Privacy Policy

This policy explains what information ScanPlay collects, why, and your choices. It applies to scanplay.in, the ScanPlay Studio, the AR player and the ScanPlay Android app.

1. Information we collect

• Account data: name, email address, WhatsApp/phone number, password (stored as a one-way hash). If you sign in with Google we receive your name, email and Google account ID.
• Content: the photos and videos you upload, project names and settings.
• Payment data: plan, amount, Razorpay order and payment IDs. Card, UPI and bank details are entered on Razorpay's secure checkout and never reach our servers.
• Usage data: scan counts per project (date and count only), server logs with IP address and browser type for security.
• Camera: the AR player uses the phone camera to recognise the printed photo. Camera frames are processed on the device in the browser and are never uploaded or stored.
• Location: on the home page we may look up the approximate region of your IP address once, only to pick a display language. It is not stored.

2. How we use it

• To provide the Service: store your content, generate QR codes, play videos to viewers.
• To send verification codes, password resets, payment receipts and important service notices by email.
• To enforce plan limits, prevent abuse and keep the Service secure.
• To respond to support requests.

We do not sell personal data and do not show third-party advertising.

3. Sharing

• Razorpay (payments), Hostinger (hosting, email), Google (optional sign-in, fonts), ipapi.co (approximate region for language, home page only).
• Viewers who scan your QR see the video and project name you chose.
• Authorities when required by law.

4. Retention

• Content is kept while your plan is active, plus a 30-day grace period, then deleted from our servers.
• Trial accounts: content is deleted 30 days after the trial ends.
• Account records and payment records are kept as required by Indian tax law (up to 8 years) after which they are deleted or anonymised.

5. Your rights

You can view and update your name, phone and password in Settings, delete individual photos or projects at any time, and request full account deletion or a copy of your data by emailing info@scanplay.in. We respond within 30 days.

6. Security

Data is transmitted over HTTPS, passwords are hashed, verification codes expire in 15 minutes, and the database is not web-accessible. No system is perfectly secure; tell us immediately if you suspect misuse of your account.

7. Children

The Service is not directed at children under 18. We do not knowingly collect their data; contact us to remove it.

8. Android app

The ScanPlay Android app is a wrapper around scanplay.in and collects the same data. It requests the camera permission for AR playback and file access only when you choose a photo or video to upload. It contains no advertising SDKs or trackers.

9. Changes

We will post updates here and, for material changes, notify you by email.