Privacy Policy

Scope and our approach

ScanRecalls is designed to use the information needed to identify products, compare them with recall records, deliver requested alerts, protect the service, and improve reliability. This policy applies to the ScanRecalls apps and website. Third-party sites linked from a recall notice operate under their own privacy policies.

Information we process

Mobile app

• Account information: a Firebase user identifier and account status. ScanRecalls creates an anonymous account by default. If you choose to link Apple or Google sign-in, Firebase and the selected provider may provide an email address, name, and provider identifier according to your provider settings.
• Monitored products: scanned barcode values and format, normalized GTIN/UPC/EAN, product name, brand, package size, monitoring country, international-alert preference, monitoring status, and related recall matches.
• Optional product photos: if you choose a photo from your library, the app corrects its orientation, reduces it to a small JPEG, removes embedded metadata, and uploads only that processed copy to Firebase Storage. The photo is associated with your account and monitored product. The original full-resolution file is not uploaded.
• Preferences: primary country, international-notification preference, and allergen selections you choose to save.
• Notification and device data: Firebase Cloud Messaging token, randomly generated app device identifier, operating-system platform, device locale, app version, notification status, and timestamps such as last activity.
• Alert history: recall and product identifiers, match status, notification title and message, destination link, delivery state, and read time.
• Subscription information: app user identifier, product identifier, purchase and entitlement status, renewal state, and related timestamps. Payment-card details are processed by the applicable app store and are not received by ScanRecalls.

Camera and photo-library access

The app requests camera access when you open the barcode scanner. Frames are processed on your device to recognize a barcode. ScanRecalls does not save or upload camera images or video.

Photo-library access is requested only when you choose to add or replace a monitored product photo. Selecting a product photo is optional.

Website

• Product searches: product names or identifiers submitted to the recall checker are processed to return matching records. ScanRecalls does not write these search terms to its Firestore database. Short-lived rate-limit information is kept only in server memory.
• Browser recall alerts: watch text and type, a Firebase installation or messaging identifier, permitted site origin, browser-local watch details, and notification delivery status.
• Usage and security data: page visits, traffic source, approximate location, browser or device category, analytics identifiers, network information, and abuse-prevention signals.

How we use information

We use this information to:

• recognize a product barcode and retrieve basic product details;
• display the optional photo you selected for a monitored product;
• compare product identifiers with published recall data;
• save, synchronize, pause, and delete product monitoring;
• send recall notifications you have enabled and show alert history;
• link an optional Apple or Google account without replacing your existing anonymous data;
• prevent abuse, troubleshoot failures, understand website usage, and improve the service; and
• respond to support, privacy, and deletion requests.

ScanRecalls does not sell personal information and does not use product-monitoring data for third-party advertising.

Service providers and external sources

ScanRecalls uses service providers to operate the apps and website. They process information on our behalf under their own contractual and privacy obligations:

• Google Firebase: Authentication, Firestore, Cloud Storage, Cloud Functions, Hosting, Cloud Messaging, App Check, and Google Analytics for Firebase.
• RevenueCat: subscription purchase validation, entitlement status, and subscription lifecycle management.
• Apple and Google: optional account sign-in when you choose to link a provider.
• Google reCAPTCHA Enterprise: website request validation and abuse prevention.
• Open Food Facts and UPCitemdb: basic catalog details requested with a scanned barcode.
• Official recall authorities: product identifiers and search requests may be sent to public government recall systems to retrieve relevant notices.

We require service providers that receive user data from ScanRecalls to protect it consistently with this policy and applicable law. ScanRecalls also links to official authorities and manufacturers; information you provide directly to those organizations is governed by their policies.

Retention and deletion

• Mobile monitored-product records remain while monitoring is active or paused, until you delete the product or request account deletion.
• Optional product photos remain while their monitored product remains in your account. Deleting that product or deleting the account also deletes its uploaded photo.
• Mobile recall-match and in-app notification records are configured to expire after 365 days. Notification dispatch records are configured to expire after 90 days.
• Website product watches expire after 365 days unless renewed. A watch removed in the same browser is disabled immediately and scheduled for deletion within 30 days. Website notification delivery records expire after 90 days.
• Browser-local preferences remain until you remove the watch, clear site data, or uninstall/reset the relevant software.
• We may retain limited records longer when reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or enforcing agreements.

Deleting a monitored product in the app stops future monitoring for that product, removes its uploaded photo, and removes its private watch-index membership. To permanently delete the full ScanRecalls account and associated cloud data, open Settings and choose Delete account and data. Accounts linked with Apple require Apple authorization before deletion. If you cannot access the app, use the public account deletion page to submit a request.

Your choices and controls

• Use the website recall search without creating a browser alert.
• Grant or deny camera permission; you can enter a barcode manually instead.
• Grant or deny photo-library access; adding a product photo is optional.
• Grant, revoke, or change notification permission in your device or browser settings.
• Pause or delete monitored products and disable international notifications in the app.
• Permanently delete your ScanRecalls account and associated cloud data from Settings.
• Remove a website alert from the same browser and clear browser-local data.
• Request access, correction, or deletion by contacting us. Rights may vary by location.

The service is not directed to children for the purpose of collecting personal information. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for international transfers. We use reasonable administrative and technical safeguards, but no online service can guarantee absolute security.

Changes to this policy

We may update this policy as ScanRecalls changes or legal requirements develop. We will post the updated policy here and change the effective date. If a change materially affects how we use personal information, we will provide additional notice when appropriate.