For Provianty, an Android app for tracking the food you have at home, its best-by dates, and official product recalls.
Last updated: 27 October 2026
In short
Provianty is published by an individual developer. For anything in this policy, including requests about your data, contact: support@provianty.com.
Your items, storages, saved products, notification history and settings are kept in a database on this device. There is no account, and the app never uploads any of it. That includes photos you take of receipts or best-by dates: they are read on the device and are not sent off it.
Android makes its own backups, separately from this app, and they are switched on by default on most phones. When they are on, your phone may include this app’s database in the backup it uploads to your Google Drive.
That backup goes to your Google account, not ours. On Android 9 and later the backup is encrypted with your screen lock, so Google cannot read it either. It does not count against your Drive storage, and we can’t see it or receive any of it. You can switch it off for this app, or for the whole phone, in your phone’s own Settings under Google › Backup.
Because a backup can outlive the app, uninstalling doesn’t necessarily erase everything. The copy on your phone is removed, but a backup your phone already made may stay in your Google account and be restored if you reinstall. You manage that in your phone’s backup settings.
We still hold no copy of your data, so there is nothing for us to return or erase on request.
When online lookups are turned on, the barcode you scan or the words you type are sent to Open Food Facts so it can send a product back, and product photos are downloaded from there. Only the thing you are looking up is sent, never what you already own. The request does tell Open Food Facts your IP address.
This includes the barcode of a product you start adding from a receipt line that a downloaded store list (3.5) recognised: opening that product’s form looks it up the same way. Scanning the receipt itself sends nothing.
You can turn lookups off under Data & lookups in the app’s settings. Turning them off stops product lookups and searches, though photos of products you have already added may still load.
Your barcodes stay on this device — nothing about what you own is ever sent anywhere. Matching happens on the phone. To do that, the app downloads a file of recall notices roughly once a day. That download does tell our recall server your IP address and when you checked.
The recall file is served as static files by our hosting provider, which receives the same request information in the course of serving it. We do not use that information to build a profile, and we do not combine it with anything else.
Where the recall notices come from, and the licences they are published under, is listed on the recall index page and in the app under Data sources.
If you use the microphone button to dictate a command, the app hands the audio to your device’s own speech recognition service and receives text back. Depending on your device, its Android version and its settings, that service may process the audio on the phone or may send it to your device vendor’s servers. Your phone decides this, not the app, and your device vendor’s privacy policy covers it.
Provianty doesn’t record, store or send audio itself, and keeps no recordings. If you don’t want audio to leave your phone this way, type your commands instead — anything you can dictate, you can also type.
Recall notices and data-source entries link to the issuing agency. Tapping one opens your browser and is an ordinary visit to that website, subject to that site’s own privacy policy.
Under Receipt names in the app’s settings you can download a list for a store: the printed receipt names we have checked by hand, with their barcodes, so the app can recognise more of that store’s receipts. When you open Receipt names, the app checks which lists are available; it fetches a list only when you tap Download or Update. Both come from the same server as the recall file. It never fetches either in the background or when you scan a receipt.
Nothing about you or your receipts is sent. The request does tell our server your IP address and that you fetched a public file; as with the recall file, the hosting provider receives the same request information in the course of serving it, and we do not use it to build a profile. The names on a downloaded list are matched on your phone, and you can remove a list at any time.
Photos you select are provided through the system picker; the app does not browse your photo library.
Barcode scanning and the reading of dates and receipts are done on the device by Google’s ML Kit. Google states that while the images themselves never leave the phone, ML Kit “send[s] metrics about the performance and utilization of the APIs in your app to Google” — device manufacturer and model, operating system version, this app’s package name and version, a per-installation identifier not intended to identify you, how long an operation took, and any error codes. Google says it uses this to measure performance, debug, maintain and improve those APIs and to detect abuse, and that it does not pass the data to anyone else.
We can’t switch this off. It is built into the scanning library, and Google hasn’t made it optional (a request to do so has been open since 2022). None of it concerns what you own, what you scanned, or what any picture contained.
Provianty is a household tool with no social features, no user-generated content and no advertising. It is not directed at children, and it collects no information that would identify anyone of any age.
Data you create stays on your device until you delete it in the app or uninstall the app. There is no server-side copy.
Requests reaching Open Food Facts and our recall and store-list host are subject to those services’ own logging. We keep no separate record of them.
If you are in the European Union or the United Kingdom, the GDPR gives you rights of access, correction, erasure, restriction, portability and objection over personal data held about you. In practice we hold none: your content never reaches us, and the only data that touches our infrastructure is the request information described in 3.2 and 3.5. You can exercise your rights, or complain to your national data protection authority, at any time. Use the contact address in section 1 to reach us.
If the app starts sending something new, this page changes before that version ships, and the date at the top changes with it. Material changes will also be noted in the app’s What’s new screen.