Scran Privacy Policy

1. The basics (plain English)

• Your recipes are private to you
• We do not sell your data
• We only use your data to run and improve Scran
• You can request deletion of your data at any time

2. What data we collect

Account information

When you create an account, we collect:

• Email address
• First name
• Last name

We use passwordless authentication (magic link login).

Your content

When you use Scran, we store:

• Recipe URLs you save
• Images you upload (e.g. photos of recipes)
• Extracted recipe content (ingredients, methods)
• AI-simplified versions of recipes

This content is private and only accessible to you.

App usage data (analytics)

We collect limited usage data to improve the app, such as:

• Button clicks
• Screens viewed
• Feature usage

We do not send personal data (like your name, email, or recipe content) to analytics tools.

Device-based settings

We store some preferences locally on your device, such as:

• Font settings (e.g. OpenDyslexic)

These are not stored on your account.

Approximate location

We may collect approximate location (e.g. country-level) via analytics tools.

We do not track precise location.

3. How we use your data

We use your data to:

• Create and manage your account
• Save and display your recipes
• Process recipes using AI
• Improve the performance and usability of Scran
• Send emails (if you opt in)

We may also send service-related messages (e.g. downtime or important updates), even if you are not subscribed to marketing emails.

4. How AI is used

Scran uses AI to make recipes easier to follow.

When you import a recipe we process URLs or images to extract recipe content, and when you use Simplify, we process ingredients and method steps.

To do this, relevant data is securely sent to trusted third-party providers:

• OpenAI
• Anthropic
• Mistral

We only send the minimum data needed (e.g. recipe text or images).

We store the results so your recipes remain available in the app.

We do not use your personal data or recipe content to train AI models.

5. Where your data is stored

We use trusted service providers to run Scran, including:

• Kinde (authentication)
• Loops (emails)
• Amazon Web Services (database hosting)
• Vercel (infrastructure)
• PostHog (product analytics)
• RevenueCat (subscriptions, when enabled)

Some of these providers process data outside the UK/EEA.

Where this happens, we rely on appropriate safeguards such as:

• UK Extension to the EU-US Data Privacy Framework
• Standard Contractual Clauses (SCCs)

6. Legal basis (UK GDPR)

We process your data under:

• Contract — to provide the Scran app
• Legitimate interests — to improve and operate the product
• Consent — for marketing emails (where applicable)

7. How long we keep your data

We keep your data while your account is active.

If you request deletion:

• We will delete your account and associated data within 24 hours

We may also delete or suspend accounts if they are used in violation of our Terms of Use.

8. Your rights

You have the right to:

• Access your data
• Correct your data
• Request deletion
• Withdraw consent (for emails)

To exercise your rights, contact: hello@scran.life or click ‘Unsubscribe’ in your emails.

9. Data security

We use appropriate technical and organisational measures to protect your data.

Access is restricted to our small team on a need-to-know basis.

10. Children's privacy

You must be at least 16 years old to use Scran.

11. Changes to this policy

We may update this policy from time to time.

We will update the “Last updated” date accordingly.