1. Information We Collect

1.1 Information You Provide

The App stores the following information locally on your device:

• Scan History: QR codes and barcodes you scan, including the content, type, and timestamp.
• Product Information: Cached product details retrieved from third-party APIs (product names, brands, images).
• App Settings: Your preferences for features like auto-open camera, duplicate prevention, and auto-open web links.
• Usage Statistics: App open count for review prompts.

1.2 Camera Access

The App requires camera permission to scan QR codes and barcodes. Camera data is processed in real-time on your device and is not transmitted, stored, or shared with us or any third parties.

1.3 Automatically Collected Information

We do not collect any device information, analytics, or usage data automatically.

2. How We Use Your Information

Information collected by the App is used solely for:

• Scanning and decoding QR codes and barcodes.
• Displaying your scan history within the App.
• Retrieving product information from third-party services.
• Providing export functionality (CSV, PDF, text, JSON, email).
• Remembering your app preferences and settings.
• Improving your user experience through app features.

We do not:

• Transmit your scan data to our servers.
• Share your information with third parties (except as described in Section 3).
• Use your data for advertising purposes.
• Track your location.

3. Third-Party Services

The App integrates with the following third-party services to enhance functionality:

3.1 Product Information APIs

When you scan a barcode, the App may query these services to retrieve product information:

• OpenFoodFacts: Food product database (Privacy Policy).
• Open Library API: Book information for ISBN codes (Privacy Policy).
• UPCItemDB: General product database (Privacy Policy).

These services receive only the barcode number—no personal information is transmitted.

3.2 Google Mobile Ads

The App displays advertisements through Google AdMob. Google may collect and process data in accordance with their privacy policy.

For EEA/UK Users: We implement Google's User Messaging Platform (UMP) to obtain your consent before displaying personalized ads, in compliance with GDPR and ePrivacy Directive requirements. When you first launch the app in the EEA/UK, you will be presented with a consent dialog where you can:

• Accept personalized ads (based on your interests and behavior).
• Accept non-personalized ads only (contextual ads without tracking).
• Manage your privacy choices.

AdMob Data Collection: Google AdMob may collect:

• Advertising ID (AAID on Android).
• Device information (model, OS version).
• IP address (for general location, not precise location).
• Ad interaction data (views, clicks).
• App usage data.

Your Advertising Choices:

• Manage Consent (EEA/UK): You can change your advertising consent preferences at any time through the App's Settings menu.
• Opt-out of Personalized Ads: Go to your device Settings > Google > Ads > Opt out of Ads Personalization.
• Reset Advertising ID: Reset your advertising identifier through device settings to limit ad tracking.

More Information:

• Google Ads Privacy Policy: https://policies.google.com/technologies/ads
• How Google uses data: https://policies.google.com/technologies/partner-sites
• Google Privacy & Terms: https://policies.google.com/privacy

4. Data Storage and Security

4.1 Local Storage

All scan history, settings, and cached product data are stored locally on your device using AsyncStorage. This data:

• Remains on your device and is not transmitted to our servers.
• Is accessible only by the App.
• Can be deleted by clearing the app data or uninstalling the App.

4.2 Data Security

While we implement reasonable security measures, no electronic storage is 100% secure. Since data is stored locally on your device, we recommend:

• Using device security features (screen lock, encryption).
• Keeping your device's operating system updated.
• Being cautious when exporting sensitive scan data.

5. Your Rights and Choices

5.1 Access and Control

You have complete control over your data:

• View History: Access all your scans within the App.
• Delete Data: Delete individual scans, selected items, or clear all history.
• Export Data: Export your scan history in multiple formats (CSV, PDF, JSON, text).
• Manage Settings: Adjust app preferences at any time.

5.2 Camera Permissions

You can revoke camera access at any time through your device settings. Note that the App requires camera access to function properly.

5.3 Rights for EEA and UK Users (GDPR/UK GDPR)

Under GDPR and UK GDPR, you have the following rights:

• Right to Access (Article 15): Request confirmation of what personal data we process and obtain a copy.
• Right to Rectification (Article 16): Request correction of inaccurate personal data.
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing (Article 18): Request limitation of how we process your data.
• Right to Data Portability (Article 20): Receive your personal data in a structured, commonly used format.
• Right to Object (Article 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent (Article 7): Withdraw consent for camera access or advertising at any time without affecting prior processing.
• Right to Lodge a Complaint: File a complaint with your local supervisory authority (e.g., ICO in UK, your national DPA in EU).
• Right Not to Be Subject to Automated Decision-Making (Article 22): The App does not use automated decision-making or profiling.

How to Exercise Your Rights: Since all data is stored locally on your device, most rights can be exercised directly through the App's delete and export functions, or by uninstalling the App. For any questions or assistance, contact us at the email provided in Section 10.

5.4 Complete Data Deletion

To completely remove all data:

1. Clear all scan history within the App using the "Delete History" function, or
2. Clear app data through your device settings (Settings > Apps > Simple QR and Barcode Scanner > Storage > Clear Data), or
3. Uninstall the App from your device.

6. Children's Privacy

The App does not knowingly collect information from children under 13 years of age. The App is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided information through the App, please contact us.

7. International Users and Data Transfers

The App is available globally. Since all scan data is stored locally on your device, there are no international data transfers of your scan history.

7.1 Third-Party Service Data Transfers

When you use product lookup features, barcode data may be transmitted to:

• OpenFoodFacts (hosted in France/EU).
• Open Library (Internet Archive, United States).
• UPCItemDB (United States).

When you view advertisements, Google AdMob may transfer data internationally as described in Google's privacy policies.

7.2 Safeguards for EEA/UK Users

For users in the European Economic Area and United Kingdom, international data transfers to third-party services rely on:

• Adequacy Decisions: Where the European Commission has determined that the destination country provides adequate data protection.
• Standard Contractual Clauses (SCCs): Google implements SCCs approved by the European Commission for data transfers.
• Legitimate Interests: Product lookup functionality necessary for the service you've requested.

You can learn more about Google's data transfer mechanisms at Google's GDPR Compliance page.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Any changes will be effective when we post the revised Privacy Policy.

How We Notify You:

• Updating the "Last Updated" date at the top of this policy.
• Posting the new Privacy Policy in the App and on our website.
• For material changes affecting your rights (especially for EEA/UK users), we will provide prominent notice through the App or other appropriate means before the changes take effect.

Your Continued Use: Your continued use of the App after changes become effective constitutes acceptance of the updated policy. If you do not agree with the changes, please discontinue use of the App.

For EEA/UK Users: If changes require new consent (e.g., processing data for new purposes), we will obtain your explicit consent before implementing those changes.

9. Data Retention

Your scan history and settings are retained locally on your device until you:

• Manually delete them through the App's delete function
• Clear the App's data through device settings
• Uninstall the App

We do not retain any of your data on our servers.

10. Contact Us

11. Legal Basis for Processing (GDPR/UK GDPR)

For users in the European Economic Area (EEA) and United Kingdom (UK), we comply with the General Data Protection Regulation (GDPR) and UK GDPR. Our legal basis for processing your information is:

• Consent (Article 6(1)(a) GDPR): Camera permissions, AdMob personalized advertising (where applicable).
• Legitimate Interests (Article 6(1)(f) GDPR): App functionality, product information retrieval, security, and fraud prevention.
• Contract Performance (Article 6(1)(b) GDPR): To deliver the scanning and product lookup services you request.

11.1 EU/UK Representative

While Logistics Oasis Limited is not required to appoint a formal EU representative due to the nature and scale of our data processing (all data is stored locally on devices), we are committed to addressing all GDPR/UK GDPR inquiries promptly through our contact email.

12. Automated Decision-Making and Profiling

The App does not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. All app functions are controlled by you directly.

Google AdMob: While Google AdMob may use automated systems to select which ads to display, this does not produce legal effects concerning you. You have the right to opt-out of personalized advertising as described in Section 3.2.

While we do not store your scan data on our servers, in the unlikely event of a data breach affecting any systems we operate:

• For EEA/UK Users: We will notify affected users and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR Article 33
• For All Users: We will notify you promptly if a breach is likely to result in a high risk to your rights and freedoms
• Notifications will include the nature of the breach, likely consequences, and measures taken or proposed to address the breach

14. Supervisory Authority

For EEA Users: If you have concerns about how we handle your personal data, you have the right to lodge a complaint with your local supervisory authority. You can find your data protection authority at https://edpb.europa.eu/about-edpb/board/members_en

For UK Users: You can lodge a complaint with the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk/
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected.
• Right to delete personal information.
• Right to opt-out of the sale of personal information (we do not sell your information).
• Right to non-discrimination for exercising privacy rights.

To exercise these rights, please contact us using the information in Section 10.