Summary
- The website does not set cookies and runs no analytics.
- Your scan history and 2FA secrets are stored on your device only.
- The app sends data to some services. They are listed below.
- You can contact us at support@tensortechapps.com.
Who we are
Tensortech Apps B.V., the Netherlands, is the controller of your data. Contact: support@tensortechapps.com.
The website
The website does not set cookies. It runs no analytics and no ads.
Netlify hosts the site. Netlify keeps server logs (IP address, browser, time, page) to run and protect the service.
The generator makes codes in your browser. Nothing you type is sent to us.
The app: data stored on your device
Your scan history, the codes you create and your 2FA secrets are stored on your device only. We do not receive them. If you delete the app, this data is deleted.
The app: data sent to services
The app sends data to these services. Each row shows what the service receives, why, and when.
| Service | What it receives | Why | When |
|---|---|---|---|
| Our safety check server, which asks Google Web Risk | The link in a scanned code. Our server runs on Google Cloud in the United States (us-central1). It sends the link to Google Web Risk. The link is processed in the United States. | To check the link for phishing and malware | Only when a Pro user runs the safety check. |
| Google time server (time.google.com) | A network time request. It sends no personal data, only the IP address that every network request has. | To check that the phone clock is correct, so that 2FA codes are correct | When you use the 2FA feature. iPhone app only. |
| Google AdMob | Device and ad data. The advertising identifier only when you allow it (on iPhone, through the App Tracking Transparency prompt). | To show ads | Free version only. |
| RevenueCat | Purchase and subscription status, an anonymous app user ID | To manage Pro | When you buy or restore Pro. |
| Superwall | Screen views of the upgrade screen, an anonymous ID, purchase events | To show the upgrade screen | When the upgrade screen opens. iPhone app only. |
| Firebase (Google) | App usage events, device model, OS and app version, an app instance ID. Remote Config settings. | To fix bugs and improve the app | While you use the app. |
| SolarEngine | Install and purchase events, device data, and the advertising identifier when you allow it | To measure which ads bring installs | After install. iPhone app only. |
| Apple App Store and Google Play | Payment details | To process payments | When you buy Pro. We never see your card. |
| Product search sites (Google, eBay, Amazon, OpenFoodFacts) | The barcode number | To show product results | Only when you tap a search button. The site opens in your browser. |
Permissions
- Camera: to scan codes. The images stay on the phone.
- Photos: when you pick an image to scan, and when you save a code you create to your photo library.
- Contacts (iPhone): only when you save a contact from a scanned code. The app opens the system contact form. The contact is saved only when you tap Done.
- Notifications: to send reminders about the app and about Pro. The app schedules them on your phone. You can turn them off in the phone settings.
- Location (Android): the app declares this permission for its Wi-Fi library. Android needs it to join a Wi-Fi network from a scanned Wi-Fi code. The app does not collect or send your location.
- Tracking (iPhone): only to personalize ads and measure ads. You can say no.
Legal bases
- Consent: ad identifiers and ad personalization.
- Contract: Pro purchases.
- Legitimate interest: security logs and ad measurement without identifiers.
How long we keep data
Data on your device stays until you delete it or delete the app. Service providers keep data for the periods in their own policies. Netlify logs are kept for a short period for security.
Your rights
Under the GDPR, you have the right to:
- access your data
- correct your data
- delete your data
- restrict how we use your data
- object to how we use your data
- receive your data in a portable format
- withdraw your consent at any time
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl.
Children
The app is not for children under 13. We do not knowingly collect data from them.
Changes to this policy
When the policy changes, we update the date at the top of this page.
Contact
Write to support@tensortechapps.com.
