Scanpik Privacy Policy

Effective date: August 10, 2026

1. About This Policy

Scanpik ("the App," "we," "us") is an iOS app that lets you scan product barcodes, view and write reviews, and contribute product information. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

2. Information We Collect

2.1 Account Information (via Sign in with Apple)

When you sign in, Apple shares with us:

• Apple user identifier — a stable ID unique to your Apple account and our app
• Email address — your real email, or a relay address (e.g., xxxxx@privaterelay.appleid.com) if you chose to hide your email
• Apple authorization tokens — a refresh token we store only to revoke your Apple authorization when you delete your account

Apple may also share your name on first sign-in. We do not store your real name.

2.2 Profile

• An auto-generated username (e.g., user_abcd1234)
• A display name you choose (optional)
• A profile photo you upload (optional)
• Apple anti-abuse signal — a value Apple provides (likely_real, unknown, or unsupported) indicating its confidence that you are a real person. We use this to mitigate automated abuse.

2.3 Content You Create

• Reviews — ratings, text, optional taste profile (sweet, salty, sour, bitter, spicy, umami), like counts
• Scan history — products you scan and the time of each scan
• Product submissions and edit proposals — product name, category, vendor, and photos you suggest
• Photos of products you upload
• Reports you file against products or reviews
• Likes and blocks — which reviews you like and which users you block

2.4 Feedback Conversations (AI)

If you use the in-app feedback chat, your messages are sent to Google's Gemini API to generate responses. The full conversation is stored in our database to help us improve Scanpik. We retain feedback conversations indefinitely; you can request deletion at any time by contacting us.

2.5 Usage and Analytics Data

To understand how Scanpik is used and to keep improving our product and features, we record the following while you use the App:

• Search history — the search queries you type in the App
• Activity and interaction data — e.g., products you view, banners or categories you tap, and features you use
• Session and version data — e.g., your app session and App version

This data is used solely for Scanpik's internal product analytics and feature improvement. We do not use it for cross-app or cross-site tracking, do not share it with third parties or advertisers, and do not sell it.

2.6 Technical Diagnostics

When certain App operations fail, we automatically record a randomly generated installation identifier stored on the device (a new one is generated if you reinstall the App), the category of operation that failed, a technical error code that excludes the error message, the App version and build, the iOS version, and the time of the failure. Diagnostic records do not store your account identifier or user content.

We use this data only to identify and fix technical problems and maintain App functionality and service reliability. We do not use it for cross-app or cross-site tracking or advertising, and we do not sell it. Except for the service providers listed in Section 5 that are needed to operate the App, we do not disclose diagnostic data to other third parties. Technical diagnostics operate separately from optional usage and analytics features; turning off "Help improve Scanpik" stops collection of usage and analytics data but does not stop technical diagnostics.

3. How We Use Information

• Provide the App's functionality (authentication, displaying reviews and products, scanning, content moderation, etc.)
• Detect and prevent abuse (e.g., using the Apple anti-abuse signal to weight content)
• Diagnose and fix technical problems and maintain service reliability
• Improve Scanpik based on aggregate usage patterns and your feedback
• Communicate with you about your account or service-related matters

4. Photo License

By submitting photos of products to Scanpik, you grant us a perpetual, irrevocable, worldwide, royalty-free, sublicensable, non-exclusive license to use, display, reproduce, modify, distribute, and create derivative works of those photos for any purpose related to Scanpik. You retain ownership of your photos. Photos approved for public display may remain visible in Scanpik after you delete your account; we remove uploader attribution when your account is deleted.

5. Third-Party Services

We rely on the following third parties to operate Scanpik:

• Apple — Sign in with Apple authentication.
• Supabase — Database, file storage, and serverless functions. Data is hosted in Supabase's infrastructure, typically located in the United States.
• Google (Gemini API) — Used to power feedback chat. The content of your conversations is sent to Google to generate responses, subject to Google's API terms and privacy practices.

6. Data Retention and Deletion

• Account and most content — retained until you delete your account. When you delete your account from within the app, your profile, reviews, scan history, likes, blocks, and reports are deleted, and we also revoke your Sign in with Apple authorization with Apple.
• Photos approved for public display — may remain accessible after account deletion under the license above, with uploader attribution removed.
• Feedback conversations — retained indefinitely; contact us to request deletion.
• Usage and analytics data — raw event-level records are retained for no longer than 24 months as a rule, then deleted or de-identified; they are also deleted when you delete your account. De-identified, aggregate statistics that cannot identify you (e.g., usage trends, feature adoption) may be retained longer.
• Technical diagnostic data — retained while it remains useful for diagnosing problems and maintaining service reliability. Diagnostic records do not store an account identifier and therefore are not automatically deleted when you delete your account.

7. Your Rights

• Access — most of your data (profile, reviews, scans) is visible in the App.
• Update — you can edit your display name and other profile fields in the App.
• Delete — you can delete your account from the App's Profile screen. This cascades to your data and also revokes your Apple authorization.
• Choice — you can turn off "Help improve Scanpik" in the App's settings, and we will stop collecting usage and analytics data. You can contact us to delete previously collected data, or it is removed when you delete your account. This setting does not affect the technical diagnostics described above.
• Contact — for any other requests, email us at scanpik.app@gmail.com.

8. Children's Privacy

Scanpik is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. Changes to This Policy

We may collect additional categories of information or change how we use information as Scanpik evolves. If we make material changes to this policy, we will update the effective date and notify users through the App or by email.

10. Contact

Questions, comments, or requests: scanpik.app@gmail.com