Privacy Policy for Scan Assistant

Privacy Policy for Scan Assistant

Last Updated: March 17, 2025

Effective Date: March 17, 2025

1. Introduction

XIF Technologies ("we", "our", or "us") operates the Scan Assistant mobile application (the "Service"). This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information when you use our Service and the choices you have associated with that data.

2. Information Collection and Use

2.1 Types of Data Collected

We collect the following types of data to provide and improve our Service:

• File Metadata: File names, sizes, types, and modification dates for the purpose of identifying duplicate files and analyzing storage usage.

• Usage Data: Information about how you interact with the Service, such as scan frequency and features used.

• Device Information: Device model, operating system version, and storage capacity to optimize performance.

2.2 Data Processing

All data processing occurs locally on your device. We do not:

• Access or store the content of your files (e.g., photos, videos, documents).

• Upload your files to external servers.

3. Legal Basis for Processing (GDPR Compliance)

For users in the European Economic Area (EEA), we process your data based on:

• Contractual Necessity: To provide the core functionality of the Service.

• Legitimate Interest: To improve the Service and prevent fraud.

• Consent: For optional features like crash reporting.

4. Data Sharing and Disclosure

4.1 Third-Party Services

We may share anonymized, aggregated data with the following third parties:

• Google Firebase: For crash reporting and analytics (anonymous usage statistics).

• Amazon Web Services (AWS): For encrypted backup of app settings (no file content).

4.2 Legal Requirements

We may disclose your data if required by law or in response to valid requests by public authorities (e.g., court orders).

5. Data Retention

• File Metadata: Deleted immediately after scanning unless you manually save results.

• Usage Data: Retained for 12 months in anonymized form for analytics.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your data.

• Rectification: Correct inaccurate data.

• Erasure: Request deletion of your data.

• Restriction: Limit how we use your data.

• Portability: Receive your data in a structured format.

• Object: Opt-out of certain data processing.

To exercise these rights, contact us at meghbaalok@gmail.com

7. International Data Transfers

Your data is processed locally on your device. Any anonymized data shared with third parties is stored in GDPR-compliant regions (e.g., AWS EU servers).

8. Children's Privacy

Our Service is not intended for users under the age of 16. We do not knowingly collect personal data from children.

9. Security Measures

We implement industry-standard security practices, including:

• On-Device Encryption: All scans use SHA-256 hashing.

• Regular Audits: Annual penetration testing by independent security firms.

• Access Controls: Strict internal policies to limit data access.

10. Policy Updates

We will notify users of material changes via:

• In-app notifications (for minor updates).

• Email (for significant changes affecting privacy).

11. Contact Us

For questions or requests regarding this Privacy Policy:

📧 Email: meghbaalok@gmail.com