ScanFlu — Privacy Policy

Effective date: 25 September 2026

Privacy Policy

This Privacy Policy explains how ScanFlu handles information. Core tools (PDF, photo, ZIP, Excel) work fully offline — your files stay on your device, no account needed. Three optional features go further: Photos → QR/Bar uses private cloud storage, Geo Photo uses your location, and Clean Metadata reads the hidden tags inside files you pick — each only when you choose it, as described below.

Optional cloud feature: When you choose Create QR/Bar → Photos (up to 10), you will see a disclosure. If you continue with Google, your selected photos (compressed ~90% JPEG, max 1600px) are uploaded to private Google Cloud Storage (scanfolds.firebasestorage.app, encrypted at rest). We create a share record and mint time-limited opaque links https://scanfolds.web.app/dl/<token> via Cloud Functions. Photos + gallery HTML are auto-deleted after 28 days via GCS lifecycle (then 410 Gone). You can use every other tool without signing in or uploading.

Information We Collect

1. Photos → QR/Bar (only if you use it)

Photos you select (up to 10) — uploaded to private GCS bucket, 28-day retention, via opaque HMAC link.
Share metadata in Firestore photo_shares/{shareId}: uid, created_at, expires_at, image_count — retained indefinitely for abuse-tracing (admin-only). Email chenchuenay@qagenies.com with the share link to delete it early (7-day SLA).
Google Account via Google Sign-In → Firebase Auth: uid, email, ID token (auto-login, stays signed in until app uninstall or Sign Out).

2. Geo Photo (only if you use it)

GPS coordinates, accuracy & timestamp — captured on-device at the moment you tap Capture, after you grant location permission (asked only then, never by default).
Where it goes: embedded into the PNG sheet or .sf bundle on your device. ScanFlu has no geo server — these files leave only when you share them (OS share sheet). We never receive, store, or see your location.
Map imagery: the mini-map and in-app live map load tiles from Google Maps using your coordinates — Google therefore sees a map-tile request for that area, under Google's privacy policy. No address lookup is performed and no text address is ever created or stored.

3. Clean Metadata (only if you use it)

Hidden tags in files you pick — EXIF/camera tags, GPS coordinates, AI-origin labels, document properties. Read and cleaned entirely on your device; nothing is uploaded, and ScanFlu keeps no copy.
Photo-location access (Android 10+): the system zeroes GPS in photos handed to apps without it, so the tool asks for photo-location access when you pick files — only then, never by default. Deny it and everything still works except coordinates read as zero.
Where it goes: cleaned copies save to Download/ScanFlu/Clean on your device and leave only when you share them (OS share sheet). Your originals are never modified.

4. Local files (always on-device)

PDFs, ZIPs, images, Excel — saved to .../files/scanfold/ via History. Not shared unless you tap Share (OS share sheet).

5. Advertising ID & Device Info (via SDK)

Yodo1 MAS and the ad networks it mediates may collect Advertising ID (resettable), device model, OS, country from IP, and ad events. Handled solely by SDKs under their policies.

6. App Check / Play Integrity

Firebase App Check with Play Integrity verifies requests come from genuine installs. No file content inspected, token ~1h.

Information We Do Not Collect (unless you use Photos → QR/Bar, Geo Photo, or Clean Metadata)

For core tools we do not collect your documents, photos, PDFs, ZIPs; no ScanFlu account, email, or password. File processing is local. Sharing via system share sheet is done by you, not our servers.

Permissions We Request

Camera

Only when you scan a QR/barcode or capture a photo for Photo Tools / Photo→QR. Processed on-device, not stored beyond the image you keep.

Location (GPS)

Only when you tap Capture in Geo Photo — Android asks at that moment, never before. Coordinates and timestamp are embedded into the sheet/bundle on your device. Revoke anytime in system Settings; already-shared files are unaffected.

Photo-location access

Only when you pick files in Clean Metadata — Android 10+ zeroes GPS in photos handed to apps without it, so the tool asks once at pick time. Everything is read and cleaned on-device; deny it and coordinates simply read as zero.

Photos / Media (READ_MEDIA_IMAGES)

Only when you pick gallery photos for compress/resize/convert/QR-share. We access only files you select (Photo Picker).

Storage

Files you create are saved locally for History.

Internet

For ads, Firebase App Check/Play Integrity, map tiles for Geo Photo, and only if you use Photos→QR/Bar for the private 28-day cloud upload. All other tools work offline.

How We Use Information

Core tools: no personal content used for ads/analytics — all local. Photo-share: Google Account + share metadata for abuse-tracing and to enforce that only you can mint links for your share (ownership check photo_shares.uid == auth.uid). Ads: to serve relevant ads.

Advertising and Third-Party SDKs

ScanFlu uses Yodo1 MAS and the ad networks it mediates. They may collect Advertising ID, device model/OS/country, and ad events. We never share your files/documents/photos with ad partners. See the Yodo1 privacy policy. You can reset your Advertising ID or opt out of personalization in Android Settings → Privacy → Ads.

Your consent: ScanFlu collects your advertising choices up front (personalized or not). In the European Economic Area, the UK, and US states whose privacy laws require it, you will be asked to allow or deny personalized advertising before any ads are loaded. If you do not consent, you will still receive non-personalized ads. You can review or change your choice at any time from Menu → Terms & Policies → Privacy Options.

We also use Firebase App Check with Play Integrity to protect services. No file content inspected.

Security

Device-side password protection on PDF/ZIP is applied within the file you create — keep your password safe. Photo-share links are opaque HMAC tokens (valid 28 days, same as the files) resolved server-side; bucket paths never leave the backend. Photos are encrypted at rest in GCS.

Data Retention

Photos + gallery HTML: 28 days via GCS lifecycle → 410 Gone. Firestore audit: persists indefinitely for tracing (admin-only) unless you request deletion. Local files: until you delete via History → Delete/Clear or uninstall. Ads/ID: per Yodo1 MAS and its partners’ policies.

Children's Privacy

ScanFlu is general productivity and does not knowingly collect personal information from children. Photo-share requires Google Sign-In (13+).

Changes to This Policy

We may update this policy; the date at the top will change. Review periodically.

Contact & Deletion

Questions or to delete a cloud photo-share early (Firestore audit): chenchuenay@qagenies.com — include the share link/token, we delete within 7 days. For local files: History → Delete/Clear.