Privacy Policy

Effective 31 May 2026.

TL;DR. We process the menu image you upload to extract dish information, then discard it. We don't ask for your name, email, or any account info. We don't use cookies for tracking and we don't sell data. The image is sent to Anthropic and dish names are sent to Serper to perform the analysis.

1. What we collect

The image you upload. The raw bytes of the menu photo you submit through the website or directly to the API.
Standard network metadata. Like any website, our hosting provider (Cloudflare) automatically receives your IP address, user agent, and request timestamps to route traffic and mitigate abuse.
Nothing else. No account, no email, no payment information, no analytics cookies, no advertising identifiers.

2. How the image is processed

When you submit a menu image, YumScan:

Resizes it in your browser and sends the bytes to our Cloudflare Worker.
Forwards the image to Anthropic's Claude API for vision analysis, which returns a list of dish names and descriptions.
Sends each dish name as a search query to Serper to retrieve a representative image URL.
Downloads the first usable image and caches it in our object store (Cloudflare R2), keyed by a hash of the dish name — not by you.
Returns the result to your browser. The original menu image is not written to any persistent storage on our side.

3. Third parties

Your data flows through these providers to deliver the service:

Cloudflare — hosting, edge network, and object storage. Privacy policy: cloudflare.com/privacypolicy.
Anthropic — receives the menu image to run the vision model. Privacy policy: anthropic.com/legal/privacy.
Serper / Google Images — receives the dish name as a search query (no image is shared with them).
Image CDNs — when we download an image returned by search, the operator of that CDN sees our server's IP and request headers.

4. Retention

Menu images you upload — held only in memory for the duration of the request. Not written to disk by us.
Dish photos cached in R2 — kept indefinitely so common dishes don't need to be re-fetched. They are not tied to your identity.
Server logs — Cloudflare retains short-term request logs per its own policy.

5. Cookies and tracking

We do not set tracking cookies, run third-party analytics, or fingerprint your browser. Your browser may store a small amount of local state to remember UI preferences, but nothing is shared with us or anyone else.

6. Your choices

Don't upload an image you don't want sent to Anthropic for processing — that's the only way to use the tool.
Don't upload images that contain personal information (handwritten notes, prescriptions, ID cards). YumScan is designed for printed restaurant menus.

7. Children

YumScan is not directed at children under 13 and we do not knowingly collect data from them.

8. International transfers

Anthropic, Cloudflare, and Serper operate globally. Submitting an image may result in it being transmitted to and processed in countries other than your own, including the United States.

9. Changes

If we materially change this policy, we'll update the effective date at the top of this page. For substantive changes we'll surface a notice in the app.

10. Contact

Questions about this policy? Email contact@getyumscan.com.