Scan All Privacy Policy

1. Overview & Core Offline Principle

Scan All by PMC Labs is built with privacy as a foundational principle. This Privacy Policy explains how information is handled when you use the Scan All application on Android devices.

Scan All is designed to function 100% offline. We do not collect, transmit, profile, or sell your personal data. There are no user accounts, no cloud sync databases, and no remote behavioral analytics. All barcode recognition, matrix rendering, and link security checks happen strictly in-memory and inside your physical device sandbox.

2. Data We Do NOT Collect

Unlike common ad-supported or cloud-connected scanner utilities, Scan All enforces strict data minimization:

• No Accounts or Logins: No username, email address, phone number, or password is ever requested or registered.
• No Telemetry or Analytics: Zero crash-reporting trackers, Google Analytics, Firebase Analytics, or behavioral telemetry SDKs.
• No Cloud Sync: No scan history, decoded barcode content, contact vCards, or generated QR data is ever uploaded to any server.
• No Location Surveillance: Scan All never requests GPS or coarse location permissions.
• No Cross-App Identifiers: We do not track or store Google Advertising IDs (AAID), hardware IMEIs, or MAC addresses.

3. QR Code Generation & Anti-Scam Shield

When you generate QR codes in Scan All:

• Local Matrix Computations: All QR matrix computations, image rendering, and vCard/Wi-Fi encoding occur 100% locally on your device via the embedded ZXing engine.
• Anti-Scam Domain Validation: When applying a verified social media brand badge (e.g., Facebook, Instagram, YouTube, TikTok, X, WhatsApp, Telegram, LinkedIn, Gmail, GitHub, Discord, Spotify, Threads, Reddit), the destination URL is verified strictly on-device to prevent phishing and spoofed QR codes.
• Zero Cloud Query: The Anti-Scam link verification is executed entirely offline using local regular expressions and authoritative domain syntax matching. Your links, social profiles, and destinations are never transmitted off your device.
• Local Storage of Rendered QR Images: Saved QR code images are exported strictly to your device's local Pictures directory (Pictures/Scan All) and can be viewed, shared, or deleted by you at any time.

4. Camera & Local Device Permissions

Scan All requests only the bare essential permissions required for optical barcode operations:

• Camera Access (android.permission.CAMERA): Used solely to preview and decode barcodes and QR codes in real-time using Google Play Services ML Kit and CameraX. Camera frames are analyzed in volatile RAM and are immediately discarded. Camera imagery is never recorded, cached, or transmitted.
• Vibration (android.permission.VIBRATE): Used exclusively for optional tactile haptic feedback upon a successful scan. You can disable vibration at any time in Settings.
• Network State (android.permission.INTERNET): Declared for standard web-intent dispatch when you choose to open a scanned link in your web browser. Core scanning and generator tools run 100% offline.

5. On-Device Storage & Retention

Your scan history is stored locally on your device using encrypted SharedPreferences. You maintain complete control over your data:

• Individual Control: Individual scan entries can be deleted, favorited, copied, or shared.
• Favorite Protection: Favorited items are protected from automatic cleanup.
• Instant Wipe: You can wipe all history instantly via Settings → Clear all history.
• App Uninstallation: Uninstalling Scan All permanently and irreversibly purges all local storage and preferences.

6. Third-Party Libraries (ML Kit & ZXing)

Scan All leverages proven, high-performance open-source and on-device runtime components:

• Google Play Services ML Kit (18.3.1): Performs on-device barcode and QR scanning using Google's neural models pre-installed on Android devices. It processes frames without making cloud network calls.
• ZXing (Zebra Crossing): A trusted open-source barcode encoding and matrix generation library that operates purely in local memory.
• Zero Ad Networks: No advertising SDKs, ad trackers, or affiliate monetizers are bundled in the application.

7. Children's Privacy Compliance

Scan All is intended for general audiences and complies fully with the Children's Online Privacy Protection Act (COPPA) and international standards. Because Scan All does not collect, store, or transmit personal data from any user, it does not collect information from children under 13.

8. Contact Information

If you have questions regarding this Privacy Policy or our architectural privacy practices, please contact PMC Labs at: pmclab.dev@gmail.com