Scanlily Privacy Policy

Effective date: September 6, 2026. This version supersedes all earlier versions.

Introduction

This Privacy Policy explains how Scanlily collects, uses, and protects your personal information when you use our mobile applications and websites, including Scanlily and ShelfLily (collectively, the "Services"). By using our Services, you agree to the collection and use of your information in accordance with this Privacy Policy.

Information We Collect

We collect personal information that you choose to provide to us when you register for an account or send a message to us in a web form. This includes information such as your email address, first name and last name. We do not require that you use your true name or personal email address. We also collect information about the items you scan into our system, including GPS coordinates if you have specifically permitted the app to access Location services on your phone.

How We Use Your Information

We use your information to provide and improve our Services, communicate with you, and generate reports and features. We do not sell your personal information, and we do not share it with third parties for their own purposes. Your information is disclosed only to the service providers that host and operate our Services on our behalf, under contracts that limit them to that purpose, and otherwise only as required by law or with your consent. Our current service providers are listed in the Service Providers section below.

Service Providers

Scanlily uses a small number of service providers to host and operate the Services. Each is bound by contract to use your information only to provide its service to us, and each holds independent security certifications (SOC 2 and/or ISO 27001; PCI DSS for payments). Our current providers are: DigitalOcean (application hosting and media storage, United States); Cloudflare (backup storage and content delivery); Google Cloud Identity Platform (sign-in and authentication); Google Gemini (AI recognition, used only when you submit an image or video for recognition); SerpAPI (price estimates, used only when you request a price estimate, and receiving only an expiring link to the item photo or a product identifier); and Stripe (payment processing; card numbers never reach Scanlily). The mobile apps also use Google Firebase to deliver notifications and to report crashes; crash reports contain device and app diagnostics, never your inventory data. We will update this list before adding a provider that handles your information.

AI Features

Some features let you submit an image or video to be recognized by artificial intelligence. When you do, the image or video, including any narration in the video, is sent to our AI provider for processing under paid API terms. Under those terms the provider does not use your content to train or improve its models, and the temporary copy it holds for processing expires automatically. AI processing happens only when you submit media for it; barcode scanning, manual entry, and imports never use it. Recognition results are drafts for you to review. A video submitted for recognition is deleted from our servers when processing completes, unless you have asked us to retain recognition videos for your account. Scanlily never uses your content to train AI models.

Security

We take the security of your personal information seriously. We use industry-standard security measures, including encryption in transit (TLS) and at rest, sign-in through an independently certified identity provider so that Scanlily stores no passwords, encrypted backups, and access to production systems limited to named individuals, to protect your information from unauthorized access, disclosure, alteration, or destruction.

Your Rights

You have the right to access, update, or delete your personal (and non-personal) information at any time. To exercise these rights, please contact us using the contact information provided below.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to provide essential functionality and enhance your experience on our Services. Cookies are small data files that are stored on your device when you visit our website. These cookies enable us to remember your preferences, authenticate your login, and ensure the proper functioning of various features on our subscription website.

Our use of cookies is limited to basic functionality and improving the overall performance of our Services. We do not use third-party cookies, and our cookies are solely used to provide a seamless and user-friendly experience on our website. We never use cookies for tracking what sites you have visited outside Scanlily.

By using our Services, including our subscription website, you acknowledge and agree to our use of cookies as described in this section. Please note that disabling or blocking cookies may affect the functionality of our website and may prevent you from accessing certain features. However, our mobile apps do not involve cookies.

Changes to Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time in a manner that strengthens data privacy or otherwise adds details to comply with data privacy requirements for outside standards and customer needs. We will never change it to loosen data privacy. We will never sell your information or share it with third parties for their own purposes. Any changes will be effective immediately upon posting on our website, and we encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.

International Data Transfers

Your personal information may be transferred to, stored, and processed in the United States where our servers are located. In the future, we may transfer your information to other countries as part of our business expansion. By using our Services, you consent to the transfer of your information to the United States and other countries where we may operate.

Children's Privacy

Our Services are intended for general audiences and are not targeted at children. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information in a manner that is not compliant with relevant legal requirements, we will take appropriate steps to delete such information from our records in accordance with the law. We are committed to complying with all legal obligations regarding the protection of children's privacy.

Account and Data Deletion

We respect your right to control your personal information and provide you with the option to delete your account and/or data associated with your account. If you wish to exercise this option, you may submit a request through our Account and Data Deletion Request form. You have the option to request the deletion of your entire account along with all associated data or to retain your account while deleting specific data. Upon receiving your request, we will contact you via email to confirm your request before proceeding with the deletion. Please note that only superusers on the account are authorized to submit deletion requests. Once your data is deleted, it cannot be recovered.

Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please Contact Us.