SafeScran – Global Terms & Conditions (UKOnly Jurisdiction)

Last updated: 23 August 2026 Applies globally to all users of the SafeScran mobile application and website.

1. Introduction

These Terms & Conditions (“Terms”) govern your use of the SafeScran mobile application, website, and related services (“SafeScran”, “we”, “us”, “our”). By accessing or using SafeScran, you agree to these Terms. If you do not agree, you must not use the app.

SafeScran provides allergenrelated information, menu insights, scanning tools, and restaurant data for informational purposes only. SafeScran does not provide medical advice.

2. Eligibility

You must be at least 16 years old to use SafeScran. If you are under 18, you must have permission from a parent or guardian.

3. Description of Service

SafeScran allows users to:

• Scan food labels and menus
• View allergen information
• View restaurant-submitted or communitysubmitted menu data
• Save preferences
• Access personalised allergen warnings

SafeScran may display:

• Verified restaurant data
• Unverified restaurant data
• Usersubmitted data
• Automatically scanned data

Where data is not confirmed by the restaurant, SafeScran will display a mandatory warning that must be accepted before viewing details. Your acceptance of this warning is logged for safety and compliance.

4. Important Health & Safety Disclaimer

SafeScran is not a medical tool. SafeScran does not guarantee the accuracy of allergen or ingredient information.

You must always:

• Confirm allergen information directly with the restaurant
• Check product packaging
• Consult a medical professional for allergyrelated decisions

SafeScran is not liable for:

• Incorrect restaurant data
• Mislabelled products
• User misinterpretation
• Outdated information
• Changes made by restaurants or manufacturers

Your use of SafeScran is at your own risk.

5. Restaurant Data

Restaurant data may be:

• Provided directly by restaurants
• Provided by users
• Automatically scanned
• Partially verified
• Unverified

5.1 Unverified Data

If data is unverified, SafeScran will show a mandatory warning. You must accept this warning to proceed. Your acceptance is stored in our database as proof of acknowledgement.

5.2 Restaurant Responsibility

Restaurants are responsible for:

• The accuracy of any data they submit
• Updating allergen information
• Ensuring compliance with local food safety laws

SafeScran is not responsible for restaurant errors.

6. User Responsibilities

You agree to:

• Use SafeScran responsibly
• Confirm allergen information directly with restaurants
• Not rely solely on the app for medical or allergy decisions
• Provide accurate information if submitting menu data
• Not misuse or manipulate the app
• Not attempt to reverse engineer or disrupt the service

7. Account Registration

If you create an account, you must:

• Provide accurate information
• Keep your login details secure
• Not share your account
• Notify us of any unauthorised access

We may suspend or terminate accounts that violate these Terms.

8. Data Logging & Consent

SafeScran logs:

• Your acceptance of allergen warnings
• Your interactions with unverified data
• Your scanning activity
• Your preferences
• Technical usage data

This is done for:

• Safety
• Compliance
• Fraud prevention
• Service improvement

Details are provided in the Global Privacy Policy.

9. Intellectual Property

SafeScran, including its branding, design, features, and content, is owned by SafeScran's founder, operating as a solo pre-registration project based in the United Kingdom (ownership will transfer to a registered company upon incorporation). You may not:

• Copy
• Modify
• Distribute
• Sell
• Reverse engineer

any part of the app without written permission.

10. Prohibited Conduct

You must not:

• Upload harmful or false data
• Misrepresent restaurant information
• Attempt to bypass safety warnings
• Use SafeScran for commercial purposes without permission
• Interfere with the app’s functionality
• Use automated tools to scrape data

11. Liability Limitation

To the fullest extent permitted by law:

• SafeScran is provided “as is”
• We do not guarantee accuracy of data
• We are not liable for allergic reactions, injuries, or damages
• We are not liable for restaurant mistakes
• We are not liable for user-submitted inaccuracies
• We are not liable for reliance on unverified data

Your use of SafeScran is entirely at your own risk.

12. Jurisdiction & Governing Law (Strict UKOnly Clause)

These Terms are governed exclusively by the laws of England & Wales.

Regardless of your location, nationality, or the country where SafeScran is used, all disputes, claims, or legal proceedings must be brought solely in the courts of England & Wales.

By using SafeScran, you agree that:

• UK courts have exclusive jurisdiction
• UK law applies to all matters relating to SafeScran
• You waive any right to bring a claim in any other country

This applies globally to all users and all restaurant partners.

13. Restaurant Partners

Restaurants using SafeScran Pro or submitting menu data must agree to the Restaurant Partner Agreement.

Restaurants are responsible for:

• Accurate allergen information
• Updating menu changes
• Complying with food safety laws
• Ensuring data correctness

SafeScran is not liable for restaurant-provided data.

14. Termination

We may suspend or terminate access if:

• You violate these Terms
• You misuse the app
• You submit harmful or false data
• You breach safety rules

You may delete your account at any time.

15. Changes to These Terms

We may update these Terms periodically. Continued use of SafeScran after changes means you accept the updated Terms.

16. Contact

For questions or concerns: support@safescran.com

SafeScran – UK GDPR Annex

Last updated: 23 August 2026 This Annex applies to all users located within the United Kingdom.

This UK GDPR Annex supplements the SafeScran Global Privacy Policy and explains how SafeScran complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where there is any conflict between this Annex and the Global Privacy Policy, this Annex takes precedence for UK users.

1. UK Data Controller

For UK users, the Data Controller is:

SafeScran is currently operated by an individual as a solo, pre-registration project based in the United Kingdom. Formal company (Ltd) registration is planned ahead of the app's public launch, at which point this section will be updated with the registered company's details.

SafeScran does not require a UK Representative because it is established in the United Kingdom.

2. Lawful Bases for Processing (UKSpecific)

SafeScran processes personal data under the following lawful bases defined in the UK GDPR:

2.1 Article 6(1)(b) – Contract

To provide the SafeScran service, including:

• Displaying allergen information
• Saving preferences
• Managing accounts
• Providing personalised warnings

2.2 Article 6(1)(f) – Legitimate Interests

For:

• Safety logging
• Fraud prevention
• Legal defence
• Service improvement
• Security monitoring
• Logging acceptance of allergen warnings

These interests are balanced against user rights and freedoms.

2.3 Article 6(1)(a) – Consent

For optional features:

• Location access
• Marketing communications
• Restaurant submissions
• Any optional data collection

Consent can be withdrawn at any time.

2.4 Article 6(1)(c) – Legal Obligation

Where required to comply with UK law.

3. UK User Rights (UK GDPR & Data Protection Act 2018)

UK users have the following rights:

3.1 Right of Access

You may request a copy of your personal data.

3.2 Right to Rectification

You may request corrections to inaccurate data.

3.3 Right to Erasure

You may request deletion of your data. SafeScran may retain certain data for legal defence, safety auditing, and fraud prevention, as permitted under UK GDPR.

3.4 Right to Restriction

You may request limited processing of your data.

3.5 Right to Data Portability

You may request your data in a structured, machine-readable format.

3.6 Right to Object

You may object to processing based on legitimate interests.

3.7 Right to Withdraw Consent

You may withdraw consent at any time.

3.8 Rights Related to Automated Decision-Making

SafeScran does not use automated decision-making that produces legal or significant effects.

To exercise any rights, contact: support@safescran.com

4. UK Data Protection Principles

SafeScran adheres to the following principles under UK GDPR:

• Lawfulness, fairness, transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability
• Privacy by design and default

5. UK Data Retention Rules

SafeScran retains data only as long as necessary for the purposes described in the Global Privacy Policy.

Retention periods for UK users:

• Account data: retained for up to 36 months after deletion for legal defence
• Allergen warning acceptance logs: up to 36 months
• Scan logs: up to 24 months
• Technical logs: up to 12 months
• Restaurant submissions: anonymised and retained indefinitely

After retention periods expire, data is deleted or anonymised.

6. International Transfers

If personal data is transferred outside the UK (e.g., to cloud providers or EU-based services), SafeScran ensures:

• UK International Data Transfer Agreements (IDTAs)
• Addendums to Standard Contractual Clauses (SCCs)
• Adequacy regulations (e.g., EU adequacy decision)
• Appropriate safeguards

We do not transfer UK data without lawful safeguards.

7. Processors & Sub-Processors

SafeScran uses third-party processors such as:

• Firebase
• Cloud hosting providers
• Analytics services

All processors:

• Are bound by UK GDPR-compliant contracts
• Must follow SafeScran’s instructions
• Must implement appropriate security measures
• Cannot use your data for their own purposes

A full list of processors is available upon request.

8. Restaurant Data Handling (UKSpecific)

Restaurants located in the UK may submit allergen or menu data. SafeScran processes this data under:

• Article 6(1)(b) – Contract
• Article 6(1)(f) – Legitimate Interests

Restaurants are responsible for:

• Accuracy of allergen information
• Compliance with UK food safety laws
• Updating menu changes

SafeScran is not liable for restaurant-provided inaccuracies.

9. Security Measures

SafeScran uses:

• Encryption
• Secure authentication
• Access controls
• Monitoring and alerts
• Regular security audits

We take all reasonable steps to protect UK user data.

10. Supervisory Authority Contact (ICO)

UK users may lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO) Website: https://ico.org.uk Telephone: +44 303 123 1113

11. Contact for UK GDPR Matters

For UK GDPR questions or rights requests: support@safescran.com

SafeScran – EU GDPR Annex

Last updated: 23 August 2026 This Annex applies to all users located within the European Union (EU).

This EU GDPR Annex supplements the SafeScran Global Privacy Policy and explains how SafeScran complies with the EU General Data Protection Regulation (Regulation (EU) 2016/679). Where there is any conflict between this Annex and the Global Privacy Policy, this Annex takes precedence for EU users.

1. EU Data Controller

For EU users, the Data Controller is:

SafeScran is currently operated by an individual as a solo, pre-registration project based in the United Kingdom. Formal company (Ltd) registration is planned ahead of the app's public launch, at which point this section will be updated with the registered company's details.

If SafeScran appoints an EU Representative under Article 27 GDPR, their details will be added here.

2. Lawful Bases for Processing (EUSpecific)

2.1 Article 6(1)(b) – Contract

To provide the SafeScran service, including allergen information, personalised warnings, account management, and saved preferences.

2.2 Article 6(1)(f) – Legitimate Interests

For safety logging, fraud prevention, legal defence, service improvement, and logging acceptance of allergen warnings. These interests are balanced against user rights.

2.3 Article 6(1)(a) – Consent

For optional features such as location access, marketing communications, and restaurant submissions. Consent can be withdrawn at any time.

2.4 Article 6(1)(c) – Legal Obligation

Where required to comply with EU or UK law.

3. EU User Rights (Articles 12–23 GDPR)

EU users have the right to:

• Access their data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase data (Art. 17) — with retention allowed for legal defence
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent (Art. 7)
• Avoid automated decisionmaking (Art. 22)

To exercise rights: support@safescran.com

4. EU Data Protection Principles (Articles 5 & 25 GDPR)

SafeScran adheres to:

• Lawfulness, fairness, transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability
• Privacy by design and default

5. EU Data Retention Rules

Retention periods for EU users:

• Account data: retained for up to 36 months after deletion for legal defence
• Allergen warning acceptance logs: up to 36 months
• Scan logs: up to 24 months
• Technical logs: up to 12 months
• Restaurant submissions: anonymised and retained indefinitely

After retention periods expire, data is deleted or anonymised.

6. International Transfers (Articles 44–49 GDPR)

If personal data is transferred outside the EU (e.g., to the UK or cloud providers), SafeScran ensures:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions (e.g., UK adequacy decision)
• Appropriate safeguards
• GDPR-compliant protections

7. Processors & Sub-Processors (Article 28 GDPR)

SafeScran uses third-party processors such as:

• Firebase
• Cloud hosting providers
• Analytics services

All processors:

• Are bound by GDPR-compliant contracts
• Must follow SafeScran’s instructions
• Must implement appropriate security measures
• Cannot use your data for their own purposes

A full list of processors is available upon request.

8. Restaurant Data Handling (EUSpecific)

Restaurants located in the EU may submit allergen or menu data. SafeScran processes this data under:

• Article 6(1)(b) – Contract
• Article 6(1)(f) – Legitimate Interests

Restaurants are responsible for:

• Accuracy of allergen information
• Compliance with EU food safety laws
• Updating menu changes

SafeScran is not liable for restaurant-provided inaccuracies.

9. Security Measures (Article 32 GDPR)

SafeScran uses:

• Encryption
• Secure authentication
• Access controls
• Monitoring and alerts
• Regular security audits

We take all reasonable steps to protect EU user data.

10. Supervisory Authority Contact (Generic EUWide Wording)

EU users may lodge a complaint with their local Data Protection Authority (DPA).

A full list of EU DPAs is available at: https://edpb.europa.eu/about-edpb/board/members_en (edpb.europa.eu in Bing)

This ensures SafeScran is compliant across all EU countries without listing each one individually.

11. Contact for EU GDPR Matters

For GDPR questions or rights requests: support@safescran.com

If an EU Representative is appointed, their details will be added here.