Privacy

What we collect, and why

We collect only what the app needs to work. We use all of it to run the app and for nothing else. We do not sell it. The app has no advertising and no tracking, and we do not use analytics or crash-reporting services.

Everyone with an account. Your email address and the name you enter (or, for a resident set up by shelter staff, a member ID in place of an email). A password, which is held by Google Firebase Authentication and which we cannot read. Your account type (donor, resident or shelter staff).

Donors. Your donation history, and a list of saved donation splits. When donations are open, your card details are entered into Stripe’s payment sheet and go to Stripe, not to us. We keep a Stripe customer record for you. Donations are paused in this version, so no payment is taken.

Residents. A profile name and a short story that you write; a member ID and QR code we make for you; your balance and the purchases made on your card, with the merchant, the amount and the category; photos of receipts that you take or choose; and answers you give about a purchase. If you choose to share a map pin, the app sends your phone’s location once, at that moment. We round it before donors see it. It lasts 30 minutes and is removed when it expires. We do not follow your location.

Shelter staff. Your name, email, the shelter you work for, and a record of the residents you confirm, including the name you give when you confirm in person. We do not store images of identity documents.

Reminders. If a resident turns on receipt reminders, we store a device token so that Apple’s notification service can deliver the reminder. Turning reminders off deletes the token. Reminders are never required.

On your phone. The app keeps a copy of your last balance and purchases, and any photo of a receipt waiting to be sent, so they show when you have no signal. They are cleared when you sign out. If you turn on the app lock, Face ID or your passcode is checked by the phone; the app never receives your face or fingerprint.

Reports. If you report a profile, we keep the report, the reason and your account.

Who can see it

• Donors can see a verified resident’s profile name, story, member ID and, if the resident chose to share it, the rounded map pin. A resident can hide their profile in the app. A resident set up by shelter staff starts hidden until the resident chooses to show it.
• Shelter staff can see the residents of their own shelter.
• The Scan Support team can see receipts and purchases when a receipt needs a second look.

Who we share it with

Service providers who run the app for us, and only for that: Google (Firebase: sign-in, database, file storage and server functions; its servers are outside Canada, including in the United States, so your information may be stored and processed there), Stripe (payments), Expo and Apple (delivering reminders), and Apple (map display). Each is bound by its own privacy terms to protect the data it handles. We share nothing else with anyone, unless the law requires it.

How long we keep it, and deleting it

You can delete your account inside the app: Settings, then delete account. This deletes your sign-in, your profile, your story, your photos, your saved splits and your map pin. We keep records of money that moved (the amount, the date and the status), because they involve two people and the law may require us to keep them, but we remove your name and account from them.

A resident who still holds a balance cannot delete the account until the balance is dealt with. Write to us and we will help.

You can also ask us to delete your data, or withdraw your consent, by writing to scansupport-mailbox@scan-support.com. You can turn off location and notifications at any time in your phone’s settings; the app keeps working without them.

Children

Scan Support accounts are for people 18 and older. We do not knowingly collect information from anyone under 18. If you think a person under 18 has an account, write to us and we will delete it.

Changes

If this page changes, the date at the top changes. We will say so in the app when the change matters to you.