Your captures, protected.

This Privacy Policy explains how ArkaScan ("we", "us", "our") handles information when you use our mobile and web scanning experiences, related services, and analytics tools (collectively, the "Services").

This policy covers information processed by ArkaScan and identifies the outside providers that receive information when you choose cloud scanning, image processing, support, billing, sign-in, or marketplace features.

Account information: email address and authentication identifiers needed to create and access your account. If you choose to sign in with Google, we receive your Google account email and a unique identifier, and may receive basic profile information you authorize Google to share.

Operational captures: images, barcodes, and other visual uploads that you submit during a scan session.

Derived metadata: system-generated tags, annotations, OCR text, quality scores, timestamps, network status, and capture or processing details that describe each scan.

Usage and diagnostics: aggregated event metrics, performance telemetry, and error logs generated by in-app interactions, feature usage, and workflow outcomes.

Infrastructure and request data: IP address and IP-derived coarse location, user agent, request route and search parameters (including inventory search terms), timestamps, response status, and authentication or security diagnostics processed in Supabase and Vercel logs.

On-device text-recognition diagnostics: Google ML Kit processes scan images and recognized text on your device and does not send that input or the recognition output to Google. ML Kit may send Google limited operational metrics, including device and app information, a per-installation identifier, performance measurements, API configuration, feature events, and error codes, for diagnostics, usage analytics, maintenance, security, and service improvement.

Marketing attribution and advertising measurement: campaign parameters, referral source, page views, CTA clicks, signup, checkout, and first-scan funnel events collected through first-party analytics and advertising pixels where enabled.

Billing and purchase metadata: purchases occur on the ArkaScan website, not inside the native companion app. We retain subscription tier, plan interval, usage quotas, and payment-related identifiers (for example, Stripe customer/subscription IDs or invoice IDs) needed to process website purchases and provide entitlements. The native app only reads and enforces the resulting account entitlement. We do not store full payment card numbers; payments are handled by our payment processors.

Support communications: messages and contact details you provide when you reach out for support.

We do not require sensitive personal information (such as government IDs). Please avoid uploading such content; if it is inadvertently provided (for example inside an image), we may delete or de-identify it when detected.

Cloud scan processing is optional and requires an in-app choice. If you allow it, ArkaScan may send item photos plus related barcodes, labels, OCR text, titles, notes, and capture metadata to Google Cloud Vision, OpenAI, and PhotoRoom. Google Cloud Vision helps identify objects and text, OpenAI generates structured item or listing details, and PhotoRoom removes or replaces image backgrounds.

ArkaBot support processing requires a separate choice. If you allow it, ArkaScan sends your support message and recent thread context to OpenAI to draft a response. Ticket identifiers, your email address, and message or reply content may also be sent through Resend when a ticket is emailed or escalated to a person.

You may decline either choice and may withdraw a prior choice in Settings. Declining or withdrawing stops new requests covered by that choice, but it can limit cloud-powered scanning, image processing, or ArkaBot. It does not delete information already processed; use account deletion or contact us for deletion requests.

Provide and operate the Services, including account creation, authentication, and enforcing plan limits and entitlements.

Maintain and improve product quality by measuring workflow outcomes, benchmarking detection accuracy, and reducing error rates. ArkaScan does not use your scan images or support messages to train or tune ArkaScan models unless we ask separately and you expressly opt in.

Monitor system performance, debug issues, and ensure the Services remain reliable and secure.

Process payments and manage subscriptions and add-ons, including renewals, cancellations, receipts, and entitlement fulfillment.

Measure campaign performance, improve landing pages, build advertising audiences, and avoid optimizing ads around low-quality signups.

Provide customer support and respond to your requests.

Develop analytics insights for internal roadmap planning, feature prioritization, and service optimization.

Comply with applicable laws, enforce our Terms of Service, and protect the rights, safety, and integrity of our users and the Services.

We do not sell your captured images or scan metadata.

Supabase processes account authentication, database records, stored images, and authentication or security logs; Vercel hosts web and API services and processes request logs that can contain IP-derived coarse location, user agent, route, and search parameters; Stripe processes website purchases and provides transaction or entitlement records.

Apple, Google, or other enabled identity providers process sign-in information.

Google ML Kit performs text recognition on your device. It does not receive the scan images, recognized text, or recognition output, but it may receive the limited operational metrics described above.

Google Cloud Vision, OpenAI, and PhotoRoom receive the cloud-scan information described above only after the applicable choice is granted. OpenAI receives ArkaBot support information only after the separate ArkaBot choice is granted. Resend may receive ticket identifiers, email address, and message or reply content when you submit, email, or escalate a support request.

Advertising and measurement providers, including Meta, may receive limited event and attribution data when pixels or similar tools are enabled. These events are used to measure and improve campaigns and are not intended to include uploaded item images or scan contents.

If you connect eBay or another marketplace integration, ArkaScan shares the listing, image, seller-configuration, and account data needed to perform the action you request. Marketplace use is also governed by that provider's terms and privacy policy.

We may share information when required to respond to legal requests, enforce our agreements, or protect ArkaScan, our users, or the public.

We require every service provider, analytics tool, advertising provider, third-party SDK, and other third party that receives user data from ArkaScan to provide the same or equal protection of that data as described in this policy and required by applicable App Store rules.

The native ArkaScan app does not request App Tracking Transparency permission and does not use your scan images or inventory content to track you across other companies' apps or websites.

ArkaScan's web marketing pages may use first-party analytics and Meta advertising measurement where enabled. Marketing events can include a random browser or session identifier, referral and campaign parameters, page or button interactions, signup, checkout, and first-scan milestones.

We retain information only as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce agreements.

We implement layered retention schedules that minimize the duration of raw image storage while preserving aggregated metrics needed for longitudinal analytics.

If you delete your account, we will delete or de-identify your User Content and associated scan data within up to 30 days in normal cases. Some information may be retained longer where required by law or for legitimate business purposes (for example, billing records, fraud prevention, and security logs), and some data may persist for a limited time in backups.

We employ administrative, technical, and physical safeguards—including encryption in transit and at rest, role-based access controls, and continuous monitoring—to protect information processed by the Services.

Despite these measures, no system can be guaranteed to be 100% secure. You acknowledge that you provide operational captures at your own risk.

You can review or withdraw cloud-scan and ArkaBot processing choices in Settings. Consent records are tied to the applicable policy version; a material change may require you to choose again.

You may delete your ArkaScan account from in-app account settings. Deletion disables the account and schedules associated User Content and scan data for deletion or de-identification, normally within 30 days, subject to the limited retention exceptions described above.

If you believe personal information has been captured inadvertently, contact us using the details below and we will review, restrict, or delete the relevant data consistent with applicable law.

If you used Facebook Login with ArkaScan, you can request deletion of your ArkaScan data by removing ArkaScan from your Facebook Apps and Websites settings and sending the deletion request, or by contacting support@arkascan.com.

ArkaScan is intended for adults and is not directed to children under 13. If you believe a child provided personal information, contact us so we can review and delete it.

We may process and store information on servers located in the United States or other jurisdictions. When information is transferred across borders, we apply safeguards designed to ensure the data remains protected in accordance with this Privacy Policy.

We may update this Privacy Policy from time to time. When we make material changes, we will provide notice through the Services or by other reasonable means and update the "Last Updated" date below.

Your continued use of the Services after an update constitutes acceptance of the revised policy.

Questions or concerns regarding this Privacy Policy or our data practices can be directed to support@arkascan.com.