Zesti is built on the principle that you should know what's in your food — and what's in our app. This policy explains clearly what data we collect, why we collect it, and how it's used. We don't sell your data. We don't run ads. If you choose to tell us about health conditions or dietary needs to get more personalised results, that information is never used for anything other than that.
Zesti Health is a sole trader business based in Queensland, Australia. For privacy enquiries, contact us at privacy@getzesti.app.
We are subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we handle health information in line with the additional obligations those Principles place on "sensitive information."
When you create an account, we collect your email address and a securely hashed password. We use Supabase for authentication — your password is never stored in plain text.
You can optionally turn on health preferences in the app — currently Gut health focus, Allergen alerts, Synthetic colours and Artificial sweeteners. Zesti stores which of these switches you have turned on, against your account. When you scan a product, Zesti uses them to highlight the ingredients that matter to you — for example, with Gut health focus on it points out ingredients that some people with sensitive guts find troublesome, and with Allergen alerts on it warns you when a product contains one of the allergens you chose (you pick them from the list of allergens Australian food labels must declare, and we store your choices against your account). These highlights never change a product's score, which is the same for everyone. We do not ask for, record or verify a diagnosis, and a switch being on does not mean you have a condition — it means you've asked Zesti to pay closer attention to that area. Zesti can miss an allergen, and the product's label is the legal source, so always check the pack. The preferences available may change as we add new options, and we will update this policy when they do.
Because a preference like Gut health focus can say something about your health, we treat it as health information, which the Privacy Act classes as "sensitive information" and protects more strictly than ordinary personal information. We only collect it when you take a clear, deliberate action to turn a preference on — see Sensitive Information & Your Consent below for how this works and how to withdraw it.
When you scan a product, we store the product name, brand, scan date, scan method, the ingredient text we analysed, and the result. This is used to show your scan history within the app, and lets us re-check an old scan against our latest ingredient data when we improve it. When we can't recognise an ingredient on a product you scan, we also keep that ingredient's name, linked to your account, so we can add it to our database. We do not store images of food labels.
To apply the daily and weekly scan allowances, we record the date and time of each scan that counts toward them, and the type of scan (barcode or label). We do not record what you scanned in this log, and it is deleted if you delete your account.
If you use referrals, we store your personal referral code and, when someone signs up with a friend's code, a record linking the two accounts so we can award bonus label scans. You can see how many friends have joined and your bonus balance, but not who they are. These records are deleted if you delete your account.
When you scan the ingredient label of a product that has no ingredient list in our data sources, and you give the product a name, the ingredients we read from the label and the name you typed may be saved against that product's barcode so that other people scanning it see them too. Your photo and your account details are not shared. Please don't put personal information in a product name.
If you use the label-scanning feature, the photo you take is sent to our OCR provider to extract the printed ingredient text (see OpenAI, below), and to our servers to match those ingredients against our database. The photo itself is not retained by Zesti after this processing completes.
Our infrastructure providers (Supabase, for our database and servers) automatically generate standard technical logs — such as request timestamps and error logs — for the purpose of operating, securing, and debugging the app. We do not currently use any dedicated analytics or usage-tracking service, and we do not build behavioural profiles from this data. If that changes in the future, we will update this policy first.
We do not collect: your precise location, your contacts, biometric data, or advertising identifiers. We never see your payment details — subscription payments are handled entirely by Apple and RevenueCat (see below).
Because health information receives special protection under Australian law, we want to be specific about how this works in Zesti:
Some of your information is necessarily handled by service providers we rely on to run Zesti. Some of these providers operate overseas, including in the United States, which means your information may be handled outside Australia. We choose providers with their own privacy and security commitments, but we encourage you to review their policies too.
We use Supabase for our database, authentication, and server functions. Your account data, scan history, and health preferences are stored securely with Supabase, protected by encryption in transit and at rest, with access controls that restrict each account to its own data. Supabase's privacy policy is available at supabase.com/privacy.
If you use the label-scanning feature, the photo you capture is sent to OpenAI's API (GPT-4o Vision) solely to extract the printed ingredient text from the image. This request is made from our server, not directly from your device. OpenAI's API does not use content submitted through the API to train its models by default, and the image is not retained by Zesti once extraction is complete. OpenAI's privacy policy is available at openai.com/privacy.
If you subscribe to Zesti Pro, your subscription is processed via RevenueCat. RevenueCat receives your Apple ID transaction information to validate your subscription. RevenueCat's privacy policy is available at revenuecat.com/privacy.
Zesti is distributed via the Apple App Store, and subscription payments are processed by Apple. Apple's data practices are governed by Apple's privacy policy at apple.com/privacy.
We retain your account data for as long as your account is active. If you delete your account, all personal data — including your scan history, health preferences, and account information — is permanently deleted within 30 days. You can delete your account at any time from the Profile tab in the app.
Under the Australian Privacy Act and Privacy Principles, you have the right to:
We take reasonable technical and organisational steps to protect your information, including encryption in transit and at rest through our infrastructure providers. In the unlikely event of a data breach that is likely to result in serious harm, we will notify affected individuals and the OAIC in line with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.
Zesti is not directed at children and is not intended for use by anyone under 13, consistent with our Terms of Service. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@getzesti.app and we will delete it.
Zesti provides general information about food additives and ingredients based on published research. This is not medical advice. Ingredient scores are for informational purposes only and should not be used to diagnose, treat, or manage any health condition. Always consult a qualified health professional for personal health decisions.
We may update this policy from time to time. We will notify you of material changes — such as a change to what we collect or how we use it — via the app or email before they take effect. Continued use of Zesti after changes take effect constitutes acceptance of the updated policy.
Questions about this privacy policy or your data?
Zesti Health · Queensland, Australia