Privacy Policy - HantaScan
Privacy Policy
Last updated: 2026-05-20
This Privacy Policy describes how HantaScan ("we", "our", or "us") collects, uses, and protects your information when you use our mobile application.
Introduction
This Privacy Policy describes how HantaScan ("we," "our," or "us") collects, uses, and shares information when you use our mobile application (the "App"). HantaScan is a utility application that helps users scan and assess spaces for hantavirus risk indicators using their device's camera, photo library, and location. By using the App, you agree to the collection and use of information in accordance with this Policy.
Effective Date: 2026-05-20
Information We Collect
We collect the following categories of information to provide and improve the App:
- Camera Images and Photos: When you use the scan feature, the App processes images captured by your device's camera or selected from your photo library to analyze spaces for hantavirus risk indicators.
- Location Data: With your permission, we collect your approximate or precise location to display outbreak risk information near you and map-based features.
- Device Information: Device model, operating system version, unique device identifiers, language, time zone, network status, and app version.
- Usage Data: Information about how you interact with the App, such as features used, screens viewed, session duration, taps, scrolls, and crash reports.
- Advertising Identifiers: With your permission (via App Tracking Transparency on iOS and Advertising ID on Android), we may collect your advertising identifier to personalize ads.
- Purchase Information: If you purchase a subscription or in-app product, we receive transaction confirmations from the App Store or Google Play (processed via RevenueCat). We do not collect or store your payment card details.
- Account Information: If you sign in, we may collect your authentication identifiers via Firebase Authentication.
- Push Notification Tokens: A unique token used to deliver push notifications to your device, if you opt in.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide and operate the App's core scanning, risk assessment, and mapping features.
- To process and analyze images you capture or select for hantavirus risk indicators.
- To display outbreak risk information relevant to your geographic area.
- To personalize your experience and remember your preferences.
- To deliver, measure, and optimize advertisements (only with your consent on iOS).
- To process subscriptions and in-app purchases.
- To send push notifications about important updates, risk alerts, or new features.
- To monitor crashes, debug issues, and improve App stability and performance.
- To analyze usage trends and understand how users interact with the App.
- To comply with legal obligations and enforce our Terms of Service.
Permissions We Request
The App requests the following device permissions, each of which can be granted or denied at any time in your device settings:
- Camera: Required to scan physical spaces and capture images for hantavirus risk analysis.
- Photo Library: Required to select existing photos from your device for risk analysis.
- Location (When in Use): Required to show outbreak risk information and map data near your current location.
- Media Library: Used to save scan results or reports to your device, if you choose.
- Push Notifications: Used to send risk alerts and important updates.
- App Tracking Transparency (iOS): Asks for your permission before tracking your activity across other apps and websites for advertising purposes.
- Advertising ID (Android): Used to deliver and measure ads.
- Network Access: Required to sync data, deliver updates, and connect with our backend services.
Denying a permission may limit certain functionality, but you may continue to use parts of the App that do not require that permission.
Third-Party Services
We use trusted third-party services to operate, analyze, and monetize the App. These services may collect and process information in accordance with their own privacy policies:
- Firebase Analytics — usage analytics and event tracking.
- Firebase Crashlytics — crash reporting and stability monitoring.
- Firebase Cloud Messaging — push notification delivery.
- Firebase Authentication — user authentication services.
- Cloud Firestore — cloud data storage and synchronization.
- Firebase Remote Config — remote configuration of app behavior.
- Google AdMob — display of in-app advertisements.
- Google Play Services — core Android services and advertising ID.
- Google Maps — maps and location-based visualizations.
- Facebook SDK (Meta) — analytics, ad attribution, and app events.
- TikTok Ads Events — ad attribution and conversion tracking.
- RevenueCat — subscription and in-app purchase management.
- Microsoft Clarity — behavioral analytics and session insights.
- Expo — application framework, build, and update services (including Hot Updater).
- Apple (App Store, StoreKit, SKAdNetwork) — distribution, in-app purchase processing, and privacy-preserving ad attribution.
Advertising
The App displays advertisements provided by Google AdMob and may use Facebook Audience Network and TikTok ad attribution services. Ads may include banner, interstitial, rewarded, and app-open formats. We may serve personalized ads only if you grant permission via the App Tracking Transparency prompt on iOS or do not opt out of personalized ads on Android. If you decline tracking or opt out, you will still see ads, but they may be less relevant. You can purchase a premium subscription to remove ads entirely.
Data Sharing and Disclosure
We do not sell your personal information. We share information only in the following circumstances:
- With Service Providers: Trusted third parties (listed above) that perform services on our behalf, bound by confidentiality and data protection obligations.
- For Legal Reasons: When required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of our users or others.
- Business Transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our business or assets.
- With Your Consent: When you explicitly authorize sharing.
Data Retention
We retain your information for as long as necessary to provide the App's services and for legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing our agreements. Crash logs and analytics are typically retained for a maximum of 14 months. Images you capture are processed on-device or transiently and are not stored on our servers unless you explicitly save them. You may request deletion of your data at any time (see "Account Deletion" below).
Data Security
We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (HTTPS/TLS), secure cloud infrastructure provided by Google Firebase, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the information we hold about you.
- Correction: Request that inaccurate information be corrected.
- Deletion: Request deletion of your information.
- Restriction or Objection: Restrict or object to certain processing activities.
- Portability: Request a copy of your data in a portable format.
- Withdraw Consent: Withdraw consent for processing where consent is the legal basis.
- Opt Out of Tracking: Disable tracking in your device's settings at any time.
To exercise any of these rights, contact us at diegoadriian6@proton.me.
Account Deletion
You can request deletion of your account and associated personal data at any time. To delete your account:
- Open the App and navigate to Settings → Account → Delete Account, or
- Send an email to diegoadriian6@proton.me with the subject line "Account Deletion Request" from the email address associated with your account.
We will process your request within 30 days. Upon deletion, your personal data will be permanently removed from our systems, except for any information we are required to retain for legal, accounting, or regulatory purposes (such as transaction records).
International Data Transfers
Your information may be transferred to, processed, and stored in countries other than your country of residence, including the United States and other jurisdictions where our service providers operate. These countries may have data protection laws that differ from those in your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your information receives adequate protection.
Children's Privacy
HantaScan is not directed to children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at diegoadriian6@proton.me.
California Privacy Rights (CCPA)
If you are a California resident, you have the right to know what categories of personal information we collect, request deletion of your information, and opt out of the "sale" or "sharing" of personal information as defined under the California Consumer Privacy Act (CCPA). We do not sell personal information in the traditional sense. To exercise these rights, contact us at diegoadriian6@proton.me.
European Privacy Rights (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the rights of access, rectification, erasure, restriction, portability, and objection. The legal bases on which we process your data include your consent, the performance of a contract, compliance with legal obligations, and our legitimate interests in operating and improving the App. You also have the right to lodge a complaint with your local data protection authority.
Medical Disclaimer
HantaScan provides informational risk indicators only and is not a medical device, diagnostic tool, or substitute for professional medical, public-health, or pest-control advice. The App's scan results should not be relied upon to diagnose, treat, or prevent any disease. Always consult qualified professionals for medical concerns or for definitive assessment of hantavirus-related risks.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Effective Date" at the top of this Policy and, where appropriate, through an in-app notification. Your continued use of the App after the changes become effective constitutes your acceptance of the revised Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
- Email: diegoadriian6@proton.me
- App Name: HantaScan