Privacy Policy

About Aviona

Last updated: 13 October 2026.

Aviona helps you organize grocery purchases, log meals, estimate nutrition and understand spending. The information described here comes from what you enter or upload, your use of the service, and calculations based on that information.

Aviona is for users aged 18 or older. We do not intentionally offer the service to children. Our public website is aviona.fo.

Data controller and operator

Aviona is operated by ÍVF Aviona, the data controller responsible for the personal information described in this policy.

Account and profile information

When you create or use an account, we process your email address, sign-in credentials, account identifier and session information to authenticate you and keep your records associated with your account. Profile information includes an optional display name, market and any calorie, protein, carbohydrate or fat goals you set.

Your email and sign-in information are needed to use an account. Profile details and uploads are provided through the features you choose to use; without an upload or the relevant information, we cannot provide the corresponding analysis or calculation.

Receipts and purchase history

When you scan or upload a receipt, we process a prepared copy of the image and extracted receipt information. This includes printed text, store names and addresses, purchase dates and times, products, quantities, prices, discounts, deposits or PANT, taxes, totals, payment method, amount paid and change where present. Images can also contain other personal details printed on a receipt.

We retain the extracted source information alongside organized purchase records, product matches and corrections. We use these to show purchase history, calculate spending, match products and support nutrition estimates and price comparisons. Avoid including unrelated personal information in an upload.

Meals and nutrition

When you select a meal photo, upload and analysis can start before you save the meal. We process the prepared image, meal descriptions, ingredient and product matches, serving or food-weight information, meal date, timezone, locale, analysis results and your corrections.

You can also log available products manually using serving or gram amounts. Saved meals include calorie, protein, carbohydrate and fat estimates and related calculation history. Food weight is not body weight. The current app does not access Apple Health, workouts, activity or calories burned. Nutrition estimates can be incomplete or inaccurate and are not medical advice.

Third-party AI analysis

Receipt images, meal photos and product packaging images may be processed by third-party artificial intelligence service providers. These services extract receipt or packaging information and help identify foods and estimate ingredients and serving amounts for nutrition calculations.

For meal analysis, selected information about relevant recent purchases may also be processed, such as product descriptions, quantities, product identifiers and relevant nutrition or packaging information. This helps improve food identification and nutrition estimates. The selected context does not include your entire receipt history, prices, currencies or store addresses. Receipt images analyzed separately can themselves contain prices and store details.

AI analysis sends the information described above to external services. AI results are estimates. Review the results and correct them where needed.

Budgets and spending insights

If you use budget features, we store the amounts, currencies, schedules and recurring-expense details you enter. We combine these with receipt information to calculate spending and budget summaries. Aviona does not currently connect to your bank account.

Aviona may use purchase observations across accounts to produce aggregated cross-user and market insights and price comparisons. These insights do not expose individual users' receipt histories or account identifiers to other users. The underlying receipt records remain linked to their accounts; grouping a result does not make those records anonymous.

Products, packaging and corrections

Product searches and barcode scanning use product names or identifiers to find catalogue information. If you contribute packaging photos, labels, product details or reports, we store the submission, its account association and review information. Authorized reviewers can inspect submissions and approve shared catalogue facts. An approved package-front photo may be used as a product image visible to other Aviona users.

Product matches and approved corrections can create reusable mappings that improve recognition for later receipts. Withdrawing a contribution changes its review status; it does not by itself erase the submission or its photos.

Technical information and access

Authentication and backend services process technical information such as IP addresses, user-agent information, request identifiers, processing status, errors, timing and resource usage. We use operational records to authenticate requests, investigate failures and manage abuse, rate limits and processing costs. Aviona does not currently use advertising or cross-app tracking features.

The current app does not request GPS or background location. Store details on receipts, your market, timezone and network information can still indicate contextual location. Camera access is used for receipts, meals, packaging and barcodes; photo selection provides the images you choose. Uploaded images are resized and re-encoded rather than uploaded as unmodified phone originals.

Service providers and image hosts

We use service providers for authentication, databases, file storage, backend processing and third-party AI analysis. Account information, uploads and processing results are stored with these services and, where needed, on your device. Authorized reviewers may access specific receipt evidence to verify product matches.

Some catalogue images are loaded directly from external image hosts. Those hosts receive the network information needed to serve an image, such as your IP address and the requested image URL. If you email support, your email provider and the receiving email service process the message and attachments.

Reasons and legal grounds for processing

We process account information and the content needed to provide the account, history and features you request to perform our service agreement with you. We use necessary support and security information for our legitimate interests in answering requests, protecting accounts, preventing misuse and maintaining a reliable service, subject to your rights and interests.

Where a legal obligation requires processing, that obligation is the basis for it. Where processing relies on consent, you can withdraw that consent. These grounds do not give us unrestricted permission to use your information for unrelated purposes.

Protecting your information

Aviona uses account-based access controls for personal records and uploaded files. Access to specific images can be granted through time-limited links or authorized review features. Approved catalogue images have the shared use described above; private receipt and meal images are not public catalogue images.

Keep your sign-in details private and contact us if you suspect unauthorized access. Security measures reduce risk but cannot guarantee that every system or transmission is free from risk.

International processing

Aviona uses European hosting. Third-party AI and other service providers may process information outside the Faroe Islands or the European Economic Area, where data protection laws may differ. European hosting does not mean that every recipient processes or stores information only in Europe.

Contact us for information about the recipients and arrangements relevant to your information. We do not promise that AI processing is confined to Europe or that providers retain no information.

How long information is kept

We retain information for as long as reasonably necessary to provide the service, maintain your account and history, fulfill the purposes described in this policy, and meet applicable legal obligations or legitimate security needs. The relevant factors include whether your account remains active, whether the information is needed for your saved history or an outstanding request, and whether a specific legal or security reason requires continued retention.

Saved receipts, meals, nutrition history and budgets are kept to maintain the history you use in Aviona. You can initiate account deletion as described below or contact us about a particular item.

An uploaded image and its analysis can be stored even if you do not save a receipt or meal. Discarding a draft on your device does not automatically remove information already uploaded. Unsaved uploads may remain stored until removed through cleanup or account deletion and are subject to the retention criteria above. Contact us if you need help removing an unsaved upload.

Temporary copies on your device may be kept to recover an unfinished scan or meal. Signing out does not delete your account or all unfinished work. Some technical records are removed automatically; an expired image link does not mean the image itself has been deleted.

Account deletion

Account deletion is initiated in Settings, under Account, by choosing Delete account. The deletion flow is designed to remove your account, profile, receipts, meals, your uploaded images, budgets, product submissions and associated personal processing records. Deletion needs to complete for both your files and records; an interrupted or failed request can require a retry or support assistance. See the account deletion page for help.

Your uploaded packaging photos are removed when deletion completes, including photos previously used as shared product images. Deleting your account does not delete other users' records.

Account deletion does not immediately erase every log or backup held by a service provider. Limited technical, operational or security records, and information we are legally required to keep, may be retained where necessary and lawful under the retention criteria above. Such records can still be personal information; removing identifying details does not necessarily make them anonymous.

Website visits and support

This website does not currently contain account login, upload or contact forms, and we have not added analytics or advertising trackers to its pages. Hosting services can process network requests and technical logs when serving the website. An email link opens your email application rather than submitting a website form.

If you contact support, the information you send can include your email address, account details, issue description, device or app information and attachments. Share only what is needed to explain the issue; do not send passwords or unrelated personal information.

When you choose a website language, we store that preference in a cookie on your device for up to one year. It is used to remember your language, not for advertising or analytics. Without a saved choice, we use your browser language where supported.

Your privacy rights

Subject to applicable conditions and exceptions, you can ask for access to your personal information, correction of inaccurate information, deletion, or restriction of processing. You can object on grounds relating to your situation where processing relies on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Portability applies to information you provided where processing is automated and based on consent or contract. Where applicable, you can request a structured, commonly used, machine-readable copy and a direct transfer to another provider where technically feasible. This does not mean every estimate or derived insight is covered by portability.

Making a request or complaint

Contact support@aviona.fo or write to the address above for privacy questions or to exercise your rights. Tell us what you need and enough information to locate your account. Do not send passwords, credentials or unnecessary receipt images. If identity checks are needed, we will ask for proportionate information through an appropriate channel.

Requests are normally free. We respond without unnecessary delay and within four weeks, unless a lawful extension is needed. We will explain the reason for any extension and the expected response time within those four weeks. If we cannot fulfill a request, we will explain why and how you can complain.

You can complain to Dátueftirlitið, the Faroese Data Protection Authority. Where GDPR applies, you can also complain to the competent supervisory authority, including in the EU/EEA country where you live or work or where an alleged infringement occurred. You do not have to contact us first to exercise a complaint right.

Changes to this policy

We may update this policy as the service or legal requirements change. The date above identifies the latest version. Where a change requires further notice or consent, we will provide it before the relevant new processing begins. For product help, visit Support.