Privacy Policy

ScanAI is an AI content detection tool for iOS. We help users determine whether images and videos are AI-generated or human-created. ScanAI is operated by Scanai App, a Dutch general partnership (vennootschap onder firma, VOF) based in the Netherlands.

If you have any questions about this policy, contact us at: support@scanai-app.com

Account data: When you register, we collect your email address. Optionally, you may sign in with Google or Apple — in which case we receive your email from those providers. We do not collect your name, phone number, or address unless you contact us directly.

Scan metadata: When you run a scan, we store the result (AI-generated or human-created), the confidence score, the detection breakdown, and an optional name and description you add. We do not permanently store the original image or video file you upload — files are processed in memory and discarded after analysis.

Usage data: We track how many scans you have run to enforce your plan's quota. We store your subscription status, your remaining credit balance, and your weekly free-scan counter.

Device identifiers: To prevent abuse of the free tier and enforce quotas fairly, we store a device identifier (a per-install fingerprint) and associate it with your account. This lets us detect attempts to bypass scan limits by creating multiple accounts. It is not used for advertising or shared with advertisers.

Payment data: Stripe processes card payments for web subscriptions. Apple, via RevenueCat, processes in-app purchases. We do not store or see your card number or payment method details.

Device and error data: We use Sentry/GlitchTip to collect crash reports and error logs. These may include device type, OS version, and app version. No personally identifiable information is intentionally included.

To provide the service: We use your account and scan data to run detections, enforce quotas, display your scan history, and process your subscription.

To improve accuracy: Aggregate, anonymised scan statistics may be used to improve our detection pipeline. No individual scan results are shared with third parties.

To communicate with you: We may send you transactional emails (subscription confirmation, payment receipt, winback) via Resend. We will not send marketing emails without your explicit consent.

We do not sell your personal data to any third party.

Images and videos you submit for scanning are sent securely over HTTPS to our API. They are processed immediately and not written to disk in their original form. Temporary file copies used during processing are deleted within 60 minutes.

Scan results (confidence score, breakdown, result label) are stored in our database linked to your account so you can view your scan history. If you delete a scan, the result data is permanently deleted.

If you delete your account, all scan results and profile data are permanently deleted.

Supabase: We use Supabase for authentication and database storage. Your account and scan data is stored in a Supabase-hosted PostgreSQL database. Supabase is GDPR-compliant. See their privacy policy at supabase.com/privacy.

Sightengine: We use Sightengine's API to perform AI/deepfake detection. Images are sent to Sightengine's servers for analysis. See their privacy policy at sightengine.com/privacy-policy.

Stripe: Web subscriptions are processed by Stripe. Your payment data is subject to Stripe's privacy policy at stripe.com/privacy.

RevenueCat: iOS in-app purchases are managed via RevenueCat. See their privacy policy at revenuecat.com/privacy.

Resend: Transactional emails are delivered via Resend. See their privacy policy at resend.com/legal/privacy-policy.

Google / Apple: If you sign in with Google or Apple, your authentication is governed by their respective privacy policies.

Your account and scan data is retained for as long as your account is active. You can delete your account at any time from the app (Settings → Delete Account), which permanently removes all your data.

Abandoned accounts: If an account has no activity for 3 years, we will email the address on file to confirm whether you wish to keep it. If we receive no response within 30 days, the account and all associated data will be permanently deleted.

Anonymised, aggregated usage statistics may be retained indefinitely.

Stripe and RevenueCat retain billing records as required by financial regulations.

If you are in the European Economic Area (EEA), you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.

• Right to rectification: Ask us to correct inaccurate data.

• Right to erasure: Delete your account and all associated data via the app, or by contacting us.

• Right to portability: Request an export of your scan history.

• Right to object: Object to any processing of your data based on legitimate interests.

To exercise these rights, contact support@scanai-app.com. We will respond within 30 days.

This website (scanai-app.com) does not use tracking or advertising cookies. We may use a minimal session cookie if you interact with the Stripe checkout flow. No third-party advertising networks are used.

ScanAI is intended for users aged 17 and over and is not directed at children. We do not knowingly collect data from anyone under 17. If you believe someone under 17 has created an account, contact us at support@scanai-app.com and we will delete it immediately.

We may update this Privacy Policy when we add new features or change how we process data. Material changes will be announced via email to registered users. Continued use of ScanAI after the effective date of changes constitutes acceptance.

Questions, requests, or complaints: support@scanai-app.com

We aim to respond within 2 business days.