Privacy policy

Last updated: 30 October 2026

Your profile and history are stored on your phone. No account is required. Online features send the information needed, as detailed below; information you submit voluntarily may also leave the phone.

What stays on your phone

• The profile you create at the start: your baby's name or nickname, age, your concerns and any health notes you write.
• Your cabinet, your scan history and your conversations with Lacty AI.
• The product catalogue the app downloads so it works offline.
• Original photos of a box you take so Lacty can read its name are read on your phone and stay there. If you choose to contribute a photo, only the cutout generated on your phone is sent, as explained below.

You can delete all of it by uninstalling the app.

What leaves your phone, and why

• Product lookups. When you scan a code that isn't in the downloaded catalogue, the app sends that code and your country to our server (api.lacty.app) to look it up. It may also query Open Food Facts and Open Beauty Facts with the barcode.
• Codes you help us recognise. If you scan a code we didn't know and confirm which box it is (from its photo or by searching), the app sends that code, your country, the box (or the active ingredients and the name printed on it) and a random install id. The code-report record keeps only one-way hashes of that id and your network, not the original IP address. Technical service logs are described below. We only use the code to recognise it for other people once several phones agree.
• Lacty AI. When you ask a question, your conversation and the context the app needs to answer (such as your baby's age) are sent to our server, which passes them to Anthropic (the Claude model) to write the answer. A random install id goes with it, used only to limit abuse; it isn't linked to your identity. We don't store your conversations on our servers. Anthropic doesn't use this data to train its models.
• Health notes. If your iPhone can't read your note with its on-device model, the text is sent to our server and to Anthropic only to pick out allergies and conditions. Our extraction service does not save the note text. Anthropic may retain inputs and outputs under its terms; we do not claim zero retention.
• Purchases. Apple processes subscriptions and purchases. We use RevenueCat, with an anonymous id, to know whether you have full Lacty. We never see your payment details.

Service providers

Cloudflare (server and catalogue delivery), Hetzner (origin server), Anthropic (Lacty AI), Apple and RevenueCat (purchases). Our server's technical logs (such as IP address and requested path) are used for security and to keep the service running, and are deleted periodically.

Children

Lacty is meant for adult parents. The details about your baby that you enter stay on your phone, except for the context you send in a question to Lacty AI.

Your rights

We do not have accounts. For photo contributions, we temporarily keep the receipt, status and some pseudonymous identifiers described above. For any question, or to exercise your rights of access, correction or deletion, write to hi@eiraslabs.com. You can also complain to your data protection authority.

Changes

If we change this policy we'll update the date above and, for important changes, tell you in the app.

Photos you choose to share

Sharing a photo is voluntary. Only the cutout generated on your phone with Vision is sent; the original Read the box photo stays on your phone and is not uploaded for this feature. Review the preview before sending, and do not share it if it shows people, faces, hands, labels with personal details, or anything else you do not want made public. Automatic cutout processing may not remove every such detail.

The cutout is stored privately on our cloud services and Anthropic processes it for automated review before any publication. A pending photo is not public. If it is rejected, we immediately delete our private copy of the image. Pending submissions expire after 30 days. After 30 days, we delete the image, product and catalogue details, and pseudonymous identifiers for pending, rejected, or withdrawn submissions. We retain only a minimal technical receipt — the contribution ID, “expired” status, and creation timestamp — to prevent the same submission being replayed; it is no longer linked to the image or contributor. We do not claim that withdrawal deletes data a provider may retain under its own terms.

To limit abuse, we process random installation and network identifiers as keyed hashes. We do not store those original identifiers for this feature. These are pseudonymous identifiers; this does not mean activity is anonymous in every respect. To check a submission or withdraw it, use the app; if you lose the receipt, contact hi@eiraslabs.com.