Privacy Policy

Last updated: September 23, 2026

1. Who we are

ThisScan (the “App”) is developed and operated by ORANGE CORP LIMITED (“we”, “us”). This policy explains what data the App handles and why. Contact: support@thisscan.com.

2. Scanning happens on your device

Recognition of QR codes, barcodes and Data Matrix runs entirely on your device. Without an account, the contents of your scans, your history and your favourites are stored only on the device and are never sent to us.

3. Optional account and sync

You may create an account to sync your scan history across devices. In that case we process:

• your email address or phone number (used as your login) and a password you choose (stored only as a salted hash);
• the scan records you sync: the code contents, its detected type, favourite flag and scan date.

This data is used solely to provide sync between your devices. You can delete your account and all synced data at any time (see Delete account).

4. Analytics

To understand how the App is used and to fix problems, we use Google Firebase Analytics. It collects device and usage information such as device model, OS version, app version, country, session and screen events, and an app‑instance identifier. We never send the contents of your scans to analytics. You can limit analytics identifiers in iOS Settings › Privacy & Security › Tracking and Analytics.

5. Purchases and subscriptions

Premium subscriptions are sold through Apple’s App Store and billed to your Apple ID. We do not receive or store your payment card details. To unlock Premium features and handle renewals, we receive subscription status (purchase, renewal, cancellation, expiry) via RevenueCat, together with an anonymous app‑user identifier.

6. Camera and Photos

The App requests access to the camera to scan codes and to your photo library only when you choose a picture to scan or save a generated QR code. Images are processed on your device and are not uploaded.

7. Retention and deletion

• Local history stays on your device until you delete it or the App.
• Account and synced history are kept while your account exists and are deleted within 30 days after you delete the account.
• Analytics data is retained according to Google’s retention settings (up to 14 months).

8. Who else sees your data

We do not sell your data. We share it only with processors needed to run the App: Apple (App Store, in‑app purchases), Google Firebase (analytics), RevenueCat (subscription status), and our hosting provider. Each acts on our instructions and under its own privacy commitments.

9. Children

The App is not directed to children under 16, and we do not knowingly collect personal data from them.

10. Security

Data in transit is encrypted (HTTPS). Account tokens are stored in the device Keychain. Access to our servers is restricted to authorised personnel.

11. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Write to support@thisscan.com and we will respond within 30 days.

12. Changes

We may update this policy. The current version is always available at thisscan.com/legal/privacy.html with the date above.