Scran Privacy Policy

1. The basics (plain English)

• Your recipes are private to you.
• We do not sell your personal data.
• We only use your data to provide and improve Scran.
• You can request deletion of your account and data at any time.

2. What data we collect

Account information

When you create an account, we collect:

• Email address
• First name
• Last name

We use passwordless authentication (one-time code login).

Your content

When you use Scran, we store:

• Recipe URLs you save
• Images you upload (such as photos of recipes)
• Extracted recipe content
• AI-simplified versions of recipes

This content is private and only accessible to you.

App usage data (analytics)

We collect limited usage data to help us improve Scran, such as:

• Screens viewed
• Button clicks
• Feature usage

We do not send your name, email address or recipe content to our analytics tools.

Subscription information

If you purchase a Scran Plus subscription, we receive subscription and purchase information (such as your subscription status, plan and renewal dates) from the relevant app store via our subscription provider, RevenueCat.

Payment is handled by Apple or Google. We do not see or store your payment card details.

Device-based settings

Scran stores some information locally on your device so the app works offline and remembers your choices, such as font settings.

Approximate location

Our analytics providers may collect approximate location information (such as your country or region).

We do not collect or track your precise location.

3. How we use your data

We use your information to:

• Create and manage your account
• Save and display your recipes
• Process recipes using AI
• Provide Scran Plus subscriptions
• Improve the performance, reliability and usability of Scran
• Respond to support requests
• Send marketing emails if you have opted in

We may also send important service-related emails, such as account or security updates, even if you are not subscribed to marketing emails.

4. How AI is used

Scran uses AI to save your recipes and make them easier to follow.

When you import a recipe, we process recipe URLs or uploaded images to extract recipe content. When you use Simplify, we process recipe ingredients and method steps.

To provide these features, the relevant recipe data is securely sent to trusted third-party AI providers:

• OpenAI
• Anthropic
• Mistral

We only send the minimum information required to perform the requested task.

We store the resulting recipe so it remains available in your account.

We do not use your personal data or recipe content to train AI models.

5. Where your data is stored

We use trusted service providers to operate Scran, including:

• Kinde (authentication)
• Amazon Web Services (database hosting)
• Vercel (infrastructure)
• RevenueCat (subscription management)
• PostHog (product analytics)
• Loops (email communications)

Some of these providers process data outside the United Kingdom.

Where this happens, we rely on appropriate safeguards such as:

• UK Extension to the EU–US Data Privacy Framework
• Standard Contractual Clauses (SCCs)
• Other legally recognised transfer mechanisms where required

6. Legal basis for processing

Under UK GDPR, we process your personal data using one or more of the following legal bases:

• Contract – to provide and operate the Scran app and your subscription.
• Legitimate interests – to improve, secure and maintain Scran.
• Consent – where you have chosen to receive marketing communications.
• Legal obligation – where we are required to comply with applicable laws.

7. How long we keep your data

We keep your personal data while your account remains active.

If you delete your account (or request deletion):

• We will delete your account and associated data from our live systems within 24 hours.
• Back-up data is deleted on a delay: copies of your data may remain in our encrypted back-ups for up to 36 days after deletion and are removed on a rolling basis as those back-ups expire. Back-ups are not used to restore deleted accounts.
• Analytics are retained in de-identified form: after your account is deleted, we retain usage analytics (such as screens viewed and features used) and subscription transaction records in a form that can no longer be linked back to you.

We may also retain information where necessary to comply with legal obligations, resolve disputes or enforce our Terms of Use.

8. Your rights

Depending on your circumstances, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Restrict or object to certain types of processing.
• Receive a copy of your personal data in a portable format where applicable.
• Withdraw your consent for marketing communications at any time.

You can exercise these rights by:

• Contacting us at hello@scran.life
• Deleting your account within the app
• Clicking Unsubscribe in any marketing email

If you are unhappy with how we handle your personal information, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

9. Data security

We use appropriate technical and organisational measures to protect your personal data.

These include secure cloud infrastructure, authentication controls and restricted access to personal information.

Access to user data is limited to members of our small team who require it to operate and support Scran.

While we take reasonable steps to protect your information, no internet transmission or storage system can ever be guaranteed to be completely secure.

10. Children's privacy

You must be at least 16 years old to use Scran.

We do not knowingly collect personal information from anyone under the age of 16.

11. Changes to this policy

We may update this Privacy Policy from time to time.

If we make significant changes, we will notify users where appropriate. We will always update the “Last updated” date at the top of this policy.