Privacy Policy

1. Introduction

This Privacy Policy describes how AIVORY COMPANY LIMITED ("Company," "we," "us," or "our"), a company established under the laws of Vietnam, collects, uses, and protects information in connection with the Scano mobile application ("App" or "Service").

We are committed to protecting your privacy. Scano is designed with a privacy-first, accountless architecture — the App does not require you to create an account, and your scan history and preferences are stored on your device. However, to look up product information the App queries the Open Food Facts database, and it integrates third-party tools that collect limited usage data, as described below.

By using Scano, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.

Contact: website scano.aivoryvn.com, email [email protected].

2. Information We Collect

2.1 Information stored locally on your device (not collected by us)

The following data is created and stored on your device. We do not have access to it, and it is not transmitted to our servers:

• Scan history and the corresponding Analysis Results.
• Favorites and personalization settings.
• Preferences, dietary restrictions, or allergies that you choose to enter.
• App settings and Premium purchase status.

2.2 Information collected automatically

When you use certain features, the following may be collected or processed:

• Purchase and transaction data. When you make an in-app purchase, the transaction is processed by Apple or Google. We (via RevenueCat) receive a purchase receipt to verify your Premium status. We do not receive or store your payment method, card number, or app store account credentials. Information received includes: transaction identifier, product purchased, purchase date, expiration date (for subscriptions), and store region.
• Device and technical information. Through Firebase and Apple Analytics, the following may be collected: device model and operating system version, app version, language and region settings, crash logs and error reports, and app usage patterns (screens visited, feature usage frequency).
• Subscription and paywall data. Through RevenueCat and Superwall: a system-generated app user identifier, subscription status and history, and events related to paywall display and interaction.
• Lookup queries. When you scan a product, a query (such as a barcode) is sent to Open Food Facts to retrieve product information (see Section 3).

2.3 On-device processing (camera and barcode recognition)

The App uses the camera to scan products. Barcode reading and text recognition (for example, via Apple Vision and/or Google ML Kit) are processed entirely on your device. Images are not transmitted for recognition purposes. Only the recognition result (such as a decoded barcode) may then be used to query Open Food Facts.

2.4 Information we do NOT collect

Scano does not collect any of the following: name, username, or email address; phone number; date of birth; profile photo; physical address; contacts; photos, videos, or media files beyond the active scan; chat messages or user-generated content; precise or approximate geographic location (GPS); health or biometric data; financial information (other than purchase receipts from the app store); social media account information.

3. Product Data Source — Open Food Facts

To provide ingredient and nutrition information, Scano looks up data from Open Food Facts — an open, community-driven food product database (vn.openfoodfacts.org/data).

When you scan a product, Scano sends a query (for example, a barcode or product identifier) to the Open Food Facts system over the Internet to retrieve the corresponding product information. This means your query leaves the device for the lookup, although we do not store it on our own servers.

Open Food Facts is an open project; its handling of queries and data is governed by its own terms and policies (privacy policy; terms). Product data is provided under the Open Database License (ODbL).

We recommend that you do not scan documents containing sensitive personal information unrelated to food products.

4. How We Use Information

We use the limited information we collect to:

• Provide the food ingredient scanning and analysis features.
• Display results, scores, and reference recommendations.
• Verify Premium purchase status and restore purchases on new devices.
• Adjust regional pricing.
• Improve app stability and understand feature usage.
• Send push notifications (if you allow them).

We do not use any data for: targeted advertising or behavioral profiling; sale of personal information to third parties; AI model training; or building user identity profiles.

5. Information Sharing and Disclosure

5.1 We do not sell your data

We do not sell, rent, or trade your personal information to third parties. We do not engage in cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA/CPRA).

5.2 Third-party service providers

We use the following third-party services. Each operates under its own privacy policy, which we encourage you to review:

• Open Food Facts — product information lookup. world.openfoodfacts.org/privacy
• Apple (App Store / StoreKit) — in-app purchase processing and app distribution. apple.com/legal/privacy
• Google / Firebase — analytics, crash reporting, and push notifications (Firebase Cloud Messaging). policies.google.com/privacy and firebase.google.com/support/privacy
• Apple Analytics — aggregated app performance statistics. apple.com/legal/privacy
• RevenueCat — subscription verification and management. revenuecat.com/privacy
• Superwall — subscription paywall display and optimization. superwall.com/privacy

5.3 Legal requirements

We may disclose information if required by law or in a good-faith belief that such disclosure is necessary to comply with a legal obligation, court order, or legal process; protect our rights or property; prevent or investigate possible wrongdoing; or protect the personal safety of users or the public.

6. Cookies, Tracking, and Advertising Identifier

The Scano App is a native mobile application and does not use cookies, web beacons, or browser-based tracking technologies.

Scano does not display advertisements and does not use advertising or attribution SDKs. We do not use your device's Advertising Identifier (IDFA) for advertising. If the operating system presents an App Tracking Transparency (ATT) prompt and analytics features require it, you may decline, and the App will function fully without tracking permission.

7. Data Retention

7.1 Local data

Data stored on your device is retained until you delete it within the App or uninstall the App, at which point it is deleted in accordance with the operating system's mechanism.

7.2 Purchase records

Apple and Google retain your purchase and subscription records independently, in accordance with their policies. We (via RevenueCat) retain only the verification status of your purchase.

7.3 Analytics data

Anonymized analytics data is retained in accordance with the provider's default retention period (for Firebase Analytics, typically up to 14 months).

8. Data Security

We implement reasonable technical and organizational measures to protect data, including:

• Local storage of preferences and history on your device rather than on our servers, which reduces server-side breach risk.
• Transmission of lookup queries and third-party data over encrypted connections.
• Processing of camera and recognition data in-memory during the active scan, without persisting or transmitting images for recognition purposes.

Despite these measures, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security of your information.

9. Children's Privacy

Scano is rated suitable for users aged 4 and above but is not directed to young children. We do not knowingly collect personal information from children under 13. Children under 16 should use Scano only under the supervision of a parent or legal guardian, consistent with Vietnamese law and the GDPR.

If you are a parent or guardian and believe a child has provided personal information without consent, please contact us at [email protected], and we will take prompt steps to investigate and delete such information.

10. Your Privacy Rights

10.1 All users

Regardless of your location, you may: delete local data at any time within the App; uninstall the App to remove all locally stored data; manage subscriptions through your App Store or Google Play account; and contact us with any privacy questions.

10.2 Vietnam (Decree No. 13/2023/ND-CP)

Under Decree No. 13/2023/ND-CP on personal data protection, you have rights including the right to be informed, to access, to rectify, to delete, to restrict processing, to withdraw consent, and to lodge a complaint with the competent authority.

10.3 California residents (CCPA/CPRA)

If you are a California resident, you have the right to know the categories and specific pieces of personal information collected; the right to delete; the right to opt out of sale/sharing (we do not sell or share personal information for cross-context behavioral advertising, so no opt-out is necessary); and the right to non-discrimination for exercising your rights. To submit a request, email [email protected] with the subject line "CCPA Privacy Request."

10.4 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.

Legal bases for processing:

• Purchase verification — performance of a contract.
• Crash reporting and analytics — legitimate interest (improving service quality).
• Push notifications — consent.

Data Controller: AIVORY COMPANY LIMITED. To exercise any GDPR rights, contact [email protected]. You also have the right to lodge a complaint with your local data protection authority.

11. International Data Transfers

Scano stores your data locally on your device. For the limited data processed through third-party services (lookup via Open Food Facts; purchase verification via Apple/Google and RevenueCat; analytics via Firebase and Apple; paywall via Superwall), data may be transferred to and processed in the United States or other countries where these providers operate.

Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions where applicable, and the providers' compliance with applicable data protection frameworks. Where data is transferred outside Vietnam, we seek to comply with the cross-border transfer requirements of Decree No. 13/2023/ND-CP.

12. Third-Party Links

The App may contain links to third-party websites or services (for example, Terms of Service or Privacy Policy pages). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party services you access.

13. Do Not Track

The App does not respond to "Do Not Track" (DNT) signals, as there is no industry-standard technology for recognizing DNT signals in mobile applications. You may control tracking through your operating system's privacy settings and the ATT permission prompt.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date and notify you via in-app notification, app store update notes, or the website scano.aivoryvn.com. Your continued use of the App after the revised Policy becomes effective constitutes your acceptance.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

AIVORY COMPANY LIMITED
Email: [email protected]
Website: scano.aivoryvn.com

For privacy-specific inquiries, please use the subject line "Privacy Inquiry."