Effective date: 2026-11-05
Company: BOUDADY & SBN LLC ("Levanta", "we", "us")
Contact: /
This policy explains what personal data the Levanta app and its servers collect, why we collect it, who receives it, how long we keep it, and the choices and rights you have.
| Data | When | Why |
|---|---|---|
| Email address | When you sign in or create an account (optional) | To send one-time sign-in codes. For sign-in lookup we store a one-way hash of the address, not the plain address. An account is created only after the correct code is entered. |
| Account identifiers and language | Account use | To operate your account. |
| Random device identifier | When you use the assistant, ingredient photos or Scam Shield without an account | A random number the app creates on your phone. It is not linked to you, your phone hardware or any advertising identifier. Together with your network address, it limits free use. We store only one-way hashed counters, never the raw identifier or address. Deleting the app creates a new one. |
| Subscription and credit purchases | When you subscribe or add credit | We receive Apple's signed transaction (product, dates and transaction identifiers) to activate your plan and link it to your account. Payment details stay with Apple. We also record how much paid AI use your plan has consumed each month: an amount, not your questions. |
| Assistant questions, and photos of ingredient labels | Only after you allow cloud AI | To answer and to read the ingredients. This is sent to our AI provider (Anthropic) for processing and is not used for advertising. |
| Links, messages and screenshots you choose to check (Scam Shield) | Only when you tap Check | The quick check runs on your phone and sends nothing. The deeper check, only after you allow cloud AI, sends the text or screenshot to our AI provider (Anthropic). For links in the text, the registered website name is looked up in public domain registration records (RDAP), and the link may be checked against Google Web Risk's list of dangerous sites. Not stored by us after the answer is returned. |
| Barcodes you choose to look up on the web | Only when you tap Search the web, after you allow cloud AI | The barcode number is sent to our AI provider (Anthropic), which searches the web for it; only the pages it finds are shown, as sources. Not stored by us after the answer is returned. |
| Barcode numbers | Product scanner | Looked up in public sources: the Open Food Facts family (also for alternatives), openFDA (U.S. medicine labels), RappelConso (official French recalls), UPCitemdb and Open Library. Only the code is sent. |
| Approximate location | Only when you tap "Pharmacies near me" | Sent to our nearby-places service, which rounds it to about 100 m before asking Google Maps (Places) or, as a fallback, OpenStreetMap services for places. It is not stored or logged. |
| Invite and referral events | When you share or use an invite code | To credit invites and to give both people the invite gift (extra daily questions for 30 days). |
| Anonymous daily usage counts | Using the assistant, ingredient photos or Scam Shield deeper checks | Counted by day and plan type to run and budget the service. These counts are not linked to you. |
| Anonymous app activity counts (you can turn this off in Settings) | When the app opens, and about once a minute while it is on screen | To count installs, people using the app now, today, this week and this month, how long since the last open, scans, scam-check levels and errors. The phone sends only counters and yes/no answers ("first open today"), the app language and the region you chose in Settings, plus a random number made fresh for each launch and never stored. No account, device identifier, location or advertising identifier is sent. Barcode numbers of products scanned (found or not found in our sources) are counted to improve the product sources. |
| Notification token (only if you allow notifications) | When you allow notifications about new features in the app and in the iOS prompt | Apple's push token and the app language, so we can send occasional news about features and important updates (Arabic or English). It is not linked to your account. Turning notifications off in Settings deletes it from our server; Apple also tells us when the app is removed, and we then delete it. |
| Recent scans, My Home list, allergy and diet profile, family members' names and profiles, language choice, preferences, cloud AI choice, monthly scan count | On your device | To show recent and saved products, check results against your profile and remember your choices. Kept only on your phone and never sent to us. |
| Camera images | Only when you tap to scan or to photograph an ingredient label | Barcode and QR scanning reads only the code on your phone; the image is not saved or sent. For ingredient photos, see the rows above. |
| Microphone audio | Only while you tap the microphone | Converted to text by Apple's speech recognition, on your device or on Apple's servers under Apple's terms. We receive only the text you then choose to send. |
We do not use data for targeted advertising, we do not track you across other companies' apps or websites, and we do not sell personal data.
We share data only as needed with:
Each provider processes data under its own terms.
We may disclose data when the law requires it, to protect safety in an emergency, or as part of a business transfer, subject to this policy.
You can delete your account in the app at any time: Settings > Account > Delete account. Deletion removes your sign-in details, invite data and sessions. Purchase records are kept where the law requires. A plan bought through Apple keeps renewing until you cancel it in your Apple Account settings.
Depending on where you live, you may have the right to:
We do not sell data or use it for targeted advertising. To make a request, contact. We will verify the request and respond within 45 days. If we deny a request, you can appeal by replying to our decision. If the appeal is denied, you can contact your state Attorney General.
Levanta is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Users from 13 to 17 should use Levanta with a parent's or guardian's permission.
We use encrypted connections, hashed sign-in identifiers, row-level access controls, server-side authorization and signed policy rules. No system is perfectly secure.
We will post updates in the app and change the effective date. We will notify you in the app of material changes.
BOUDADY & SBN LLC, BOUDADY & SBN LLC,.