Privacy Policy

Last updated: 4 November 2026

This Privacy Policy explains how LactoGo, a trading name operated by LactoGo Digest OÜ, an Estonian private limited company (OÜ), collects, uses, stores and protects personal information when you use LactoGo.

1. Who we are

LactoGo is the trading name/brand operated by LactoGo Digest OÜ, an Estonian private limited company (OÜ), who acts as the data controller for personal data processed through LactoGo, subject to the purposes and legal bases described in this Privacy Policy.

Business registration: LactoGo is operated by an Estonian private limited company registered in the Estonian e-Business Register.

Official registration record: Verify business registration in the Estonian e-Business Register

Privacy contact: team@lactogo.eu

For privacy requests or questions, you may also contact:

jj.siochi@lactogo.eu michi.fujiwara@lactogo.eu

2. Information we collect

Depending on how you use LactoGo, we may collect:

Account information

• Email address
• Account identifier
• Authentication information
• Subscription and entitlement status

Food and experience information

You may choose to record:

• Foods and products
• Dairy-related information
• Ingredients
• Portions
• Dates and times
• Food contexts
• Personal reflections
• Reported experiences
• Mood, recorded only as a smile, a sad face or N/A
• Experiments
• Observations and notes

LactoLens information

When you use LactoLens, we may process product images and information extracted from those images to provide the scanning feature.

If you scan a photo, it is uploaded to private storage with our hosting provider, which stores uploaded images in the United States, and an AI service analyses it through a temporary link that expires within minutes. The scan result is automatically deleted after 24 hours by default, or after 28 days if you choose the 28-day option in the 28-Day Dairy Audit, unless you save it to your diary. The uploaded photo file itself is not deleted automatically: our hosting provider can delete a stored file only when we ask it to, so we keep a list of files that are due for deletion and ask the provider to delete them in batches. Photos uploaded before 3 November 2026 were not listed and may still be in storage. You can ask us to delete your photos at any time by emailing team@lactogo.eu. You can also scan barcodes without uploading a photo.

Luna interactions

When you use Luna, we process your questions and relevant LactoGo information required to provide the requested response.

Technical information

We may process information necessary to operate and secure the service, including device, browser, security and application information and push-notification identifiers where notifications are enabled.

Subscription information

Subscription payments are processed by Stripe, which acts as the payment processor for LactoGo Premium purchases.

We do not need to store your full payment-card details to provide LactoGo.

3. How we use information

We use information to:

• provide LactoGo;
• maintain your account;
• process food scans;
• provide Luna responses;
• generate Dairy Pulse;
• create Dairy Story;
• support experiments;
• maintain subscription access;
• send requested notifications;
• prevent fraud and abuse;
• secure the service;
• troubleshoot technical problems;
• improve the product;
• comply with legal obligations.

4. Your food and experience data

LactoGo is built around personal food experiences.

Your diary entries and reflections may be used to provide personal observations and longitudinal insights within the service.

LactoGo does not represent these observations as medical diagnoses.

You control what information you choose to record.

Legal bases

We process your account details and subscription to provide the service you ask for (Article 6(1)(b) GDPR).

Food, mood and digestive experience entries can reveal information about your health. We process them only with your explicit consent (Article 9(2)(a) GDPR), which we ask for separately, before you first use Dairy Logs. You can withdraw that consent at any time in Settings. Withdrawing does not affect processing carried out before you withdrew. When you withdraw, we stop saving and using your Dairy Logs, and your existing Dairy Logs entries and behavioral experiments are permanently deleted.

We use payment and subscription data to meet our legal and accounting obligations (Article 6(1)(c) GDPR).

We keep safety records, such as a flag that a safety message was shown, to protect users and to show that our safety features work (Article 6(1)(f) GDPR). You may object to this at any time by emailing team@lactogo.eu.

Please do not enter diagnoses, medications, lab results or other medical history.

5. AI processing

Certain LactoGo features use artificial intelligence.

LactoLens may process uploaded product images to identify relevant food and product information.

Luna may process your question and relevant LactoGo account context to generate a response.

Luna is an artificial intelligence system, not a person. Your messages and scans are sent to third-party AI service providers that process them on our behalf to produce answers. We ask for your consent before Luna or LactoLens is used, and you can withdraw it in Settings.

AI outputs may be inaccurate and should not be treated as medical advice.

Use of data to train AI models. Our hosting provider's terms for our current plan allow it to use data stored in our workspace, which can include your Luna messages, Dairy Logs entries and scan photos, to train AI models. There is no setting that lets us opt out on this plan. We have asked our provider about plans that exclude AI training and will update this policy if that changes. Please do not enter names, medical records or other sensitive details in Luna or in your notes.

6. Service providers

LactoGo uses third-party service providers to operate parts of the service. These may include providers supporting:

• Application hosting
• Authentication
• Payment processing
• AI processing
• Push notifications
• Security and bot protection
• Technical monitoring

Our infrastructure may include third-party technology, hosting, authentication, analytics, and infrastructure providers, together with Stripe (payment processing), Firebase/Google services (push notifications and related features), Cloudflare (security), and Google (Google Sheets) for internal copies of some submissions, depending on the feature and configuration.

When you send feedback, send scan feedback or join the 28-Day Challenge, a copy of that submission is also added to an internal Google Sheets spreadsheet that only our administrator account can open. For feedback this includes the category, rating, your message, your email address and your user identifier; for scan feedback, the corrections, suggestions and comments you wrote and your user identifier; for the challenge, your user identifier, dates, status and day. When you delete your account, your rows in these spreadsheets are removed. Please do not put names or medical details in free-text feedback.

Cloudflare provides security and bot protection services for LactoGo, including Cloudflare Turnstile verification used to help protect certain features from automated abuse. Cloudflare's Privacy Policy is available at https://www.cloudflare.com/privacypolicy/ and the Cloudflare Turnstile Privacy Addendum is available at https://www.cloudflare.com/turnstile/privacy-promise/.

7. Payment processing

Subscription payments are processed by Stripe, which processes payment and transaction information according to its applicable policies.

8. International data transfers

Our application data is stored in the European Union. Uploaded photos and some account and billing details held by our hosting provider are stored in the United States. Processing, including by AI providers used through our hosting platform, can take place outside the European Economic Area, and those providers include companies based in the United States.

Where personal data is transferred outside the EEA, we rely on the safeguards in our hosting provider's data processing agreement, such as adequacy decisions, standard contractual clauses or the EU-US Data Privacy Framework. Stripe, Google (Firebase) and Cloudflare may also process limited data outside the EEA under their own transfer safeguards.

9. Data retention

We retain personal information for as long as reasonably necessary to:

• provide your account and requested services;
• maintain your Dairy Story and history;
• meet legal and accounting obligations;
• resolve disputes;
• maintain security;
• enforce agreements.

Our retention periods are:

• Account details: while your account is open, then deleted when you close it, except for the records listed below.
• Dairy Logs entries: until you delete them or close your account. In the 28-Day Dairy Audit you choose 24-hour or 28-day retention for scan results.
• Scan results: 24 hours by default, or 28 days if you choose that option.
• Scan photo files: removed when our hosting provider processes our deletion requests, which we send in batches. Until then they remain in storage.
• Luna conversations: until you close your account.
• Feedback, scan feedback and challenge copies in Google Sheets: removed when you delete your account.
• Backups and platform records: deleted records stay in a recycle area for 30 days and backups are kept for up to 30 days. Some platform logs cannot be deleted by us.
• Luna quality-review records: about 90 days.
• Safety flags: 180 days.
• Safety audit records: 365 days. When you close your account we remove the identifiers from them.
• Professional summaries and the record of your consent to share one: 30 days after the summary expires or you revoke it, and no more than 365 days after it was created.
• Payment and accounting records: for the period required by law.
• Records of your consent: for as long as needed to show that you consented, and no longer than the applicable limitation period.

10. Your rights

Depending on your location and applicable law, you may have rights including:

• access;
• correction;
• deletion;
• restriction of processing;
• objection;
• data portability;
• withdrawal of consent where applicable;
• complaint to a data-protection authority.

11. Account deletion

You may request deletion of your LactoGo account and associated personal information, subject to information we are legally required or permitted to retain.

12. Cookies and similar technologies

LactoGo may use cookies or similar technologies necessary for authentication, security, preferences and operation of the service.

Where legally required, consent will be requested before using non-essential technologies.

13. Children's privacy

LactoGo is for adults aged 18 or over. We ask every user to confirm that they are 18 or older, but we do not verify age. We do not knowingly collect personal information from children. If you believe a child has used LactoGo, contact us and we will delete the account.

14. Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse and alteration.

No internet service can guarantee absolute security.

15. Changes

We may update this Privacy Policy when our services, processing activities or legal requirements change.

The updated version will show a revised "Last updated" date.

16. Contact

LactoGo is the trading name operated by LactoGo Digest OÜ, an Estonian private limited company (OÜ).

Business registration: Estonian e-Business Register

Privacy: team@lactogo.eu Privacy/legal escalation: jj.siochi@lactogo.eu, michi.fujiwara@lactogo.eu