This policy is published separately from our general Privacy Policy, as Washington's My Health My Data Act requires. It applies to residents of Washington, Nevada (SB 370) and Connecticut, and describes practices that in substance apply to every Prano user.
Prano is operated by Sandhu Technologies LLC, 15305 Dallas Parkway, Suite 1200, Addison, TX 75001‑6423, United States. Contact: contact@anantex.com.
1. What consumer health data we collect
- The foods and products you scan, and the photographs you take of them
- Nutritional composition and dietary patterns inferred from those scans
- Your dietary restrictions and preferences
- Your allergies and intolerances
- Self‑reported medical or dietary conditions
- The personalised 0–100 health score and the reasoning generated for each scan
- Meal log entries and the history and analytics built from them
- Where you provide them, body metrics
We do not collect precise location, and we do not collect biometric identifiers. Prano's image analysis identifies food, packaging and text — it does not identify people.
2. How we collect it
Directly from you: photographs you capture, information you enter into your profile, entries you add to your meal log, and questions you ask Ask Prano — plus the analysis we generate from those inputs.
3. Why we collect it
Solely to provide the features you asked for: scoring a scan, explaining ingredients, suggesting swaps, keeping your history, producing your analytics, and answering your questions in Ask Prano.
We do not use consumer health data for advertising, profiling for advertising, or any purpose unrelated to operating Prano for you.
4. Who we share it with
Only the service providers who operate Prano on our instructions:
| Who | What they receive | Why |
|---|---|---|
| Supabase (United States) | Account data, dietary profile, scan photos, scores, meal log, chat history | Database, authentication, file storage, and the backend functions that run Prano |
| Anthropic (United States) | The scan image and its extracted context, or your Ask Prano question and its context, at the moment of each request | AI analysis of a scan, and Ask Prano responses |
Anthropic is called server‑side only, from our own backend — your device never sends anything to Anthropic directly. Under our agreement, your content is not used to train Anthropic's models.
We do not sell consumer health data. We do not share it with any third party for that party's own purposes, and we do not share it with data brokers.
5. Your rights
- Confirm whether we collect, share or sell your consumer health data, and access it
- Withdraw your consent to collection, and separately withdraw your consent to sharing — these are two distinct rights, and you may exercise either without the other
- Delete your consumer health data, including from backups and from our service providers
- Be free from discrimination for exercising any of these rights
Withdrawing consent to sharing means Prano can no longer analyse new scans or answer questions in Ask Prano, because that analysis happens at Anthropic. Your existing data, history and account remain, and you may still export or delete them.
6. How to exercise them
- In the App: Settings → Data & Privacy
- By email: contact@anantex.com with "Consumer Health Data Request" in the subject line
We verify identity by confirming control of the account email, and we honour deletion requests within 30 days, forwarding them to our service providers.
Appeals. If we refuse a request, reply to our decision with "Appeal". If the appeal is denied, you may complain to the Washington Attorney General at atg.wa.gov/file-complaint, or to your own state's Attorney General.
7. Geofencing
We do not use a geofence around any healthcare facility, and we do not use location data to infer anything about your health.
8. Changes
We will update this policy when our practices change, and will notify you in the App and by email before a material change takes effect. The "Last updated" date above always reflects the current version.