Information We Collect

1.1 Camera & Image Data

When you use WasteNot's scan feature, our app requests access to your device camera solely to capture images of food items, grocery receipts, and product barcodes. These images are transmitted over an encrypted HTTPS connection to our computer-vision processing servers, analysed to identify food items and extract expiry information, and then permanently deleted from our servers within 72 hours of processing. We do not store raw images beyond this window. Derived metadata (item name, quantity, estimated expiry date, and nutritional category) is retained as part of your Kitchen Inventory for as long as your account is active or until you manually delete an item.

1.2 Expiration & Inventory Logs

To power live freshness tracking, we maintain a structured inventory log associated with your account. This log records: item identifier, scan timestamp, estimated "use-by" date, freshness status (fresh / expiring soon / expired), and any manual edits you make. These records are stored in an encrypted database hosted on ISO 27001-certified infrastructure and are used exclusively to render your personal freshness dashboard. They are never shared with advertisers or third-party data brokers.

1.3 AI Recipe Processing

When you request recipe suggestions, WasteNot sends a pseudonymised ingredient list derived from your inventory to our AI inference layer. This list contains only food item names and urgency scores — it contains no personally identifiable information (PII). AI recipe outputs are ephemeral: they are generated, returned to your device, and not retained in our systems beyond the current session. You may opt out of AI-generated recipe suggestions at any time in Settings → Preferences.

1.4 Donation Network & Location Data

The donation feature ("Share a Meal") connects you with verified local food banks and community refrigerators. To surface nearby donation partners, WasteNot requests your approximate geolocation (city-level precision) only when you initiate a donation action. We do not run continuous background location tracking. Location data is used solely to return a list of nearby partners and is discarded immediately after the query is resolved. No location data is stored on our servers in connection with your account unless you explicitly save a "favourite donation location" in the app.

1.5 Account & Authentication Data

When you create a WasteNot account you provide: email address, chosen display name, and authentication credentials (password hash or OAuth token). We use this information to authenticate your session, send transactional emails (e.g., expiry reminders, receipt confirmations), and administer your subscription. We do not collect date of birth, government ID, payment card numbers (these are handled exclusively by our PCI-DSS Level 1 payment processor, Stripe, Inc.), or Social Security numbers.

1.6 Usage & Diagnostic Data

We collect anonymised in-app analytics (feature engagement, session duration, crash reports) to improve the Service. This data is aggregated and cannot be used to identify you individually. You may opt out of analytics collection in Settings → Privacy.

How We Use Your Information

We use collected information for the following purposes:

• Service delivery — to provide inventory tracking, recipe generation, shopping list management, and donation matching.
• Personalisation — to tailor recipe urgency rankings and shopping suggestions to your household's eating patterns.
• Communications — to send expiry alerts, product updates, and subscription notices. You can manage communication preferences in Settings → Notifications.
• Safety & compliance — to detect fraudulent activity, enforce our Terms & Conditions, and comply with applicable law.
• Service improvement — to analyse aggregated usage patterns and train internal models (never using raw camera images or PII for model training without explicit consent).

Data Sharing & Third Parties

WasteNot does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Service providers — trusted vendors (cloud hosting, payment processing, email delivery, crash analytics) operating under strict data processing agreements.
• Donation partners — when you initiate a donation, your first name and a generalised item list (e.g., "3 produce items, approx. 2 kg") are shared with the selected food bank. No email address, account ID, or location coordinates are transmitted.
• Legal obligation — if required by law, court order, or to protect the rights, property, or safety of WasteNot, our users, or the public.
• Business transfer — in the event of a merger, acquisition, or asset sale, your data will remain subject to the promises in this Policy.

Data Retention & Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time via the Delete Account page. Upon confirmed deletion, we will purge your PII from our active databases within 30 days and from encrypted backups within 90 days, except where retention is required by applicable law (e.g., financial records required for tax compliance, retained for 7 years under applicable statutes).

Your Rights

Depending on your jurisdiction, you may have the right to: access a copy of your personal data; correct inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; and data portability. To exercise any of these rights, contact support@codecrackers.it.com. We will respond within 30 days (GDPR) or 45 days (CCPA).

Cookies & Tracking

Our website uses strictly necessary cookies for session management and security. We use first-party analytics cookies (opt-out available) and do not deploy third-party advertising or tracking pixels. Our mobile app does not use cookies. You may control cookie behaviour through your browser settings.

Security

WasteNot employs AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, regular third-party penetration testing, and SOC 2 Type II-certified infrastructure. Despite these measures, no system is perfectly secure. If you discover a vulnerability, please report it responsibly to support@codecrackers.it.com.

Children's Privacy

WasteNot is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced via in-app notification and email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Policy. We maintain an archive of previous versions available on request.

Contact & Data Controller

Code Crackers (codecrackers.it.com)
Attn: Data Privacy Officer
Bahria Town, Lahore, Punjab, Pakistan
support@codecrackers.it.com