1. Introduction
GraftScanner ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our mobile application and website (collectively, the "Service").
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK privacy laws.
Key Point: GraftScanner does NOT store photos or personal scan data on our servers. All processing and storage happens on your device.
2. Data Controller Information
GraftScanner
[Your Company Address]
Email: privacy@graftscanner.app
3. What Personal Data We Collect
3.1 Information You Choose to Provide
- Account Information (Optional): Email address if you choose to create an account
- Support Communications: Messages only if you contact our support team
- Payment Information: If purchasing premium features (handled by payment processors, NOT stored by us)
3.2 Information Collected Automatically
- Device Information: Device type, operating system, app version
- Usage Analytics: Which features you use, how often (anonymized)
- Approximate Location: Country/region for pricing localization (anonymized)
- Crash Reports: Error logs to improve stability (no personal data)
3.3 Information We Do NOT Collect
- ✅ Scalp photos - Never stored on our servers
- ✅ Scan results - Stored only on your device
- ✅ Health data - Not collected or stored
- ✅ Payment card details - Not stored by us
4. Legal Basis for Processing (UK GDPR)
| Data |
Legal Basis |
| Email (if provided) |
Consent |
| Usage analytics |
Legitimate interest |
| Support messages |
Contract & legal obligation |
5. How We Use Your Data
- Analytics: Understand app usage (anonymized) to improve features
- Support: Respond to your questions/issues via email
- Improvements: Fix bugs and optimize performance
- Security: Detect fraud and prevent abuse
6. Scalp Photos & Scan Data
Your photos and scan results are stored ONLY on your phone.
- ✅ Photos never leave your device
- ✅ Analysis happens on your phone
- ✅ We never download or store your photos
- ✅ You have complete control over deletion
7. Your Rights Under UK GDPR
You have the right to:
- Access - Ask what data we hold about you
- Rectification - Correct any inaccurate data
- Erasure - Request we delete your account and data
- Restrict - Limit how we use your data
- Portability - Receive your data in a portable format
- Object - Opt-out of marketing or analytics
How to Exercise Your Rights: Email privacy@graftscanner.app with your request. We will respond within 30 days.
8. Data Retention
| Data Type |
How Long? |
| Email address |
Until account deletion |
| Usage analytics |
24 months |
| Payment records |
7 years (UK tax law) |
9. Data Security
- Encryption: Data encrypted in transit (TLS 1.2+)
- Access Controls: Only authorized staff access data
- Incident Response: If breached, we notify users within 72 hours (UK GDPR requirement)
10. Contact Us
For Privacy Questions:
Email: privacy@graftscanner.app
Support: https://graftscanner.app/contact
For Complaints (Information Commissioner's Office):
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113
Website: https://ico.org.uk
By using GraftScanner, you acknowledge you have read and agree to this Privacy Policy.
