Privacy Policy

Last updated: April 2026

1. Who we are

Scan2toy ("we", "us") is a family-friendly app that scans recyclable household items with your device camera and suggests creative DIY toy ideas for kids.

2. Information we collect

• Account data: email, display name, password hash (via Supabase Auth).
• Scan data: the photo you upload, the detected item, the ideas shown.
• Usage data: daily scan count, favorites, feedback.
• Device info: app version, OS, crash logs.

We do NOT collect precise location, contacts, or advertising identifiers.

3. How we use your data

• Run the AI scan (image sent to Google Gemini for identification and safety check).
• Show you relevant toy ideas and instructions.
• Enforce daily scan limits on the Free plan.
• Improve accuracy and detect abuse.

We do NOT sell your data. We do NOT use your data for advertising.

4. AI processing

Uploaded images are processed by Google Gemini to identify the item and generate DIY ideas. Images may be temporarily stored for abuse prevention and are deleted on account deletion.

5. Children's privacy

Scan2toy is designed for families. Accounts must be created by a parent or legal guardian. We do not knowingly collect personal information from children under 13 without verified parental consent. External web links are protected by a parental gate.

6. Third-party services

• Supabase — authentication and database.
• Google Gemini — image recognition and content safety.
• Cloudflare — DDoS protection and CDN.
• Railway — API hosting.

7. Your rights (GDPR / CCPA)

You can export all your data or permanently delete your account at any time from the Profile screen in the app. Deletion is immediate and irreversible.

8. Data retention

Account data is kept while your account is active. When you delete your account, all personal data is removed within 30 days.

9. Security

Data is encrypted in transit (HTTPS) and at rest. We use Cloudflare DDoS protection and rate limiting.

10. Contact

Questions? Email us at support@scan2toy.com.