ScanLingo: Learn by Reading Privacy Policy

1. Scope and identity

This policy covers the ScanLingo: Learn by Reading iOS app, this legal and support site, and support requests that you send to us.

The operator is 戚蕴杰, an individual developer in the People's Republic of China. For personal information whose purposes and means of processing the operator determines, the operator is the controller under applicable law. The privacy contact is [email protected]. No separate data protection officer or overseas representative is currently appointed; where applicable law requires one, the relevant contact channel will be provided through this address. The operator is the controller for processing purposes it determines. This release is not distributed through App Store storefronts in the European Union, European Economic Area, or United Kingdom and does not target people in those territories. No EU or UK representative is appointed. Privacy requests may be sent to [email protected]. The individual developer personally serves as the privacy officer and, where local law uses that title, the DPO or accountable privacy contact. Public business contact: [email protected].

The document version, effective date, updated date, and applicable App version are shown at the top of this page.

This policy describes the data practices of the current supported release. If a feature is unavailable in your installed version or you do not use it, the processing tied to that feature does not occur. A material future change is handled under Section 15.

The app is a general learning tool. It is not in the Kids Category and is not primarily directed to children.

2. Local-first principle

On supported devices and systems, camera or image OCR, translation, text to speech, and study-material management prioritize on-device processing. Voice input uses Apple's Speech framework, and the current release does not require on-device-only recognition.

Processing on your device is not the same as collection by the operator. Content that never leaves your device does not become data held by the operator merely because the app computes on it locally.

We provide no advertising and use no product or behavioral analytics. We also do not use advertising SDKs, cross-app tracking, IDFA, heat maps, or session replay.

3. Data that stays on your device by default

• Captured or imported images and temporary camera frames
• Speech-recognition results and audio used only transiently in device memory for follow-reading
• OCR text, translations, and text used for speech output
• Book and page associations, sentence cards, learning profiles, learning reports, and app preferences

This data is used by default to provide recognition, translation, speech, organization, and progress views on your device. The operator does not receive its contents merely because those features run. Free, subscribed, and other tiers may all view the complete history of weekly reports; there is no limit on the number of weeks available, and tier differences do not restrict weekly-report history. The Free tier may use up to 20 shared word cards, phrase cards, and sentence cards in total; the entitlement shown in the App controls.

Delete individual items in the app, or use iOS to remove the app and its local data. Local data remains until you delete the related content, clear app data, or remove the app. Preserve anything you need before deletion.

Object vocabulary uses the bundled OpenMMLab RTMDet-s FP16 Core ML model on the device to generate general-object candidates from an image you take or select. The source image is not automatically saved as study material through this feature or sent to the operator's servers; candidate labels, confidence values, and words you save remain on the device according to your actions.

4. Data involved in necessary network interactions

• Apple transaction, subscription, entitlement, and App Store version-lookup data
• Audio, related speech data, speech recognition requests, translation requests, and language-resource requests that Apple services may process when you actively use the related feature
• The random billing-reconciliation UUID, product, transaction, subscription, and entitlement data processed by RevenueCat
• Feedback-form content, IP address, and necessary technical logs processed by Tally only when you choose to open or submit the form
• IP address, request time, user agent, requested language-pack path, and security logs processed by Cloudflare when you visit the legal site or choose to download a language pack
• Email address, message, attachments, timestamps, and delivery metadata processed when you choose to send support email

Network services receive only the data needed for a language service you actively request, an App Store purchase or entitlement check, a public version lookup, feedback you submit, legal-site delivery and security, or support you request. Refusing an optional permission or not submitting feedback does not affect local functions that do not need that processing.

By default, captured or imported images, full OCR text, translations, book-and-page associations, sentence cards, and learning reports are not uploaded to the operator or RevenueCat. The operator also does not upload microphone audio to its own servers; Apple Speech may receive audio and related speech data as described in this policy.

The RTMDet-s FP16 model is bundled with the app and creates no runtime model-download request. A normal app update may replace the bundled model; Clear local learning data does not remove it, while deleting the app removes the app and its resources. The bundled model file is approximately 20.2 MB.

5. System permissions

Camera access supports captures and text recognition that you initiate.

Photo access lets you choose an image to recognize. Where iOS supports it, you may grant access only to selected items.

Microphone and speech-recognition access are used only for voice features you actively start. The current release does not require on-device-only recognition. Depending on the device, system, language, and availability of Apple services, audio and related speech data may be sent over the network to Apple's speech-recognition servers and handled under Apple's privacy policy. The operator does not upload that audio to its own servers or use it for advertising or behavioral analytics. Recognition results are stored on your device by default.

You may decline or later withdraw a permission in iOS Settings. The related feature may then be unavailable, while functions that do not require that permission remain available.

Camera and photo permissions can also be used for object recognition that you initiate. Refusing or withdrawing a permission only makes the feature that needs it unavailable.

6. Purposes and grounds for processing

Perform the OCR, translation, speech, book-and-page association, sentence-card, learning-profile, and report actions that you request.

Complete App Store purchases, verify and restore entitlements, prevent fraud, and resolve subscription issues.

The App uses bundled legal documents and does not fetch legal-document metadata from a remote database at runtime. Website and App documents are released with the same version.

Respond to your support request, protect the app and site, comply with legal obligations, and establish, exercise, or defend legal claims.

Depending on the processing activity and applicable law, we rely on performance of a contract or steps taken at your request; your consent where required; legitimate interests in service operation, security, fraud prevention, and legal rights where available; or compliance with legal obligations. For each purpose, the legal basis is: local features and requested support—contract performance or steps requested by you; Apple purchases and RevenueCat entitlement verification—contract performance and fraud-prevention legitimate interests; optional permissions and feedback submissions—your choice or consent where required; security and legal records—legitimate interests or legal obligations.

Translations, text recognition, object candidates, speech recognition, pronunciation, and other learning-assistance results may be generated automatically by machine models, dictionaries, or system services. We use them only to provide the learning feature you request; they are not facts, professional advice, or guarantees for a particular context. Check them against the source, image, and context.

7. Service providers and roles

Apple handles App Store purchases, subscription settings, refund requests, and related system services such as Apple Speech. Voice input may send audio and related speech data to Apple's servers. Apple's processing is governed by its own terms and privacy policy.

RevenueCat provides subscription-entitlement infrastructure and may receive transaction, product, entitlement-status, and necessary non-advertising identifiers. It does not receive your OCR or learning content.

Tally processes form content and necessary technical data only when you choose to open and submit a feedback form. The app does not prefill study content, and its fixed form URLs ship with the app rather than being read from remote configuration.

Subscription entitlements are processed by Apple and RevenueCat as necessary; learning content is not used for entitlement verification.

Cloudflare hosts the static legal and support site and delivers language packs from R2 when you choose to download them. It may process ordinary network metadata such as IP address, request time, user agent, requested object path, and security events; it does not receive the learning content stored in the App.

When you email [email protected], your email provider and the operator's email provider process message content, addresses, timestamps, and delivery metadata.

This feature uses the bundled OpenMMLab RTMDet-s FP16 Core ML conversion artifact. The model loads and runs on the device; OpenMMLab and other model services do not receive your images. Settings' Third-party notices identify the applicable source, version, attribution, and Apache 2.0 license.

We require processors and service providers that handle personal information on our behalf to use it only for documented purposes, apply protections no weaker than this policy and applicable law, and delete or return it when the service ends unless retention is legally required. Services acting as independent controllers remain responsible under their own notices and mandatory law.

We disclose personal information only when reasonably necessary to comply with a binding legal obligation or valid public-authority request, protect a person's safety or legal rights, investigate unlawful use, or establish, exercise, or defend legal claims. We limit any disclosure to what is necessary and challenge or notify you about a request where the law permits and it is appropriate to do so.

If responsibility for the App or relevant business is transferred through a merger, acquisition, reorganisation, asset transfer, or succession, personal information may be transferred only as permitted by law. We will give legally required notice before a new controller applies a materially different policy and will require continued protection of your mandatory rights.

8. Cross-border processing and overseas services

Apple, RevenueCat, Tally, Cloudflare Pages, or email services may process limited network data in countries or regions outside your location.

We limit data and select necessary services under applicable law, relying on providers' published contractual, security, and transfer mechanisms. Where law requires additional consent, assessment, or other procedures, we will complete them. Apple, RevenueCat, Tally, Cloudflare Pages, and email providers may process limited network data outside your country or region. We minimize the data involved and rely on the providers' contractual, security, and lawful transfer mechanisms. We will complete any additional consent, assessment, notification, or transfer procedure required by mandatory law in an included storefront.

If you do not want support-email information processed across borders, do not include unnecessary personal information or learning content in your message. Processing locations for necessary subscription services depend on Apple and the relevant providers' architecture.

9. Retention

You control local data. It remains until you delete it in the app, clear app data, or remove the app.

Subscription and entitlement records may be retained during the subscription or service relationship and for the legally necessary tax, accounting, fraud-prevention, and dispute periods afterward. Provider logs and subscription records are kept only for the period needed for security, fraud prevention, tax, accounting, support, refunds, disputes, and legal obligations. The applicable period or deletion criteria will be recorded for each provider and made available on request.

Support email is retained until the request is resolved plus no more than 24 months, unless a longer period is legally required or necessary for a dispute.

Reading current legal-document version information does not create a separate in-App read-state record.

Providers retain necessary logs under their published policies and for the period needed for security.

The RTMDet-s FP16 model is bundled with the app and creates no runtime model-download request. A normal app update may replace the bundled model; Clear local learning data does not remove it, while deleting the app removes the app and its resources. The bundled model file is approximately 20.2 MB.

10. Information security

We use data minimization, permission controls, transport protections, service separation, and necessary logging measures proportionate to the data and risk. If we identify a security incident that may affect the confidentiality, integrity, or availability of personal information, we will assess it, contain and remediate it, and notify regulators and affected people within the scope, channel, and time required by applicable law.

No local storage or network transmission can be guaranteed absolutely secure. Device loss, system vulnerabilities, insecure email, or provider incidents may create risk.

Use a device passcode, keep iOS and the app current, and avoid attaching sensitive images, audio, text, or transaction evidence to support email unless necessary.

11. Your choices and rights

You can view local learning content in the app and contact us to ask about support or entitlement information relating to you that the operator holds.

You can edit or delete local items. For information controlled by the operator, applicable law may allow you to request correction, deletion, restriction, or a copy. Legal or security duties may require some records to be retained.

You may withdraw optional system permissions or stop using a related feature. Withdrawal does not affect processing lawfully completed before it.

If you object to processing, email [email protected]. You may also complain to a competent regulator where applicable law provides that right. Depending on applicable law, you may request confirmation of processing, access or a copy, correction, deletion, restriction or cessation of processing, portability, withdrawal of consent, objection, and refusal of direct marketing, and may ask for an explanation or human review of automated processing. We will not discriminate against you for exercising these rights. Send requests to [email protected]; we will verify identity and respond within the period required by applicable law. Rights and complaint channels provided by mandatory law in a storefront where the App is actually distributed remain available. Send requests to [email protected].

12. Learners and minors

The app is not in the Kids Category, is not marketed primarily to young children, and does not use age-based advertising or profiling.

Minors should use the app only with the necessary understanding and decision-making ability. Where law requires guardian consent, a guardian should understand and manage permissions, content, and purchases. This is a general learning app, but it may be accessed by children or teenagers. We will apply the age-appropriate design, parental-consent, purchase-protection, and child-rights rules required in the user's location. A statement that the App is not in Apple's Kids Category does not remove those duties.

If a guardian believes a minor sent unnecessary personal information to the operator, contact [email protected]; we will verify the request and act as required by law.

13. Mandatory regional rights

This policy does not exclude or restrict rights that you hold under mandatory data-protection, consumer-protection, or other applicable law.

For users in mainland China, we handle requests under applicable personal-information and consumer-protection laws, including statutory rights to understand and decide about processing, restrict or refuse it, access or copy information, correct it, and request deletion.

To the extent those terms are defined by applicable United States state privacy law, we do not sell personal information or share it for cross-context behavioral advertising.

Law where you live may provide additional rights or shorter response periods. To the extent such law applies mandatorily, it prevails over conflicting wording in this policy. For users in the United States and its states, Australia, New Zealand, Singapore, the United Kingdom, Canada, Hong Kong, Taiwan, Japan, Ireland, South Africa, the Philippines, Malaysia, Germany, Austria, Spain, Mexico, Italy, and Brazil, mandatory local protections prevail. We do not sell or share personal information, use targeted advertising or cross-context tracking, create advertising or credit profiles, or make legal or similarly significant automated decisions. If a security incident is legally notifiable, we will notify authorities and affected people as required. In Brazil, LGPD rights include confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, withdrawal of consent, objection, and review of automated decisions; requests may be made to the controller/privacy contact or the ANPD. For users in the United States and its states, Australia, New Zealand, Singapore, Canada, Hong Kong, Taiwan, and Brazil, mandatory local protections prevail. We do not sell or share personal information, use targeted advertising or cross-context tracking, create advertising or credit profiles, or make legal or similarly significant automated decisions. If a security incident is legally notifiable, we will notify authorities and affected people as required. In Brazil, LGPD rights include confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, withdrawal of consent, objection, and review of automated decisions; requests may be made to the controller/privacy contact or the ANPD. Brazil's LGPD rights and the ANPD complaint channel remain available where applicable. For users in mainland China, mandatory protections under the Personal Information Protection Law, Cybersecurity Law, Data Security Law, Network Data Security Management Regulations, consumer-protection law, and minor-protection rules prevail.

14. Third-party services and links

The app or this site may link to independent services from Apple, RevenueCat, Tally, Cloudflare, or others. Their sites, accounts, and processing are governed by their own terms and privacy policies. The App uses bundled legal documents and does not fetch legal-document metadata from a remote database at runtime. Website and App documents are released with the same version.

Review the relevant policy before providing information to a third party or changing its account or subscription settings. The operator cannot control a third party's independent processing.

15. Changes to this policy

We may update this policy when features, providers, or legal requirements change. We will give reasonable notice of material changes through the app, announcements, or this site, and will request consent separately where law requires it.

An update will identify its new effective date. A change will not retroactively remove your mandatory rights.

16. Contact us

Send privacy questions or rights requests to [email protected], for the attention of 戚蕴杰.

Describe the request, relevant feature, approximate time, and an email address for the response. Do not send unrelated identity documents, complete images, audio, or other sensitive content.

To protect data and prevent fraud, we may request the minimum verification proportionate to the request's risk. We may be unable to act if identity cannot reasonably be verified or if the request would impair another person's rights.