This Privacy Policy explains what information Scanor collects, how we use it, and the choices you have.
Controller and contact
Scanor is responsible for the processing described in this Privacy Policy. For privacy questions or requests, contact us at contact@myshopy.es.
Current release privacy details
Optional sign-in with Apple, Google or Facebook sends the selected provider's authentication proof to Scanor. Scanor stores provider account identifiers and available account metadata for authentication and account linking. Scanor does not offer phone-number account recovery.
Scanor stores account or guest-linked scans, Favorites, Loved, reviews, ratings, corrections, contributions, XP and challenge progress. Display names, review text and author avatars can be public. Do not submit private information in public content.
Firebase Analytics and Crashlytics collection follows the app's separate privacy choices. Unknown or disabled consent keeps those collections disabled. Firebase Remote Config also supplies feature configuration and uses installation-related SDK information independently of those choices. SDK identifiers and service diagnostics are not necessarily anonymous. Scanor does not configure Facebook advertising or automatic app-event logging.
Country detection is optional. Device coordinates are passed to the platform reverse-geocoding service to obtain a country code; Scanor's country payloads contain that code, not coordinates. On iOS, Apple's geocoding service may process the coordinates. You can select a country manually instead.
Search text is sent to Scanor to perform a search; network services may also process IP addresses and request diagnostics. Camera previews and local OCR are distinct from an explicit upload.
In the app, open Profile, then Account Security, then Delete Account and complete the requested identity confirmation. Provider revocation and storage cleanup can require retries. Deleting Scanor does not delete an Apple, Google or Facebook account.
Scanor account deletion does not itself establish deletion of every third-party SDK record or backup. Service-specific retention and legal or security obligations apply; contact contact@myshopy.es for privacy or deletion questions. This notice does not promise an unverified universal retention period.
1. What we collect
We collect only what we need to run Scanor and improve product information for everyone.
Account identifier and contact.
Display name
Shown on contributions and ratings.
Google account data
When you sign in with Google.
Date of birth
Optional profile information used for profile completion and, in the future, potentially for age-appropriate content.
Gender
Optional profile information used for profile completion and, in the future, potentially for personalization.
Device information
Model, OS, app version.
Analytics & crash reports
To improve reliability.
Camera access
Only used for scanning.
Scan history
Products you've scanned.
Favorites
Products you've saved.
Contribution history
Edits and additions you've made.
Approximate location
Country / region only.
Approximate location
Scanor does not send or store precise device coordinates on its backend. If you choose automatic country detection, your device coordinates may be processed by the platform's reverse-geocoding service to determine a country code. You can select your country manually instead.
Camera
Camera access is used only for scanning barcodes, product labels, ingredients, nutrition tables, and product photos.
2. How we use your data
- Run, secure, and improve Scanor.
- Show ingredients, safety, and Scanor Score for products.
- Attribute and display community contributions.
- Communicate updates, support replies, and important notices.
- Detect abuse, fraud, and protect the community.
We do not sell your personal data.
Legal bases for processing
We process personal data only where we have a lawful basis to do so.
Providing Scanor and your account. We process account information, authentication data, scans, search activity, Favorites, Loved items, contributions and other account-linked activity where necessary to provide Scanor, perform our agreement with you, or take steps at your request.
Optional features and analytics. Where processing is optional and requires consent, including optional Analytics, Crashlytics, certain profile information and optional country detection, we rely on your consent. You can withdraw consent through the available privacy settings without affecting processing that took place before withdrawal.
Safety, security and moderation. We may process account, activity, technical and moderation information where necessary for our legitimate interests in protecting Scanor, preventing abuse and fraud, enforcing community rules, securing our systems and maintaining the reliability of the service. We balance these interests against your rights and freedoms.
Legal requirements and claims. We process information where necessary to comply with applicable legal obligations and, where permitted, for our legitimate interests in establishing, exercising or defending legal claims.
Where we rely on legitimate interests, you may have the right to object to that processing.
Service providers and international transfers
We use trusted service providers to operate Scanor, including cloud hosting and storage providers, optional authentication providers such as Apple, Google and Facebook, Firebase services used for analytics, crash reporting and configuration, and providers used for support communications.
These providers process personal data as needed to provide their services and subject to applicable data-protection terms. Some providers may process data outside the European Economic Area. Where required, international transfers are protected using adequacy decisions, Standard Contractual Clauses or other safeguards permitted by applicable law.
You can contact us at contact@myshopy.es for more information about applicable safeguards.
3. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email us at contact@myshopy.es.
4. Data deletion
You can delete your Scanor account and associated personal data directly in the Scanor app via Profile → Account Security → Delete Account. See the Delete Account page for full instructions. Email support is only a fallback if you cannot access the app.
Data retention
We keep personal data only for as long as necessary for the purposes described in this Policy. Account-linked personal data is deleted or de-identified when an account is deleted, subject to limited legal, security, fraud-prevention, dispute-resolution and backup requirements. Analytics, diagnostics, server logs and backups are retained for limited periods under our settings and applicable service-provider terms.
5. Contact
Questions about this policy? Email contact@myshopy.es.