Scanvisto is a card scanner for iPhone. This policy explains what the app and this website collect, why, where it is kept and how you remove it. The short version: your card photos never leave your phone, an account is optional, and the website uses no cookies.
Who is responsible
Scanvisto is part of Softomic, which is responsible for the personal data described here. For any question about privacy, or to use one of your rights, mail support@scanvisto.com.
Card photos
Scanvisto recognises cards on your iPhone itself. The camera image and any photo you scan are processed on the device and are never uploaded, stored on our servers or shared with anyone. Scanning also works without an internet connection.
Your collection without an account
Without an account, your collection, wishlist and settings are stored only on your iPhone. Deleting the app deletes them.
To show prices and keep the card list up to date, the app asks our database at Supabase (Frankfurt, Germany) for the cards you scan and own. These requests carry card ids and, like any connection, your IP address, but no account or name, and we do not keep a record of which cards you asked about.
Account and sync (optional)
If you choose Sign in with Apple, we receive from Apple a user id and an email address. You can let Apple hide your real address, in which case we receive a private relay address that forwards to you. We use the account only to keep your collection and wishlist the same on every iPhone you sign in on.
What is synced is card data only: which card, its name, set, number, language, version, how many you have and when you added it, and the same for your wishlist, including the last price shown for each wished card. Never photos, never your contacts, location or anything else on your phone.
This data is stored with Supabase, our database provider, on servers in the European Union (Frankfurt, Germany). It is kept for as long as you have an account. A card you remove stays marked as removed for 90 days, so your other devices can remove it too, and is then deleted for good.
Usage statistics
To learn which parts of the app work and where people get stuck, the app sends anonymous usage events, such as "scan completed", "onboarding finished" or "paywall viewed", to PostHog on its servers in the European Union. These events carry your device model, iOS version and app version, but no name, email, card photos or collection contents, and are linked only to a random id for your installation, not to a person or an account. Like any connection, PostHog receives your IP address. You can turn this off at any time in the app under Settings, Share usage data.
Purchases
Scanvisto Pro is sold through the App Store. Apple handles the payment; we never see your card or bank details. The app also connects to RevenueCat with a random app user id and reports each purchase (product, price and date), which helps us keep track of subscriptions. RevenueCat learns about renewals and cancellations from Apple. RevenueCat is based in the United States; data sent there is protected by the European Commission's standard contractual clauses.
Notifications
If you allow notifications, Apple delivers them to your iPhone. You can turn each kind of notification on or off in the app, and all of them in your iPhone settings.
This website
scanvisto.com uses no cookies, no analytics and no tracking, and loads nothing from other websites. Our hosting provider, Vercel, processes your IP address in short lived server logs to deliver the pages and to keep the site secure.
Why we may use this data
- Sync and your account: to provide the service you asked for (performance of a contract).
- Usage statistics: our legitimate interest in improving the app, with a switch to turn it off.
- Purchases: to provide the subscription you bought and to meet our accounting obligations.
- Website logs: our legitimate interest in a secure website.
Who processes data for us
- Apple: Sign in with Apple, App Store payments and notifications.
- Supabase: database for prices, accounts and sync, servers in the European Union.
- PostHog: anonymous usage statistics, servers in the European Union.
- RevenueCat: purchase records, United States, under standard contractual clauses.
- Vercel: hosting of this website.
We do not sell personal data and do not use it for advertising.
Deleting your account
In the app, go to Profile, then Account, then Delete account. This deletes your account and everything synced with it from our servers right away. Collections stored only on your phone are not affected; delete the app to remove those.
Your rights
Under the General Data Protection Regulation you may ask to see, correct, export or delete your personal data, object to or limit its use, and withdraw any consent. Mail support@scanvisto.com and we will answer within one month. You can also complain to your data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
Children
Scanvisto is not directed at children under 13 and does not knowingly collect personal data from them. An account is never required to use the app.
Changes
When this policy changes, we update the date at the top of this page. For important changes we also tell you in the app.