← Back

Privacy Policy

Last updated: 22 May 2026

This Privacy Policy describes how Hand Scanner ("we", "us") collects, uses, and protects your personal information when you use the Hand Scanner Android application (the "App"). We respect your privacy and only collect data that is necessary to provide and improve the service.

1. Who we are

The data controller for the App is the developer of Hand Scanner. You can reach us at support@handscanner.app.

2. What we collect

Data	Purpose	Retention
Photographs of your palm (and your partner's palm, if you use Pair Analysis)	To generate the personalized reading. Sent to our analysis backend and an AI vision model (xAI Grok via secure server-side API).	Stored on our servers for up to 30 days, then deleted automatically. You can request immediate deletion at any time.
Email address	Account creation, sign-in, and customer support.	Retained while your account is active. Deleted within 30 days of account deletion.
Anonymous install identifier (UUID generated on device)	To attach scans/subscriptions to your install even if you sign out.	Until you uninstall the App or request deletion.
Subscription / purchase tokens	To verify your subscription with Google Play and unlock paid features.	Until the subscription expires + 90 days for accounting.
Crash logs & performance data (Firebase Crashlytics)	To detect and fix bugs. Stack traces only — never your photos or readings.	Up to 90 days.
Advertising identifier (Google AAID) and install attribution (AppsFlyer)	To measure the performance of our advertising campaigns. You can disable this in the Android system settings ("Opt out of ads personalization").	Up to 180 days from your last interaction.
Device locale, country code, app version	To deliver the App in the right language and currency.	Anonymous, retained with aggregate analytics.

3. What we do NOT collect

• We do not collect contacts, SMS, call logs, location, calendar, or any data outside of what is listed above.
• We do not sell or rent your personal data to anyone, ever.
• We do not use your photos to train any AI model.

4. Third-party services we use

• Supabase — our backend (database + authentication + edge functions). EU servers. supabase.com/privacy
• xAI (Grok) — provides the vision-language model that analyzes your palm photo. Requests are server-to-server; xAI does not retain images for training under our API agreement. x.ai/legal/privacy-policy
• Google Play Billing — handles subscription payments and Google Sign-In. policies.google.com/privacy
• Firebase (Google) — analytics, crash reporting. firebase.google.com/support/privacy
• AppsFlyer — advertising attribution. appsflyer.com/legal/services-privacy-policy

5. Your rights

You have the right, at any time, to:

• Access — request a copy of the data we hold about you.
• Delete — request immediate deletion of your account and all associated data. Email us and we will action it within 30 days.
• Withdraw consent — opt out of advertising attribution via your Android system settings, or delete the App.
• Lodge a complaint — with your local data protection authority if you believe we are mishandling your data.

6. Children

The App is not directed to children under 13 (or the relevant age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has used the App, please contact us so we can delete the account.

7. International transfers

Some processors (Google, xAI, AppsFlyer) may store data in the United States or other countries. We rely on standard contractual clauses and the processors' own certifications (e.g. EU-US Data Privacy Framework where applicable) to safeguard your data.

8. Changes to this policy

We may update this policy from time to time. We will notify you in-app and update the "last updated" date above. Continued use of the App after a change means you accept the updated policy.

9. Contact

For privacy questions, deletion requests, or anything else, email support@handscanner.app. We aim to respond within 5 business days.