PRIVACY
ScanCheck is an anonymous product verification tool. We collect the minimum we need to answer the question you came to ask, and not a byte more. This policy describes exactly what we do and don't do.
What we collect
- SCAN IMAGE — When you point your camera at a label, the photo is sent to our edge function so it can extract the brand, batch ID, and product name. We do not store the image. It exists in memory only for the duration of the request.
- TYPED INPUT — If you use the typed fallback, your brand / batch / product entries are sent to our edge function for the same reason. We do not store them.
- ANONYMOUS DEVICE ID — A random string stored in your browser's localStorage so we can rate-limit abuse. We don't link it to you, your email, your IP, or anything else.
- VERIFICATION REQUESTS — If you tap "Request Verification" on a YELLOW result, the brand and batch you scanned are added to our review queue. No personal data is attached.
What we don't collect
- No account. No login. No email. No password.
- No name, address, phone number, payment info (Apple handles billing for the iOS app).
- No advertising ID. No third-party analytics. No tracking pixels.
- No location. No contacts. No photos library access beyond the scan you take.
- No retention of scanned images or typed inputs after the request completes.
Subscriptions (iOS only)
The iOS app offers two subscriptions to unlock unlimited scans. These are processed by Apple. ScanCheck receives a yes/no entitlement state from Apple's StoreKit API; we never see or store your payment details. Cancel any time in the iOS Settings app under your Apple ID > Subscriptions.
Third parties
- SUPABASE — hosts our database of public lab certificates and our edge functions. Processes scan requests in transit; does not retain scan content.
- ANTHROPIC — provides the vision model that reads label content. Receives the scan image for the duration of the request and does not retain it for training.
- APPLE — handles iOS subscription billing for the App Store version.
- CLOUDFLARE PAGES — serves this website. Standard request logs (IP, timestamp) are retained per Cloudflare's policy for security purposes.
Your rights
Because we don't have an account system, there's nothing about you for us to delete on request. If you want to wipe your scan history on the web, clear your browser's localStorage for scancheck.app. On iOS, offload + reinstall the app from the App Store.
Verification requests already in our queue are tied only to the brand + batch text you scanned, not to you. If you want a specific submission removed from our queue, email the address below and reference the brand + batch.
Children
ScanCheck is rated 4+ and contains no medical, financial, gambling, or advertising content. We do not knowingly collect data from anyone under the age of 13.
Changes
If we change this policy in a meaningful way, we'll bump the version at the top of the page and the effective date. The previous version will remain accessible in the git history of the public repo.
Contact
Questions, requests, or a request to remove a queued verification: [email protected]