Who we are
ScanIt AI is run by Andria Davlasheridze, based in Tbilisi, Georgia. For any privacy question or request, email andriadavlasheridze2010@gmail.com.
What we collect
Things you give us
| Data | Why |
|---|---|
| Email address | To create your account and send account emails |
| Name | To address you in the app |
| Password | Stored only as a one-way hash — we cannot see or recover it |
| Photos you scan | To identify the item. Not stored unless you save the scan |
| Saved scans | So you can see them again. Encrypted |
| Manual entries | A feature you chose to use. Encrypted |
| Country and currency | To show relevant shops and prices |
Collected automatically
- IP address — security, limiting signups, blocking abuse
- Device characteristics — to stop one person creating many accounts
- Account activity — signups, logins, failed logins, deletions
- Scan counts — to apply your plan's limits
We do not use advertising trackers, third-party analytics, or location services.
Photos and the AI
We do not control Anthropic's own handling of that image — see anthropic.com/legal/privacy.
Please do not scan identity documents, bank cards, private paperwork, medical information, or photographs of other people without their permission.
Turning off Save scanned images in Privacy & Data means the photo is still sent to Anthropic to identify the item, but is not stored on our servers afterwards.
Who else receives your data
| Company | What it receives | Where |
|---|---|---|
| Anthropic | Photos you scan, and any hint you type | USA |
| Neon | Our database — accounts, saved scans (encrypted) | Germany |
| Vercel | Hosting | USA / global |
| Resend | Your email address, to deliver account emails | EU / USA |
| Cloudflare | Domain and the anti-bot check on signup | Global |
| eBay | The search text for your item — not your identity | Global |
Saved photos and notes are encrypted before they are stored, and the key is not held by the database provider — so they cannot read them. We do not sell your data to anyone.
When you tap a shop link, you leave ScanIt AI and are on that shop's website under their privacy policy.
How your data is protected
- Phone numbers, saved photos and notes are encrypted before storage
- Passwords are hashed with Argon2id and cannot be reversed
- Encrypted connections everywhere
- Email verification required before an account works
- Account lockout after repeated failed sign-ins
- Rate limits and an anti-bot check on signup
No system is perfectly secure and we do not claim otherwise. If a breach puts you at risk, we will notify affected users and the relevant authority as required.
How long we keep it
- Account details, saved scans, manual entries — until you delete them or your account
- Photos you did not save — never stored at all
- Security logs — kept for a limited period for security purposes
- Payment records — as long as tax law requires
Deleting your account removes your personal data from our live database. Some records may briefly remain in encrypted backups until those expire normally.
Your rights
- See your data — Privacy & Data → Export my data
- Delete your account — Privacy & Data → Delete my account. Permanent
- Correct anything wrong — email us
If you are in the UK or EU you also have the right to object to processing, to restrict it, to data portability, and to complain to your data protection authority. Email us to exercise any right; we aim to respond within 30 days.
Why we are allowed to process your data
If you are in the UK or EU, our lawful bases are:
- Performing our contract with you — running the account you asked for, identifying items you scan, storing what you save
- Our legitimate interests — keeping the service secure, preventing abuse and fraud
- Legal obligation — keeping payment records for as long as tax law requires
International transfers
Our database is in Germany. Hosting is provided by Vercel and AI processing by Anthropic, both in the United States. This means your data is transferred outside the UK and EU.
These transfers rely on the Standard Contractual Clauses in our providers' data processing terms. You can ask us for details at any time.
If you are in the United States
We do not sell or share your personal information, and we never have. We do not use it for cross-context behavioural advertising. There is nothing to opt out of, because we do not do it in the first place.
You can still ask us what we hold, ask for a copy, or ask us to delete it — the same buttons in Privacy & Data do all three, and we will not treat you differently for asking.
Children
ScanIt AI is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe someone under 16 has created an account, email us and we will delete it and their data.
Changes
If we change this policy meaningfully we will update the date above and notify users. Continuing to use ScanIt AI after a change means you accept it.