CarbVoice legal information

Privacy Policy

Last updated: 30 October 2026

1. Provider

CarbVoice is developed, owned and operated by The Nordic Craftsman, a business established in Sweden.

Business information

• Business name: The Nordic Craftsman
• Application name: CarbVoice
• Swedish organisation number: 710527-7797
• VAT registration number: SE710527779701
• Country: Sweden
• Official website: https://carbvoice.com
• Customer support: support@carbvoice.com

The Nordic Craftsman is the data controller for personal information processed in connection with CarbVoice.

CarbVoice provides digital food analysis, carbohydrate calculations, nutritional information, recipes and personal food-tracking tools.

By creating an account or subscribing to CarbVoice, you agree to the applicable Terms of Service. Personal data is handled as described in this Privacy Policy and in accordance with applicable legislation.

3. What data do we use?

Our data minimisation approach

CarbVoice is designed to collect only the information reasonably necessary to provide its nutrition and food-tracking features.

We do not request medical diagnoses, medication information, blood glucose values, medical records or other health-related details as part of normal registration or food entry.

Account information

Depending on the features used, we may process:

• Name or display name, where provided.
• Email address.
• Account identifier and authentication information.
• Country of residence and preferred language.
• Subscription and account status.
• Application preferences.

Food and application information

To provide the requested features, CarbVoice may process:

• Food names, ingredients, amounts and portion sizes.
• Food diary entries and meal history.
• Images submitted for food or label analysis.
• Voice input submitted for meal recognition.
• Recipes and saved favourites.
• Optional notes entered by the user.

Photographs and voice inputs may be transmitted to authorised technology providers for processing when necessary to complete the requested analysis.

Personal notes and sensitive information

Personal notes are intended exclusively for ordinary food-related information, such as ingredients, preparation methods, portion sizes and personal food preferences.

CarbVoice does not request or require medical or other sensitive personal information.

Please do not enter diagnoses, medication details, blood glucose measurements, medical history or other sensitive personal information in notes, photographs or voice descriptions.

If a user nevertheless submits such information, applicable privacy and data protection laws continue to apply. We may take appropriate steps to restrict or remove information that is unnecessary for providing the service.

Technical information

We may process limited technical information necessary to operate and secure CarbVoice, such as application versions, error reports, device information and essential usage events.

Purposes and legal grounds

We process information for providing our contractual services, maintaining accounts, delivering requested features, managing subscriptions, providing support, protecting the application and complying with legal obligations.

Our legal grounds under the GDPR include contractual necessity, legitimate interests, legal obligations and consent where applicable.

We do not sell personal information to advertisers.

Private meal diary entries are not made public unless the user intentionally shares content using an available sharing feature.

4. Storage and providers

How information is stored

CarbVoice uses external infrastructure and specialised technology providers to operate the application.

Depending on the services used, these include:

• Supabase for authentication, account management and application data.
• OpenAI-powered services for AI-assisted interpretation and nutritional estimates.
• Hostinger and other hosting infrastructure.
• RevenueCat for subscription entitlement management.
• Apple App Store and Google Play for applicable subscription purchases.
• USDA FoodData Central, NEVO and other supported nutritional data providers.

Service providers receive information only to the extent necessary for their assigned functions, subject to applicable data protection requirements.

Where personal data is processed outside the European Economic Area, appropriate legal safeguards must apply.

We use technical and organisational security measures intended to protect personal information against unauthorised access, loss and misuse.

No online service can guarantee complete protection against every potential security risk.

Data retention

CarbVoice is designed around a 90-day food diary retention period. The current database migration permits deletion of non-favourite meals older than 90 days, but automatic scheduled deletion is not yet active. Favourite meals may be preserved separately until removed by the user or at account deletion. The app must not promise automatic deletion until the scheduler has been deployed and verified.

Actual storage periods for diary records, account information, temporary analysis inputs, backups and technical logs are subject to the application's implemented retention and deletion procedures.

Information is retained only for as long as necessary for the relevant service purpose or as required by applicable law. Operational events are intended to be retained for no more than 30 days once the corresponding cleanup is operational. Backup retention and third-party retention periods require separate verification.

Where supported, users may export available diary information, including their notes.

Users may request deletion of personal information by contacting support@carbvoice.com.

External processing

Some features depend on external technology providers. Their processing practices and applicable retention arrangements may affect information transmitted for those features.

We aim to minimise unnecessary transmission and storage of personal information.

6. Your control and rights

We believe that users should remain informed about and in control of their personal information.

Under the GDPR and other applicable legislation, users may have the right to:

• Access personal information held about them.
• Request corrections to inaccurate information.
• Request deletion of personal information.
• Request restrictions on certain processing.
• Object to processing where applicable.
• Request eligible data in a portable format.
• Withdraw consent where processing relies on consent.
• Submit a complaint to a data protection authority.

Users can manage supported account information and food diary content through the application.

Requests relating to personal information may also be submitted to:

support@carbvoice.com

We respond to valid privacy requests within applicable legal timeframes and may verify identity where reasonably necessary to protect personal information.

As CarbVoice is operated from Sweden, the relevant supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Website: https://www.imy.se

Policy updates

We may update this policy to reflect changes in legislation, technology, security requirements or application functionality.

The most recent version will be made available through CarbVoice or our official website.

Where required by law, significant changes will be communicated to affected users.

9. Additional retention and account deletion details

When account deletion is offered in the app, it requires an explicit user confirmation. Subject to applicable law, personal meals, private recipes, plans, profile information and account-linked records are removed; certain shared catalogue entries may be retained only after removal of identifying references. Files held in separate storage and third-party services require their own deletion procedures and verification. The current Build 13 deletion feature is disabled pending isolated test validation.

Deleting a CarbVoice account does not automatically cancel an Apple App Store or Google Play subscription. Users must cancel through their store before the next renewal.

10. Language and interpretation

CarbVoice provides localised versions of these notices. A local-language version must describe the same rights, obligations, prices and retention limitations as the English master. If a difference or an unclear expression is found, users may contact support@carbvoice.com for clarification; mandatory local consumer and privacy rights continue to apply.

CarbVoice — Speak · Scan · Know your carbs

Developed and operated by The Nordic Craftsman, Sweden.

Website: https://carbvoice.com

Support: support@carbvoice.com

© 2026 The Nordic Craftsman. All rights reserved.