Decoway Lifestyle Private Limited ("Company", "we", "our", or "us") operates the ScanPro mobile application (the "App"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our App. It also explains your rights regarding your personal data under applicable privacy laws worldwide. Please read this policy carefully. By using ScanPro, you agree to the collection and use of information in accordance with this policy.
The data controller responsible for processing your personal data is:
Our Data Protection Officer (DPO) can be contacted for any privacy-related questions or concerns:
We aim to respond to all privacy-related inquiries within 30 days.
ScanPro is designed with a privacy-first approach. We minimize data collection and process most information locally on your device. Below is a complete summary of data we may collect:
The following data is stored exclusively on your device and is never transmitted to our servers:
When you consent or enable specific features, the following data may be collected by third-party services integrated into the App:
| Data Type | Collected By | Condition |
|---|---|---|
| Advertising ID | Google AdMob & mediation partners | |
| Ad interaction data | Google AdMob & mediation partners | |
| Device info (model, OS version) | Google AdMob & mediation partners | |
| Approximate location (IP-based) | Google AdMob & mediation partners | |
| Crash logs & stack traces | Firebase Crashlytics | Opt-In |
| Anonymous usage analytics | Firebase Analytics | |
| Product barcode number | Open Food Facts API | Automatic |
We want to be transparent about what we do not collect:
We process your data based on the following legal grounds:
We use the limited information collected for the following purposes:
No Server-Side Processing: ScanPro does not operate its own backend servers. All core App functionality (scanning, code generation, history, inventory) is processed entirely on your device.
Your Right to Know: You have the right to know whether your personal data is shared with third parties. This section fully discloses all data sharing practices.
We do not sell, trade, or rent your personal information to any third party. We do not share personal data for purposes unrelated to providing or improving the App. Information may be shared only in the following limited circumstances:
When you use the App's share, export, or open features, data is shared with other apps you select via your device's native sharing mechanism. This is always initiated by you and under your control.
We may disclose information if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.
The App integrates the following third-party services. Each operates under its own privacy policy:
Google AdMob may route ad requests through mediation partners. The following third-party domains may be contacted by the ad SDK to serve, verify, and measure advertisements:
| Domain | Service | Purpose |
|---|---|---|
| google-analytics.com | Google Analytics | Ad performance measurement and analytics |
| gstatic.com | Google Static Content | Ad creative delivery and static resources |
| youtube.com | YouTube (Google) | Video ad content delivery |
| outbrain.com | Outbrain | Programmatic ad delivery via ad mediation |
| zemanta.com | Zemanta (Outbrain) | Programmatic ad delivery via ad mediation |
| cheqzone.com | CHEQ | Ad verification and fraud detection |
These services process data according to their own privacy policies. We do not control the data processing practices of these third-party ad partners. All ad-related data collection occurs only after you provide consent.
ScanPro is a free App supported by advertising through Google AdMob. We are committed to responsible ad practices:
The App may display the following ad formats:
We use Google's User Messaging Platform (UMP) to manage advertising consent:
On Android 13 and above, the App requests the AD_ID permission to access Google's resettable Advertising ID. This identifier is used by AdMob to serve and measure ads. You can reset or disable this ID in your device's privacy settings.
ScanPro requests only the permissions necessary for its core features. Below is a full explanation of each permission:
| Permission | Purpose | Required? |
|---|---|---|
| Camera | Scan barcodes, QR codes, and documents using the device camera. Images are processed in real-time on-device and are never stored or uploaded. | Core feature |
| Internet | Required for product lookups (Open Food Facts), ad delivery (AdMob), crash reporting (Firebase Crashlytics), and analytics (Firebase Analytics). | Core feature |
| Network State | Detect network connectivity to provide appropriate offline/online behavior. | Core feature |
| Vibrate | Provide haptic feedback when a barcode is successfully scanned. | Optional UX |
| Advertising ID | Allow Google AdMob to serve and measure advertisements (Android 13+). | Ad-supported |
Camera Hardware: The camera is declared as not required in the App manifest, meaning the App can be installed on devices without a camera. Scanning features will simply be unavailable on such devices.
Note on Storage Permissions: The App does not request broad storage access. All file operations use Android's scoped storage model (Android 10+). The READ_EXTERNAL_STORAGE and WRITE_EXTERNAL_STORAGE permissions are explicitly removed from the App manifest. Legacy storage permissions that may appear in third-party library manifests are restricted to Android 9 and below, which is below the App's minimum supported version (Android 10 / API 29).
Your scan history, generated codes, inventory data, and preferences are stored in a local SQLite database and device storage within the App's private sandbox. This data:
Data collected by third-party services (Google AdMob, Firebase) is stored and processed according to their respective privacy policies and data retention schedules. We do not have direct access to raw data stored by these services.
We retain data only for as long as necessary to fulfill the purposes described in this Privacy Policy. Our retention practices are as follows:
| Data Type | Retention Period | Details |
|---|---|---|
| Local App Data (scan history, generated codes, inventory, tags, preferences) | Until you delete or uninstall | Retained on your device only. We do not access, back up, or retain this data on any server. |
| Firebase Crashlytics | 90 days | Crash logs are automatically deleted by Google Firebase after 90 days. |
| Firebase Analytics | 14 months | Anonymous usage data is automatically deleted by Google Firebase after 14 months. |
| Google AdMob | Up to 2 years | Ad interaction data retained per Google's data retention policies. |
| Open Food Facts | Transient | Barcode lookup requests are not stored by us. Open Food Facts' own retention policy applies to their server logs. |
While the App processes data locally on your device, the third-party services we use (Google AdMob, Firebase, Open Food Facts, and ad mediation partners) may process data in countries outside your country of residence, including the United States. These transfers are conducted in compliance with applicable data protection laws and subject to appropriate safeguards, including:
Regardless of where you live, you have the following rights regarding your data:
| Right | How to Exercise |
|---|---|
| Access your data | View all your data directly in the App (History, Inventory, Settings) |
| Export your data | Export scan history and inventory data in CSV format from the App |
| Delete your data | Clear history in Settings, delete inventory items, or uninstall the App |
| Control ad personalization | Settings > Ad Preferences to change or revoke consent at any time |
| Control crash reporting | Settings > Crash Reporting to enable or disable (disabled by default) |
| Reset Advertising ID | Device Settings > Privacy > Ads > Reset Advertising ID |
| Opt out of personalized ads | Device Settings > Privacy > Ads > Opt out of Ads Personalization |
| Withdraw consent | You may withdraw any previously given consent at any time without affecting the lawfulness of processing before withdrawal |
If you are located in the EEA, UK, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR):
To exercise these rights, contact our DPO at dpo@thecocoder.com. We will respond within 30 days.
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights:
Contact apps@thecocoder.com to exercise your CCPA/CPRA rights.
If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) provides you with the following rights:
The legal bases for processing under LGPD are consent (for ads, analytics, and crash reporting) and legitimate interest (for core App functionality). Contact apps@thecocoder.com or our DPO at dpo@thecocoder.com to exercise your LGPD rights.
If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you with the following rights:
To exercise your VCDPA rights, contact apps@thecocoder.com. If we decline your request, you may appeal by contacting us, and if unsatisfied with the outcome, you may contact the Virginia Attorney General.
If you reside in Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Oregon (OCPA), Texas (TDPSA), Montana (MCDPA), Iowa (ICDPA), Delaware (DPDPA), New Hampshire, New Jersey, Nebraska, Minnesota, Maryland, or Indiana, you may have similar privacy rights including:
Contact apps@thecocoder.com to exercise your rights under any US state privacy law.
If you are located in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) provides you with the right to access, correct, and withdraw consent for the processing of your personal information. Contact apps@thecocoder.com to exercise your rights.
If you are located in South Africa, the Protection of Personal Information Act (POPIA) provides you with rights including the right to access, correct, and delete your personal information, and the right to object to processing. Contact apps@thecocoder.com or our Information Officer at dpo@thecocoder.com.
If you reside in Australia (Privacy Act), Japan (APPI), South Korea (PIPA), Thailand (PDPA), Singapore (PDPA), or any other jurisdiction with applicable privacy legislation, you may have similar rights to access, correct, delete, and port your personal data. Contact apps@thecocoder.com to exercise your rights.
ScanPro is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at apps@thecocoder.com and we will take steps to delete such information.
The App is rated for general audiences. All data processing occurs locally on the device. Advertising shown to users complies with Google's child-directed content policies.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:
We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy-related inquiries within 30 days.