Privacy Policy
Effective date: 29 June 2026
Lunchbox Qatar (“we”, “us”, the “app”) helps families in Qatar check the nutritional quality of packaged food products and contribute product information to a shared catalogue. This policy explains what data the app collects, why, and your choices. We have deliberately kept the app’s data collection to a minimum.
The app has no user accounts and no login. It contains no advertising and no third-party analytics or tracking.
1. What we collect
We only collect data when you actively use a feature:
- Product photos. When you scan and submit a product, you take or choose photos of the product’s packaging (front, nutrition panel, ingredients, back). These are photos of product packaging, not of people.
- Your name (optional). You may enter a name to be credited as the contributor of a submission. You can leave this blank.
- An app-generated identifier. The first time you open the app it creates a random ID stored on your device. We use it to show you the status of your own submissions and to limit abuse (rate limiting). It is not your phone’s hardware ID, advertising ID, phone number, or email, and it cannot identify you personally.
- Notification token (optional). If you allow notifications, we store a push notification token so we can tell you when your submission is approved or rejected, and your language preference (English or Arabic) so that message is in your language.
We do not collect: your precise or approximate location, contacts, your email, phone number, financial or health information, your device’s hardware identifiers, or any advertising identifier.
2. How we use your data
- To extract product information from your photos using automated text recognition (AI).
- To add submitted products to the shared catalogue after review by our team.
- To show you the review status of your submissions.
- To notify you when your submission is approved or rejected (if you enabled notifications).
- To prevent spam and abuse of the service.
3. Automated processing (AI)
To read the text on the product labels you photograph, your submitted photos are sent to Anthropic (the provider of the Claude AI service) for automated extraction of product details (name, ingredients, nutrition values). Anthropic processes the images on our behalf to return the extracted text and does not use them to train its models.
4. Who we share data with
We do not sell your data and we do not share it for advertising. We use the following service providers, who process data only on our behalf and only to operate the app:
- Supabase — hosting of our database, file storage, and server functions (stores the photos, names, and identifiers described above).
- Anthropic — automated reading of label photos (see section 3).
- Expo / Google Firebase Cloud Messaging — delivery of push notifications (uses the notification token).
Approved product information (name, brand, ingredients, nutrition, label photos, and quality score) becomes part of our public product catalogue, visible to other users of the app and our website. The contributor name you optionally provide may be shown as the contributor. Internal notes, your device identifier, and your notification token are never shown publicly.
5. Data retention
We keep submitted product data and photos for as long as the product remains in the catalogue. If a submission is rejected or you ask us to remove it, we delete the associated record and photos. Notification tokens are kept until they become invalid or you ask us to remove them.
6. Security
Data is encrypted in transit (HTTPS). Server-side data is protected behind access controls; the app itself holds no keys that allow direct access to the database.
7. Children’s privacy
The app is intended for adults (parents and caregivers) and is not directed to children. We do not knowingly collect personal information from children. The data the app handles concerns food products, not children.
8. Your rights and how to delete your data
Because the app has no login, the simplest way to exercise your rights is to contact us. You may ask us to (a) tell you what data we hold that is linked to your submissions or device, and (b) delete your submissions, the associated photos, your contributor name, and your notification token.
Email privacy@lunchboxqatar.com from a device you used to submit, or tell us the product barcode(s) you submitted, and we will action your request.
9. Changes to this policy
We may update this policy. We will post the new version here with a new effective date.
10. Contact
Lunchbox Qatar — privacy@lunchboxqatar.com