HANI

📋 Overview

HANI ("we", "our", "the app") is a food scanner application that helps users in Morocco evaluate the nutritional quality and ingredient safety of food products. This Privacy Policy explains what data we collect, why we collect it, and how it is protected.

We are committed to the protection of your personal data in accordance with Morocco's Law 09-08 on the Protection of Personal Data and the requirements of the Commission Nationale de contrôle de la Protection des Données à caractère Personnel (CNDP).

📷 Camera Permission

HANI requests access to your device's camera solely for the purpose of scanning product barcodes. The camera feed is processed entirely on-device and is never recorded, stored, or transmitted to our servers.

We do not capture photographs, videos, or any visual data beyond what is required to read a barcode at the moment of scanning. You may revoke camera permission at any time in your device settings.

🗂️ Data We Collect

We collect only the minimum data necessary to provide the service:

• Account information (if you register): email address and display name, stored securely in Supabase.
• Scan history: barcodes of products you scan, timestamps, and store name (if detected). Used to show you your personal history and to improve product data quality.
• Dietary preferences & allergens: stored locally on your device (AsyncStorage) and never shared with third parties.
• Device identifier: an anonymous, non-reversible device ID used for rate limiting and anonymous contribution tracking. It cannot be linked back to your identity.
• Product contributions: if you submit a product photo, the image is sent to our backend for processing. You can request deletion at any time.

🚫 Data We Do NOT Collect

• We do not collect your location data.
• We do not collect contacts, call logs, or messages.
• We do not track you across other apps or websites.
• We do not sell, rent, or trade your personal data to any third party.
• We do not use your data for advertising profiling.

🔐 Data Storage & Security

Your data is stored on Supabase (PostgreSQL database hosted on AWS infrastructure in the EU region). Supabase is SOC 2 Type II certified and enforces encryption in transit (TLS 1.2+) and encryption at rest.

Passwords are hashed using bcrypt and are never stored in plain text. We never have access to your password.

🤝 Third-Party Services

HANI uses the following third-party services, each governed by its own privacy policy:

• Supabase — database and authentication (supabase.com/privacy)
• Google Sign-In — optional OAuth login (policies.google.com/privacy)
• Facebook Login — optional OAuth login (facebook.com/policy.php)
• Google Gemini API — AI-assisted product enrichment, processes product images only (ai.google.dev/terms)
• Open Food Facts — open product database, no personal data sent (openfoodfacts.org/privacy)
• Google Play Billing — in-app subscription for HANI Premium (Google Payments Privacy)

👤 Your Rights (CNDP / Law 09-08)

You have the right to:

• Access the personal data we hold about you.
• Rectify any inaccurate information.
• Delete your account and all associated data at any time by contacting us.
• Object to the processing of your data.
• Data portability: request an export of your scan history in CSV format.

To exercise any of these rights, contact us at privacy@gethani.app.

🧒 Children's Privacy

HANI is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email and update the effective date above. Continued use of the app after changes constitutes acceptance of the updated policy.