Privacy Policy

Last updated: May 7, 2026

Who we are

ProteinLedger (“we”, “us”, “our”) is a web application that helps users track protein-per-dollar across food items. You can reach us at proteinledger@gmail.com.

What data we collect

Account data

When you create an account, we collect your email address, display name (pulled from your Google profile if you sign up via Google OAuth), and account creation timestamp. We do not store passwords — authentication is handled by Supabase, our auth and database provider.

Scan data

When you scan a food item, we process the image or text you submit to extract nutrition and price information. Images are sent to Anthropic's Claude API for analysis and are not stored by us beyond the duration of the request. Extracted data (food name, weight, protein, price, currency) is temporarily logged in our operational systems for debugging and abuse prevention.

Saved ledger data

When you choose to save a scan to your ledger, we store the food name, category, weight, protein content, price, currency, and store name in our database, linked to your account. This data persists until you delete it or close your account.

Usage and technical data

We automatically collect IP addresses, browser type, user agent, pages visited, and approximate location (derived from IP address, city-level only) on every visit, including from users who are not signed in. This data is used for security, abuse prevention, and debugging.

Analytics data

We use PostHog to collect behavioral analytics including pageviews, feature interactions, and performance metrics. When you are signed in, events are linked to your user ID. We do not include food names, prices, or scan results in analytics events.

Operational logs

Every scan request is logged to our logging infrastructure, including user ID (if signed in), scan type, extracted result, and technical metadata. These logs are automatically and permanently deleted after 30 days.

How we use your data

We use the data we collect to:

We do not sell your data. We do not use your data for advertising.

Third parties we share data with

To operate ProteinLedger, your data passes through the following third-party services:

ServicePurposeData shared
SupabaseAuthentication and databaseAccount data, ledger items
AnthropicAI-powered label extractionFood images and text inputs during scans
VercelHosting and infrastructureAll request data including IP addresses
PostHogProduct analyticsUsage events, user ID when signed in
AxiomOperational loggingScan results, user ID, IP address

Each of these providers has their own privacy policy governing how they handle data.

Data retention

Your rights

You can:

When you delete your account, your data is removed from our database immediately. Operational logs containing your activity may persist for up to 30 days before automatic deletion.

For any other data requests, contact us at proteinledger@gmail.com.

Cookies and local storage

We use cookies to maintain your session and preserve scan results across authentication redirects. We use local storage to remember your currency preference. We do not use cookies for advertising or cross-site tracking.

Children

ProteinLedger is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

We may update this policy as the product evolves. If we make material changes, we will update the date at the top of this page. Continued use of the service after changes constitutes acceptance.

Contact

proteinledger@gmail.com