Get Started

Privacy Policy

Last updated: 27 October 2026

Privacy Policy

Last updated: October 21, 2026

Scan2List ("we", "our", or "us") operates the Scan2List mobile application. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service.

1. Information We Collect

  • Account Information: Name, email address and a password hash when you register; optional profile information such as phone number, company, website and gender.
  • Product Data: Barcodes scanned, product images, titles, descriptions, transcribed voice input and listing details you create. Scan2List stores transcribed text rather than voice recordings.
  • Device Information: Device type, operating system, app version, notification device tokens, IP addresses and service logs for notifications, security and troubleshooting.
  • Usage Data: Features used, scan history, and platform connections to improve our service.
  • Payment Information: Subscription purchase and verification records are stored to manage access and prevent receipt fraud. Payments are handled by Apple App Store, Google Play or an enabled payment provider such as Razorpay. We do not store payment card details. Sales and pricing records that you enter are stored for your own catalog and sales tools.

2. How We Use Your Information

  • To provide and maintain the Scan2List service
  • To generate AI-powered product listings using scanned barcode data
  • To prepare drafts or publish listings to supported, connected marketplaces when you choose to use those features
  • To manage your subscription and account
  • To send important service updates and notifications
  • To understand feature usage and improve service reliability

3. Third-Party Services

We integrate with the following third-party platforms to deliver our service:

  • Supported marketplaces, including Amazon, Etsy, Shopify and Walmart where enabled – for the connection and listing actions you request; availability and seller requirements vary.
  • Google Play / Apple App Store / enabled payment providers – for authentication or subscription billing as applicable.
  • Google Firebase – for app infrastructure and push notifications. Previously released app versions may also use Firebase Analytics.
  • Cloudinary – for secure image storage
  • NVIDIA NIM – the currently configured AI service for processing product photos, barcode details and product text, including transcribed voice input, to generate editable content. Other AI services may be offered if the configuration changes. Review the provider shown in the app before sharing content.

Each third-party service has its own Privacy Policy governing the use of your information. Submit only product content you have permission to use, avoid unnecessary personal information, and review AI output. You can enter product details manually instead of using AI.

4. Data Security

We implement industry-standard security measures to protect your personal data. All data is transmitted over HTTPS encryption. However, no method of transmission over the Internet is 100% secure.

5. Data Retention

We retain account and product data while your account is active. You can request account deletion in the app or contact support@scantolist.in. In-app deletion removes account access immediately and queues cleanup of the profile, saved products, Scan2List listing records, notifications and associated stored images, normally completed within 30 days. Failed cleanup operations are retried.

Minimal subscription transaction claims may be retained for up to seven years after account deletion for billing disputes and receipt-fraud prevention; raw receipt data is removed during account cleanup. Technical and security logs may be retained separately for troubleshooting and fraud prevention. Listings already published to an external marketplace must be managed there. Deleting a Scan2List account does not cancel an App Store or Google Play subscription; cancel it in the relevant store settings.

6. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us:

9. Country, sign-in information and optional location sharing

We record the original sign-in method (email, Google or Apple), connected sign-in methods, registration IP where available, and the latest successful sign-in IP, method and time for account management and security. We estimate country from these IP addresses using a server-side country database; IP-based estimates can be inaccurate. You can choose or correct your country in Profile → Country & location. Scan2List administrators can view this account information.

In app versions that offer location sharing, GPS sharing is optional and off until you choose Start sharing, read the disclosure and grant your device permission. While the Country & location screen remains open, your latest coordinates and accuracy are sent to Scan2List and are visible to authorized administrators. We do not collect a background GPS trail. Only the latest shared point is stored. Tap Stop sharing, leave the screen or leave the app to end sharing. The app requests deletion of that point; if connectivity is lost, the point expires from the live view within 90 seconds after the last update and is removed by scheduled cleanup. Administrators can disable sharing globally or for an account but cannot grant device permission or start sharing for you. You can use the app without sharing GPS location.

Maps are loaded only when a user or administrator opens a map. The mobile map uses OpenStreetMap tiles, and the administrator map uses Leaflet with OpenStreetMap. Opening a map sends the relevant area or coordinates and ordinary connection information to OpenStreetMap under its own privacy policy. We do not use shared GPS location for advertising or cross-app tracking.

To prevent password reuse, we retain salted one-way hashes of passwords previously used for an account, including the current password and subsequent changes. Passwords used before password-history protection was introduced can only be checked if their hashes were retained. Password history is removed during account deletion cleanup.

Garment Studio photos, AI processing and credits

Garment Studio is an optional feature for adult garment model previews and editable listing content. When you choose to generate and give the in-app processing consent, the garment photo and the adult customer or model photo you select are uploaded through Scan2List and stored by Cloudinary. The selected photos and garment facts required for image generation are sent to Google Gemini to generate the try-on preview. When you request listing text, the seller-confirmed garment facts are sent to Google Gemini to draft that text. Cloudinary stores the uploaded photos and generated preview. If you use a sample model, that selected sample is processed instead of a personal model photo. You can prepare drafts and edit product information without generating an AI preview.

Studio source photos and results are stored as authenticated media and are provided to the signed-in owner through time-limited links. Administrative generation history shows operational metadata rather than customer photo URLs. If you explicitly choose to add a garment result to a product draft, the original garment photo and any AI preview you select are copied to publicly accessible listing media. The source model photo is not copied to the listing. Review these photos before you share or publish them.

We store your Studio credit balance, credit adjustments, generation status, recorded usage, consent information and store purchase or subscription verification records to deliver the feature, prevent duplicate purchase claims and manage support. Store payment details are handled by Apple or Google; Scan2List does not receive your payment card details. The separate Gemini API credential configured by an administrator is encrypted on the server and is not provided to the mobile app.

Deleting a completed Studio preview removes it from your private history and queues cleanup of its private photos and generated content. Copies you previously added to a product remain with that product and are managed separately. Account deletion also removes Studio history, private photos, product copies, wallet and linked operational data through the account cleanup process. Minimal store transaction claims may be retained for up to seven years after account deletion for billing disputes and receipt-fraud prevention; they are no longer linked to an active profile. Provider-side records are subject to the provider's own retention rules. Deleting a preview or account does not cancel a store subscription or remove content already published to an external marketplace.

Google Gemini and Cloudinary may process data outside your country under their own policies. See Google Gemini API terms and Cloudinary privacy policy. Upload only content you own or have permission to use, including permission from identifiable adults. Do not upload children's photos or unnecessary sensitive information.

Garment Studio addition effective 27 October 2026.