Privacy Policy

Scanly, published on the App Store and Google Play as QR & Barcode Scanner: Food, is a free QR and barcode scanner application developed by HDFoundry. We are committed to protecting your privacy and being transparent about how the app works.

The short version

Scanly does not require an account, and we do not collect or store personally identifiable information on our servers. Your scan history stays on your device. The one thing our backend keeps is the number of a barcode that no database could identify, so the catalogue can be filled in later. It is a bare number, with nothing attached that points back to you.

Camera and photo library access

Scanly requests access to your device camera and photo library to scan QR codes and barcodes with the camera, to let you pick an image from your library to scan, and to save a generated code to your Photos. All image processing is performed entirely on your device. Camera frames and gallery photos are decoded on the device. No photos, images, or camera frames are ever transmitted to our servers or any third party.

Crash diagnostics and analytics (Firebase)

On production builds, Scanly uses Firebase Crashlytics, Firebase Analytics and Firebase Performance Monitoring (Google LLC) to keep the app stable, fast, and understand how features are used. Scanly contains no advertising SDK and shows no ads.

• Crash diagnostics: type and location of a crash in the app code, device model, OS version, app version, and the random app-instance ID Firebase assigns to this installation (not linked to your identity). Crash data never includes your scan history or any content from your camera or photos.
• Usage analytics: which screens and features are visited, general session duration and frequency, aggregated device type and OS version, and coarse country or region (not precise GPS).
• Performance monitoring: app start-up time, screen rendering and network request timings, with no scan content.

Firebase assigns a random app-instance ID to each installation. It is used for analytics and crash reports and is not tied to your name, account, or advertising identifier. Scanly does not use advertising identifiers.

How we use information

The limited data we collect is used exclusively to diagnose and fix crashes, understand which features to prioritize, improve stability and performance, and detect and prevent abuse. We do not sell, rent, or trade your personal information.

Product lookups and third-party databases

When you scan a barcode, the barcode value (a numeric string) is sent to our own backend, which performs the lookup on your behalf. The app never contacts the databases below directly, so they receive our server's network address rather than yours. No account, user identifier, or scan history travels with a lookup. The sources we query are:

• Open Food Facts: food product database
• Open Beauty Facts: cosmetics and personal care database
• Open Products Facts: general consumer products database
• Open Library (Internet Archive): book metadata by ISBN
• UPCitemdb: general product lookup

These services may log the barcode query as part of their standard server operations, subject to their own privacy policies. We encourage you to review those policies.

Product images are the one exception. We never copy or host product photographs. Instead the app loads them straight from the source's image server using the address that source provides, which means your device connects to that server directly and it can see your IP address in the process. If you would rather avoid this, avoid opening product detail screens.

Barcodes we could not identify

If a barcode you scan is not found in any of the sources above, our backend records the barcode number so the catalogue can be completed later. The stored record holds only the barcode, a status, how many times it has been looked up, and the first and last time it was seen. It contains no account, user or device identifier, IP address, or anything else that could connect it to you, and there is no way to tell which scans came from the same person or device.

Data storage and security

Your scan history, including previously scanned barcodes and their associated product data, is stored exclusively in local storage on your device. This data is never uploaded to our servers, is accessible only to the Scanly app, and is deleted when you uninstall the app or clear its data. You can clear your scan history at any time from the app's settings screen. Product details fetched for a scan are kept in an on-device cache for 48 hours so that repeat lookups are fast and do not re-query the network.

Deleting your data

• On your device: clear your scan history from Settings in the app, or uninstall Scanly to remove all local data, including saved codes and the cache.
• On our servers: we hold no account and no personal data. For anything server-side, including Firebase data tied to your installation, email [email protected].

Children's privacy

Scanly is not directed to children under 13 (or the applicable age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take prompt action.

Your rights

Depending on your location, you may have rights to access information we hold, request deletion, opt out of analytics, and request data portability. Since Scanly does not collect personal data on our servers, most rights are exercised directly on your device by clearing app data or uninstalling the app. For any request related to Firebase data, contact us and we will assist in submitting appropriate requests to Google.

Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we update the date above and, where appropriate, notify you through an in-app notice. Continued use of Scanly after the effective date constitutes acceptance of the updated policy.

Contact

Questions, concerns, or requests regarding this Privacy Policy? Email [email protected]. We aim to respond within 7 business days.