Privacy Policy

Last updated: January 1, 2026

At ScanwiseAI ("we", "our", or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Email address: Used for account authentication and communication.
• Password: Stored securely using industry-standard encryption.
• Display name: Optional, used to personalize your experience.

1.2 Device Information

We automatically collect certain device information to ensure security and prevent unauthorized access:

• Device identifier: A unique ID to identify your device.
• Device model and manufacturer: To optimize app performance.
• Operating system version: For compatibility purposes.
• App version: To provide appropriate support.

1.3 Usage Data

We collect information about how you use our Service:

• Features used and actions taken within the app
• Time and frequency of use
• Error logs and crash reports

1.4 Document Data

When you scan documents:

• Images of scanned documents are processed locally on your device
• OCR-extracted text may be stored for search functionality
• Premium users: Documents may be backed up to secure cloud storage

2. How We Use Your Information

We use the collected information for:

• Providing the Service: To operate and maintain our application.
• Account management: To create and manage your user account.
• Security: To detect and prevent fraud, unauthorized access, and abuse.
• Device limiting: To enforce our device limit policy (maximum 3 devices per account).
• Improvement: To analyze usage patterns and improve our Service.
• Communication: To send important updates, security alerts, and support messages.
• Legal compliance: To comply with applicable laws and regulations.

3. Data Storage and Security

3.1 Where We Store Your Data

Your data is stored on secure servers provided by Supabase, located in the European Union. We implement appropriate technical and organizational measures to protect your personal data.

3.2 Data Encryption

• All data transmitted between your device and our servers is encrypted using TLS 1.3.
• Passwords are hashed using bcrypt with salt.
• Sensitive data at rest is encrypted using AES-256 encryption.

3.3 Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our Service. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service providers: With trusted third parties who assist us in operating our Service (e.g., cloud hosting, analytics).
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets.
• Protection: To protect our rights, privacy, safety, or property.

5. Third-Party Services

Our Service uses the following third-party services:

• Supabase: Authentication and database services
• RevenueCat: Subscription and payment processing
• Expo: Application development and updates

Each of these services has their own privacy policy governing the use of your information.

6. Your Rights

Under GDPR and other applicable laws, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to the processing of your data.
• Restriction: Request limitation of data processing.
• Withdraw consent: Withdraw previously given consent at any time.

To exercise any of these rights, please contact us at privacy@scanwiseai.com.

7. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

8. Cookies and Tracking

Our mobile application does not use cookies. Our website may use essential cookies for functionality and analytics cookies to understand how visitors use our site. You can control cookie preferences through your browser settings.

9. International Data Transfers

Your data is primarily stored and processed within the European Union. If we need to transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@scanwiseai.com
• Support: Visit our Support page

12. Data Protection Officer

For matters related to data protection, you may contact our Data Protection Officer at dpo@scanwiseai.com.