Weza Lens

Privacy Policy

Last updated: 4 June 2026

Weza Lens ("we", "us") provides an AI-powered food-label analysis service. This policy explains what personal data we collect, how we use it, and your rights. We process personal data in line with Kenya's Data Protection Act, 2019.

Health & allergen note: Weza Lens gives AI-generated estimates for general information only. It is not medical or nutritional advice and may be inaccurate. Never rely on it for allergy-critical or medical decisions — always check the physical product label and consult a qualified professional.

1. Data we collect

Account: your email address (used to sign in), managed by our auth provider.
Scans: the analysis results we generate (product name, nutrient breakdown, score, summary) and the date of each scan.
Label photos: the image you upload is sent for AI analysis and is not stored by us after processing — we keep only the resulting analysis.
Health goals you choose (e.g. "reduce sugar"), to personalize results.
Usage: counts needed to enforce scan and rate limits.
Feedback you submit (e.g. reporting an incorrect reading).

2. How we use it

To analyze the labels you scan and show you results.
To personalize insights to your stated goals.
To operate the service (authentication, history, limits) and improve accuracy.

Our legal basis is your consent, which you give at sign-up and can withdraw at any time by deleting your account.

3. Who we share it with (processors)

We do not sell your data. We use trusted service providers to run Weza Lens, who process data on our behalf:

Supabase — authentication & database.
Anthropic (Claude) — AI analysis of the label image/text.
Vercel and Railway — application hosting.
Upstash — rate-limiting.
Resend — sending account & security emails.
Pesapal — payment processing for paid plans.
Vercel Web Analytics — privacy-friendly, cookieless usage analytics (no personal profiles, no cross-site tracking).
Sentry — error monitoring to keep the service reliable.

Some providers may process data on servers outside Kenya; we rely on their contractual safeguards for such transfers.

4. Your rights (Data Protection Act, 2019)

Access & portability: download all your data in-app (Account → Download my data).
Erasure: delete your account and all associated data in-app (Account → Delete my account). To prevent abuse of our free tier, we keep a one-way hash of your email address and a count of free scans used after deletion — this cannot identify you and is used only to stop the same email reopening a fresh free allowance.
Rectification and withdrawal of consent: contact us, or delete your account.

5. Retention & security

We keep your data until you delete your account, after which it is removed — except a one-way hash of your email plus a free-scan counter, which we retain solely to prevent free-tier abuse (it cannot be reversed to identify you). Data is encrypted in transit, access is restricted, and row-level security ensures you can only access your own records.

6. Children

Weza Lens is intended for users aged 18 and over. If you are under 18, please use it only with a parent or guardian's consent.

7. Changes & contact

We may update this policy; material changes will be posted here. Questions or requests: wezadesigns@gmail.com.