Last updated: May 10, 2026
Unscanny ("we", "us", "our") is a mobile application and web service that extracts structured information from images, including text, contact data, QR codes, and optionally performs face-based profile searches via third-party services. This Privacy Policy explains how we collect, use, store, and protect your data when you use the Unscanny app or website (unscanny.com).
We generate and store a unique installation identifier for your device using platform-provided APIs (iOS Keychain / Android ANDROID_ID). This identifier is used to associate your searches with your device, enforce usage limits, and record your consent. It is not linked to your name, email, or any other personally identifying information.
When you use the image scan or face search features, your image is transmitted to our servers over an encrypted HTTPS connection. Images submitted for face search are forwarded to our third-party face recognition provider (FaceCheck.id). Images are not stored on our servers beyond the duration required to complete processing and are deleted immediately after.
The results of face searches (profile URLs and match scores returned by FaceCheck.id) are stored in our database and associated with a short-lived access token. Results are automatically deleted after 7 days. You may request earlier deletion at any time (see Section 7).
When you consent to the face search feature, we record the timestamp, your device identifier, your app version, and your IP address. This record is retained for legal compliance purposes for up to 3 years.
Standard server logs (request timestamps, IP addresses, HTTP status codes) are retained for up to 30 days for security and debugging purposes.
The face search feature processes facial geometry from images you submit. This constitutes biometric data under applicable laws including the Illinois Biometric Information Privacy Act (BIPA), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and the Washington My Health MY Data Act.
We do not collect biometric data unless you explicitly opt in to the face search feature. Consent is obtained separately and may be withdrawn at any time. We do not sell, lease, trade, or otherwise profit from biometric data.
Face recognition processing is performed by FaceCheck.id, a third-party sub-processor. Their privacy policy is available at facecheck.id. By using the face search feature, you acknowledge that your image will be transmitted to FaceCheck.id for processing.
Retention schedule: Facial images are not stored. Search result data derived from face recognition is stored for a maximum of 7 days and then permanently deleted.
For users in the European Economic Area, our legal bases are:
Unscanny is not directed at children under the age of 13 in the United States, or under the applicable age of digital consent in other jurisdictions (16 in most EU member states). We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our service, contact us immediately at the address in Section 10 and we will delete it.
We share data with the following sub-processors only:
We do not sell your data to third parties. We do not share data with advertisers or data brokers.
Depending on your jurisdiction, you may have the right to:
To delete your data, use the "Delete my data" option in the app Settings, or contact us at the address below. We will respond within 30 days. For BIPA requests, we will respond within the timeframe required by Illinois law.
| Data type | Retention |
|---|---|
| Submitted images | Deleted immediately after processing |
| Search results | 7 days |
| Device identifier | Until deletion requested |
| Consent records | 3 years (legal compliance) |
| Server logs | 30 days |
All data is transmitted over TLS 1.2 or higher. Our database is hosted on AWS RDS in a private network not accessible from the public internet. We apply the principle of least privilege to all system access. No system has access to more data than required for its function.
For privacy requests, data deletion, or questions about this policy, contact us at:
privacy@unscanny.com
We may update this policy to reflect changes in our practices or applicable law. Material changes will be communicated via an in-app notice. Continued use of the app after notice constitutes acceptance of the updated policy.