Legal
Privacy Policy
Last updated: 3 October 2026
We collect as little as we can, use it only to deliver what you asked for, and delete what we don’t need.
1. Who is responsible for your data
The data controller is AI Innovate Solutions Ltd (company number 15908901), Office 6147, 182–184 High Street North, London E6 2JA, United Kingdom. For any privacy question or request, email scan@scanmyapp.dev.
2. What we collect
- Free scan requests: the URL you submit, your email address, your marketing choice and a one-way hash of your IP address (used to limit abuse; we don’t store the IP itself).
- Audit requests: your email, optionally your name and app URL, and the details you give about your project.
- Audits: temporary access to your source code, and the findings and reports we produce.
- Emails you send us: their content and your contact details.
- Payments (when available): handled by our payment provider; we never see or store your full card details.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Running the scan or audit you requested and sending you the report | Performance of a contract, or steps at your request before one |
| Preventing abuse of our forms (rate limits, captcha) | Legitimate interests |
| Security tips and stack alerts | Your consent (the unticked box), which you can withdraw at any time |
| Accounting and tax records | Legal obligation |
Service emails (your report, replies to your request) are always sent. Marketing emails are only sent if you ticked the box, and every one includes an unsubscribe link.
4. Who we share it with
We don’t sell your data. We use a small number of service providers to run ScanMyApp — website hosting, our database, email delivery, bot protection and, later, payments — who process data only on our instructions. Some of them may process data outside the UK; when they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy decisions.
5. How long we keep it
Source code is deleted right after the analysis. Other data is kept only as long as needed: see our data retention policy for each type of data.
6. Cookies
We don’t use advertising or tracking cookies. Our bot protection may use strictly necessary technical data to tell people from bots.
7. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw your consent at any time. Email scan@scanmyapp.dev; we answer within one month. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).
8. Changes
We’ll update this page if our practices change. The date at the top shows the latest version.