Terms of Service

1. Who we are

ScanMyApp is operated by AI Innovate Solutions Ltd, a company registered in England and Wales under number 15908901, whose office is at Office 6147, 182–184 High Street North, London E6 2JA, United Kingdom (“we”, “us”). You can reach us at scan@scanmyapp.dev.

2. Our services

• Free scan: passive checks of what is publicly visible from a URL you submit.
• Express audit: an automated analysis of your source code by our AI agent and scanning engine.
• AI + human review: the express audit, reviewed by an engineer.
• Full code audit: a review of security, database, architecture and code quality led by a senior engineer.
• Re-scan: a new analysis after you have made corrections.

Our services are limited to static analysis of source code and passive external checks. We do not perform penetration testing or any active attack, and we do not certify compliance with any standard (such as SOC 2, ISO 27001 or PCI DSS).

3. No security guarantee

Our reports describe the issues we found within the scope stated in each report, at the time of the analysis. They are not a guarantee that your application is secure or free of vulnerabilities. A good score means fewer issues were found in what was checked, not that none exist. You remain responsible for the security of your application and for applying, testing and deploying any fix.

4. Your responsibilities

• You only submit URLs and code that you own or are authorised to have analysed.
• For paid audits that test live resources, you may be asked to prove ownership (for example with a DNS record or a file on your domain).
• You don’t use our services to target third parties, and you don’t try to disrupt or misuse them.
• You review fix prompts and code changes before deploying them. They are suggestions, not guaranteed fixes.

We may refuse or stop any request that falls outside our scope or these rules.

5. Requests, prices and payment

Prices are shown in US dollars on our pricing page. Sending a request does not commit you to pay. We confirm the scope and the final price by email before any payment, and work starts once payment is confirmed. Applicable taxes may be added depending on your location.

6. Refund guarantee

If a paid report brings you nothing useful, tell us by replying to the delivery email within 14 days and we will refund you. This is in addition to any rights you have under consumer law.

7. Your code and confidentiality

• We access your code read-only, only for the requested analysis. Your code is never executed.
• Cloned code is deleted once the analysis is complete. We keep the results (findings and report). See our data retention policy.
• For full code audits, we sign a non-disclosure agreement before accessing your code.
• We treat your code, findings and reports as confidential and never share them with third parties, except the service providers we need to deliver the service, under confidentiality obligations.

8. Case studies and publications

We never publish anything about your app — including anonymised case studies or incident write-ups — without your separate, prior written consent. Even with consent, we remove any detail that could identify you, and we never publish an issue that has not been fixed.

9. Intellectual property

You keep all rights to your code. Once paid, you may use your report freely, including sharing it with investors, clients or partners. Our website, software, methods and templates remain our property.

10. Liability

Nothing in these terms limits liability that cannot be limited by law, including for death or personal injury caused by negligence, or fraud. Otherwise, our total liability for any claim related to a service is limited to the amount you paid for that service, and we are not liable for indirect losses, loss of profit or data, or losses caused by vulnerabilities we did not find or by fixes you applied.

11. Changes

We may update these terms. The version that applies to an order is the one in force on the date you confirmed it. The date at the top of this page shows the latest update.

12. Governing law

These terms are governed by the laws of England and Wales, and the courts of England and Wales have jurisdiction, without depriving consumers of the protection of the mandatory laws of their country of residence.