, receiving a short-lived link to one photo, or one question, at a time.
AI model providersturn a label photo into text and research and draft answers. The contents of a scanned label and the words of a question are sent to them to do this. They act only on Opie's instructions and may not use what they receive to train their models. An AI model never decides whether a food is a problem for you: what gets flagged comes from a curated ingredient list and the settings you chose.
Our payment processor handles membership. It receives billing information, not your health data.
Our email provider sends account and membership email. These never name a health condition in the subject or preview.
A bot-protection service checks that sign-ups are people. It does not receive health data.

Opie may also disclose data if the law requires it, or to protect someone from harm, and will tell you unless legally prevented.

6. Your rights, and how to use them

Wherever you live, you can do all of the following. Opie does not charge for any of it and does not treat you differently for asking.

See and correct it. Your flags and name are in Profile, your reaction history sits with your scans, your lists are in Shopping lists. Most of it is editable in the app directly.
Get a copy. Email support@scanag.app from the address on your account and Opie will send you your data.
Delete it. Open Profile and use Delete account. It removes your scans and their photos, your reaction log, your flags, your lists, your questions, and your place on the map, for good, along with the account itself. If you have a paid membership it is cancelled as part of deleting. Three things are kept, and they are said here rather than left for you to find out: a label you chose to contribute to the shared database stays with your name removed, anything you posted in the community stays with your name removed, and any report you filed about a post stays the same way. The first two are things other members read, and pulling them would take something away from people who had no part in the decision. Separately, if you ever paid, your payment processor keeps a record of that payment for accounting and tax purposes; that is billing data rather than health data, and the full detail is on the Privacy page.
Withdraw consent. You can turn off location, stop contributing labels, and stop logging reactions at any time, which ends that collection going forward. To withdraw consent for data already collected, delete your account or email support, which removes it.

Opie will respond to a request within the time the applicable law requires. If Opie ever denies a request, it will tell you why and how to appeal, and a Washington resident may also complain to the Washington State Attorney General.

A note on AI, because it is the part people ask about

Opie uses AI models to read labels and to research questions, so the contents of your scans and questions are sent to those providers as part of answering you. Opie does not use your scans, reactions, or questions to train any model, its own or anyone else's, and an AI is never what decides whether something is a problem for you. That call comes from a curated list and your own settings, and the last word is always yours and your doctor's.

Changes

If this page changes in a way that affects what happens to your health data, Opie will tell members by email rather than quietly changing the date at the top.

Contact

support@scanag.app. A person reads it. You can also reach the person responsible for these decisions at the same address.