Privacy Policy

1) Overview

RashScan is designed to work without a named user account. Images and questionnaire responses are transmitted over an encrypted connection to our backend for analysis. Scan records and results may be retained under an anonymous device identifier so the app can provide scan history. We do not sell or rent this data.

2) Data We Process

• Camera & Photos: Images you capture or import are uploaded to our backend to perform the requested analysis and provide scan history.
• Questionnaire & Results: Symptom answers, generated assessments, confidence scores and recommendations are processed and may be stored with an anonymous device identifier.
• In-App AI Chat: Chat prompts and responses may be processed by our backend and displayed in your session or history.
• Notifications (optional): If you enable reminders or alerts, related settings are stored locally.
• Support Contact: If you email us, we process your email address, message, and any attachments solely to respond.

2.1) Location & Weather Conditions

Rash Scan may request access to your device's location. This is used only to detect local weather conditions (e.g., humidity, temperature, UV index) which may affect skin sensitivity and rash symptoms. This helps improve accuracy of analytics and insights.

• No precise location is stored on our servers.
• No background tracking: the app does not track movement or constant location.
• No sharing or selling: location data is not shared with third parties for ads or marketing.
• Local use only: weather data is processed only to enhance in-app results.

Location permission is optional and can be disabled at any time in device settings, but certain features (like weather-based rash accuracy) may not function without it.

3) What We Do Not Collect

• We do not require your name, postal address or phone number to perform a scan.
• No third-party advertising SDKs or cross-app tracking.
• No data linkage to your identity; no sale or sharing of personal information with data brokers.

4) Cloud Processing

Rash and product analysis uses server-side processing. Content is transmitted over an encrypted connection and processed to generate the requested result. Records may be retained to provide device-based history, operate and secure the service, investigate errors and meet legal obligations. We limit access to authorized service operations and do not use scan content for third-party advertising.

5) Subscriptions, Billing & Auto-Renewal

If you purchase a subscription, payment is processed by the platform provider (e.g., Apple or Google). We do not receive your full payment card details. We may receive limited, non-sensitive purchase metadata (e.g., product ID, transaction/receipt identifier) to unlock features, validate your subscription, provide support, and prevent fraud.

• Auto-renewal: Subscriptions automatically renew unless you cancel at least 24 hours before the end of the current period.
• Renewal charge: Your account will be charged for renewal within the 24 hours prior to the period ending.
• Manage or cancel:
  • On iOS: Settings → [your name] → Subscriptions (or App Store → Account → Subscriptions).
  • On Android: Google Play → Profile → Payments & subscriptions → Subscriptions.
• Refunds: Subject to the platform’s policies (Apple App Store / Google Play). Please submit refund requests through the respective store.

6) Data Retention & Deletion

• Device and server history: Scan history is associated with an anonymous device identifier rather than a named account.
• Delete history: Use the history-clearing control in the app to request deletion of scan history associated with that device identifier.
• Support emails: Retained only as long as needed to resolve your request and for legitimate business/legal purposes.
• Purchase metadata: Retained only as long as necessary to provide access to paid features, comply with law, or resolve billing disputes.

7) Children’s Privacy

Rash Scan is not intended for children under 16. Parents/guardians who believe a child has provided personal information should contact us so we can promptly delete it.

8) Your Rights

Depending on your region (e.g., EU/UK GDPR, California CCPA/CPRA), you may have rights to access, delete, correct, or restrict processing. Because we generally do not store personal data on our servers, we typically can assist by:

• Providing in-app deletion for local data; and
• Deleting any personal data you sent via support (upon a verified request to support@rashscan.com).

9) Security

We use reasonable technical and organizational measures to protect data in transit and at rest. No system is 100% secure—use the app in private settings and avoid sharing sensitive images with others.

10) International Transfers

We do not routinely transfer personal data cross-border because we do not store it. Support communications may be processed where our email/support tools are hosted.

11) Changes to This Policy

We may update this Policy to reflect new features or legal requirements. We will update the effective date above and provide in-app notice where appropriate.

12) Contact

Questions or privacy requests: support@rashscan.com