Last updated: October 30, 2026
This Privacy Policy explains how Seapptic Limited collects, uses and shares personal information when you use the AI Scan app (also published as “AI Scanner・Objects Identifier”, the “App”), our website at https://scanai.top/, and related services (together, the “Services”). Capitalised terms not defined here have the meaning given in our Terms and Conditions of Use (the “Terms”).
1.1. Controller. Seapptic Limited, 700 North Fairfax St, Ste 614, Alexandria, VA 22314, USA, is the controller of your personal information for the purposes of the EU and UK General Data Protection Regulation (“GDPR”) and the business responsible under US state privacy laws.
1.2. Privacy contact. For all privacy questions and requests: legal@seapptic.com. Full contact details are in Section 16.
2.1. Information you provide to us
Photos you scan (Input Content) and Results. Photographs you take or select in the App to identify an item, and the Results generated from them. The App is designed to identify objects, not people, but a photo may incidentally show a person, or, for some categories, part of your body such as your skin. How we process photos is described in Section 4.
Purchase information. When you buy a subscription or Scan Credits, the app store collects your payment details. We receive limited information about the transaction — that a purchase, renewal, cancellation or refund has occurred, the product and the date — but never your payment details.
Communications. Information you provide when you contact customer support by email, respond to surveys or give feedback, including the content of your messages and any attachments.
2.2. Information we collect automatically
Device and technical information. Device model and manufacturer, operating system and version, language, time zone, app version, IP address and approximate location derived from it (country or region), a device identifier generated by the App, and advertising identifiers (such as IDFA on iOS or Advertising ID on Android) where you have permitted their use.
Usage information. How you use the App: features and categories used, screens viewed, scan requests and their outcome, Scan Credits used, session length, crashes and diagnostic logs.
SDKs. In the App we use software development kits (SDKs), as described in Section 6.
Support interactions. When you contact support, we keep a record of the conversation, including the date and time we received each message.
Scan Credit balance and purchases. Your Scan Credit balance and your purchases are stored on your device and may also be recorded in our systems.
2.3. Information that stays on your device
Your scan history — the photos you have scanned, the Results and any notes you add — is stored on your device and is not kept by us as a history. It may be included in your device’s backups under your device settings. The camera preview is processed entirely on your device and is never transmitted to us; we receive a photograph only when you take or select one and request a scan.
2.4. Information from other sources
App stores. When you purchase through the Apple App Store or Google Play, we receive transaction and subscription status information (for example, that a purchase, renewal, cancellation or refund has occurred) but not your payment details.
Advertising and attribution partners. We may receive information about which advertisement led you to install the App, to measure the effectiveness of our marketing.
The table below sets out the purposes for which we process personal information, the categories of information involved, and the legal basis we rely on where the GDPR or UK GDPR applies.
| Purpose | Information used | Legal basis (GDPR/UK GDPR) |
|---|---|---|
| Identify the item you scan and generate the Result you request | Photos you scan | Performance of our contract with you |
| Process purchases, subscriptions and Scan Credits | Purchase information, device identifier | Performance of a contract; legal obligation (tax and accounting) |
| Provide customer support and respond to requests | Communications, purchase and device information | Performance of a contract; legitimate interest in resolving issues |
| Detect and prevent the upload and processing of content that violates our Terms | Photos you scan, Results | Legitimate interest in protecting users and the Services and in preventing illegal content; legal obligation |
| Review reports we receive about content that may violate our Terms or someone’s rights, and act on them | Information you provide with the report, communications | Legitimate interest in enforcing our Terms and protecting users; legal obligation |
| Operate, secure and improve the Services; fix bugs; understand how features are used | Device, usage and diagnostic information (not photos) | Legitimate interest in maintaining and improving the Services |
| Measure and optimise our own advertising; show you relevant ads for the App on third-party platforms | Device and advertising identifiers, usage events | Your consent (SDKs and advertising identifiers); where consent is not required, legitimate interest |
| Prevent fraud, abuse and violations of our Terms; resolve disputes; keep evidence of acceptances and requests | Device, usage and purchase information; acceptance and request records | Legitimate interest in protecting the Services and users; legal obligation; establishment and defence of legal claims |
| Comply with law and respond to legal requests | Any of the above as required | Legal obligation |
3.1. We do not use the photos you scan or the Results generated for you for advertising, marketing, profiling, analytics about you, or to train machine learning models. Photos are used only to generate the Result you request and to run the automated content checks described in Section 4.2.
3.2. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights. You may object at any time (Section 13).
4.1. What we process. When you request a scan, we process the photograph to identify the item shown and to produce the Result — for example, a description of a plant, animal, coin or product and related information. The App is designed to identify objects, not people. We do not perform facial recognition or biometric identification: we do not detect faces, measure facial features or extract any biometric identifier from your photos, and we do not keep any template or model of a face. A photo may nevertheless show a person, and we treat all photos you scan with the care described in this Section.
4.2. Purpose limitation. We do not use your photos to identify or authenticate any person, to verify identity, to match against any database of people, to build a profile, to track anyone across apps or services, for advertising, or to train AI models.
Automated content checks. We apply automated checks to photos and Results in order to detect content prohibited by our Terms and to prevent its processing. These checks are carried out for us by our AI providers, as described in Section 5. They are automated and limited: they do not identify anyone, and they do not verify the age or the identity of any person shown in an image. Apart from these checks we do not review uploads in advance.
4.3. Your choice. A photo is transmitted to us only when you take or select it and request a scan. If you do not wish your photos to be processed as described in this Section, do not use the scanning features; the processing is necessary to provide them.
4.4. Retention and deletion schedule
We keep your photo only for as long as is necessary to generate the Result you requested. Specifically:
• The uploaded photo is permanently deleted from our systems as soon as the Result has been generated. This applies to all photos, whatever they show.
• If for any reason a scan does not complete, the uploaded photo is permanently deleted no later than 30 days after upload.
• The Result and the related request data are kept on our systems for up to 30 days to deliver the Result and to resolve technical issues, then deleted. A copy of the Result is stored in the scan history on your device until you delete it.
• Photos and Results are deleted earlier if you ask us to delete your data, upon verification of the request.
• We do not keep backup copies of uploaded photos.
• The AI providers that process your photo are described in Section 5, together with their own retention periods, which we cannot shorten.
4.5. No sale or disclosure. We do not sell, lease, trade or otherwise profit from your photos. We disclose them only to the AI providers listed in Section 5, and where required by law.
4.6. Security. We protect your photos using at least the same standard of care we apply to other confidential and sensitive information, including encryption in transit and access controls.
4.7. Photos of other people
You are responsible for the photos you scan. By scanning a photo you confirm that you have the right to do so and that it does not show an identifiable person other than yourself without that person’s permission. Apart from the automated checks described in Section 4.2, we do not review uploads in advance.
4.8. App Store disclosures. For users of the iOS App: the App requests access to your camera and to your photo library when a feature needs them. The camera preview never leaves your device. Only photos you explicitly choose to scan are transmitted to us and to the providers in Section 5, solely to generate the Result you request; they are deleted as soon as the Result is generated and are never sold. The App does not collect Face Data within the meaning of Apple’s guidelines, because it does not detect or measure faces.
5.1. To generate Results we use third-party AI providers. When you request a scan, your photo is transmitted from our servers to the relevant provider over an encrypted connection solely to identify the item and generate the requested content, and the result is returned to the App. The App does not send your photo to any provider directly; all requests pass through our systems.
5.2. Providers we use. The following providers receive your photos, depending on the feature you use:
| Provider | Role | Location | Data handling commitments |
|---|---|---|---|
| OpenAI, L.L.C. | Identifies the item in your photo, generates the Result, and performs the automated content checks described in Section 4.2 | USA | Accessed under OpenAI’s business API terms; does not train on API data; retains data for up to 30 days for abuse monitoring |
5.3. Reference information. To add images, links and reference information to a Result, we may send a text description of the identified item (for example, the name of a plant or coin) to search and reference-data providers. Your photo is not sent to these providers.
5.4. When data is transmitted. Data is transmitted only when you request a scan. Browsing the App, viewing your scan history and using the camera preview do not transmit any image to us or to any provider.
5.5. Changes to providers. We may change the providers we use; this Section is updated when we do.
6.1. What we use. In the App we use software development kits (SDKs) provided by third parties. These technologies collect device and usage information for the purposes below.
| Category | Purpose | Providers | Can you refuse? |
|---|---|---|---|
| Strictly necessary | Operate the App, process purchases, prevent fraud | Our own systems; app stores | No — required for the Services to work |
| Analytics and crash reporting | Understand how the App is used, fix problems, improve features | Amplitude; Firebase (Google) | Yes |
| Attribution | Measure which advertisement or campaign led you to install the App | AppsFlyer | Yes |
| Advertising | Measure performance of our ads and show relevant ads for the App on third-party platforms | Advertising platforms (such as Meta, TikTok, Google Ads and Apple Search Ads) | Yes |
| Support | Provide customer support and keep records of conversations | Zendesk | No — required to provide support |
6.2. Consent. Where required by law — including for users in the European Union, the United Kingdom and those US states whose laws require it — we ask for your consent before non-essential SDKs are activated, and they remain inactive until you agree. On iOS, advertising identifiers are used only if you allow tracking when prompted by the operating system. On Android, you can reset or delete your Advertising ID in device settings.
6.3. Your choices. You can adjust tracking permissions in your device settings and opt out of interest-based advertising through the industry tools of your region (such as youradchoices.com or youronlinechoices.eu). Where US state law gives you a right to opt out of the sale or sharing of personal information or of targeted advertising, you can exercise it as described in Section 14.
7.1. Service providers. We share personal information with the following companies, which provide services to us:
| Provider / category | Service | Location | Information shared |
|---|---|---|---|
| Google LLC (Google Cloud, Firebase) | Cloud hosting, crash reporting | USA / EU | Device, usage information, photos and Results (hosting, for the periods in Section 8) |
| AI providers (Section 5) | Identification of items and content checks | USA | Photos you scan — deleted after the Result is generated |
| Search and reference-data providers (Section 5.3) | Images, links and reference information for Results | USA | Text description of the identified item; no photos |
| Apple Inc. / Google LLC (App Store, Google Play) | In-app purchases and subscriptions | USA | Purchase and subscription status; see also 7.2 |
| Zendesk | Customer support | USA / EU | Email, support conversations, purchase and device information needed to help you |
| Amplitude; Firebase | Product analytics and crash reporting | USA / EU | Device and usage information |
| AppsFlyer | Install attribution | USA / EU | Device identifiers, install and campaign events |
| Advertising platforms (Section 6) | Advertising measurement and delivery | USA | Device and advertising identifiers, usage events |
7.2. App stores and refunds. If you request a refund for a purchase made through the Apple App Store or Google Play, we may share the following information with Apple or Google to help them assess the request, as permitted by their policies: the time elapsed since installation and your total usage time; whether the purchased subscription or Scan Credits were consumed and to what extent; whether an introductory offer or trial was used; your prior refund history; and an anonymous identifier. We do not share your photos or Results for this purpose.
7.3. Legal and safety. We may disclose personal information where required by law, court order or governmental request; to enforce our Terms; to detect and prevent fraud or abuse; or to protect the rights, property or safety of any person.
7.4. Business transfers. If we are involved in a merger, acquisition, financing, reorganisation or sale of assets, including a transfer of the App to another company in our group, personal information may be transferred as part of that transaction. We will notify you as described in Section 15.
7.5. Aggregated information. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.
7.6. Sale and sharing. We do not sell personal information for money. Where you consent to advertising SDKs (Section 6), our use of them constitutes “sharing” of personal information for cross-context behavioural advertising, and may constitute a “sale,” as those terms are defined under certain US state laws. Where you do not consent, or you opt out as described in Sections 6.3 and 14, we do not share your personal information for these purposes. We never sell or share your photos or Results for any purpose.
| Information | Retention period |
|---|---|
| Photos you scan | Deleted as soon as the Result has been generated; in any event no later than 30 days after upload (Section 4.4) |
| Results and related request data on our systems | Up to 30 days, then deleted; a copy stays in the scan history on your device until you delete it |
| Scan history on your device | Under your control; removed when you delete it in the App or delete the App’s data |
| Purchase and transaction records | 7 years from the transaction, to comply with tax, accounting and app store requirements |
| Support conversations, including the date and time each message was received | 3 years from the last message, to handle follow-up questions and disputes |
| Analytics and usage data | Up to 24 months, then aggregated or deleted |
| Acceptance and request records (acceptance of the Terms, tracking and ad choices, arbitration opt-out, deletion requests) | At least three (3) years, or one (1) year after your subscription ends, whichever is longer; longer where required by law or while a claim or dispute is pending. After a deletion request these records are kept in minimal form under a pseudonymous identifier, used only as evidence and for no other purpose |
| Server and security logs | Up to 12 months |
8.1. When the applicable retention period ends we delete or irreversibly anonymise the information.
9.1. We use technical and organisational measures appropriate to the sensitivity of the information, including encryption in transit and access controls. Access to uploaded photos is restricted to the systems that need it to provide the Services.
10.1. We are based in the United States, and our service providers are located in the United States and the European Union (Sections 5 and 7). Your information may therefore be transferred to and processed in countries other than your own.
10.2. Where personal information is transferred from the EEA, the United Kingdom or Switzerland to a country that has not been recognised as providing an adequate level of protection, we put in place the safeguards available for that transfer, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or the EU–US Data Privacy Framework where the provider is certified. To ask which safeguards apply to a particular provider, contact legal@seapptic.com.
11.1. Scan history. Your scan history is stored on your device. You can delete individual items in the App, or remove all of it by deleting the App’s data or the App itself. Information stored only on your device is under your control and is not deleted by us.
11.2. Information we hold. The App does not require an account, so most of what we hold is linked to a device identifier rather than to you by name. To ask us to delete the information we hold, email legal@seapptic.com and include the device identifier shown in the App or your app store order number so that we can locate it. When we do, we delete or de-identify the information linked to that identifier, except for: (a) records we must keep by law, such as transaction records; (b) information reasonably necessary to prevent fraud or abuse, protect security, resolve disputes, preserve evidence, comply with a legal hold or enforce the Terms, including the acceptance and request records described in Section 8, retained only for as long as that purpose requires; and (c) any backup copies, which are isolated from ordinary use and deleted under our backup schedule. We do not keep backup copies of your photos.
11.3. Effect on your subscription and Scan Credits. Deleting the App or your data does not cancel a subscription purchased through the Apple App Store or Google Play; you must cancel it through the store, as described in Section 6.7 of the Terms. Scan Credits may become unavailable after you delete the App; see the Terms for details.
12.1. The Services are intended for adults. We do not knowingly collect personal information from anyone under 18 years of age, and our Terms do not permit scanning photos of any person under 18. Apart from the automated checks described in Section 4.2, we do not review uploads in advance, and those checks do not verify the age or the identity of any person shown in an image. If we learn that we have collected personal information from a person under 18, or that a photo has been scanned in breach of our Terms, we will delete it.
12.2. If you believe a person under 18 has provided us with personal information, or that a photo of a person under 18 has been scanned in breach of our Terms, contact us at legal@seapptic.com.
13.1. Depending on where you live, you have some or all of the following rights in relation to your personal information: to access it and receive a copy; to correct it; to delete it; to restrict or object to its processing; to receive it in a portable format; to withdraw consent at any time (without affecting processing before withdrawal); not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects; and to lodge a complaint with a supervisory authority.
13.2. Photos and Results. Photos you scan are deleted automatically as described in Section 4.4. You may delete Results in the App, or request deletion of anything we still hold by contacting us; retention periods are set out in Section 8.
13.3. How to exercise your rights. Some rights can be exercised directly in the App (deleting your scan history, adjusting tracking permissions). For anything else, email legal@seapptic.com. Because the App does not require an account, we may ask you for the device identifier shown in the App or your app store order number to locate the information linked to you; we will ask only for the information necessary to do so. We will respond within one month (GDPR/UK GDPR) or 45 days (US state laws), extendable where the law permits, and will tell you if we need more time. A request sent to our customer support at support@aiscan.zendesk.com will also be treated as a request under this Section and passed to the same team.
13.4. Authorised agents. You may make a request through an authorised agent. We will need to verify the agent’s authority and your identity.
13.5. Complaints. We would prefer to resolve any concern directly, but you have the right to complain to the data protection authority in your country of residence, place of work or where the alleged infringement occurred. In the EU, a list of authorities is at edpb.europa.eu; in the UK, the Information Commissioner’s Office at ico.org.uk.
13.6. No discrimination. We will not deny you services, charge different prices or provide a different level of service because you exercised your privacy rights.
14.1. This Section supplements the rest of this Privacy Policy for residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other US states with comprehensive privacy laws.
14.2. Categories of personal information
In the preceding 12 months we have collected the following categories of personal information, from the sources and for the purposes described in Sections 2 and 3: identifiers (device and advertising identifiers, IP address, and your email address if you contact us); commercial information (purchases, subscriptions, Scan Credits); internet or network activity (usage, interactions with ads); geolocation (approximate, from IP); and visual information (photos you scan, which may incidentally show a person or part of your body).
We disclose these categories to the service providers listed in Section 7 for business purposes. We “share” identifiers and internet activity with advertising partners (Section 7.6). We do not sell personal information for money and do not sell or share visual information or Results.
14.3. Sensitive personal information
A photo you choose to scan may incidentally contain sensitive information — for example, a photo of an insect bite shows your skin. We use such photos only to provide the Result you request, delete them as described in Section 4.4, and do not use them to infer characteristics about you. This use is permitted without a right to limit under applicable law; you may nonetheless request that we limit it by contacting legal@seapptic.com.
14.4. Your rights and how to exercise them
You have the right to know, access, correct and delete your personal information; to opt out of the sale or sharing of personal information and of targeted advertising; to limit the use of sensitive personal information; to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling); and not to be discriminated against for exercising these rights. To opt out of sale, sharing or targeted advertising, disable ad tracking in your device settings or email legal@seapptic.com with the subject “Opt-Out”. For all other requests, email legal@seapptic.com. We will verify your request as described in Section 13.3.
14.5. Appeals
If we decline to act on your request, you may appeal by replying to our decision email or writing to legal@seapptic.com with the subject “Privacy Appeal” within 30 days. We will respond within 45 days (60 days where permitted). If your appeal is denied, you may contact your state Attorney General; for Virginia residents, the Office of the Attorney General at oag.state.va.us.
14.6. California-specific disclosures
Shine the Light (Civil Code §1798.83): California residents may request, once per calendar year, information about personal information we disclosed to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing. To make a request, email legal@seapptic.com. Do Not Track: the App does not respond to “Do Not Track” signals, because no common industry standard for such signals has been adopted.
15.1. We may update this Privacy Policy from time to time. The date of the current version is shown at the top.
15.2. If we make a material change — for example, using personal information for a new purpose, sharing it with a new category of recipients, or changing how your photos are processed — we will notify you in advance in the App, and where the law requires it we will ask for your consent. Changes that reduce your rights do not apply retroactively to information collected before the change.
Privacy requests and questions: legal@seapptic.com
Copyright complaints: legal@seapptic.com (see Section 14 of the Terms)
General support: support@aiscan.zendesk.com
Postal address: Seapptic Limited, 700 North Fairfax St, Ste 614, Alexandria, VA 22314, USA
© 2026 Seapptic Limited