Privacy Policy

This Privacy Policy explains what data is collected while using the CertiScan EU app (the "App"), how it is used, and what your rights are.

1. Data Controller

The data controller for the App is FinestFor. For questions, contact us at support@finestfor.com.

2. Data We Collect

• Device Identifier: An anonymous, device-specific identifier is created so you can use the App without registering.
• Account Information (optional): If you sign in to purchase a subscription, your email address and (when signing in with Apple/Google) your name are processed.
• Product Photos: Label/packaging photos you scan are processed only temporarily for analysis; they are not permanently stored on our servers.
• Analysis Results: Scan category, compliance score, and detected rule codes — this data does not contain personal information.
• Subscription/Purchase Data: Plan type, purchase date, store transaction ID (we never see, process, or store your card details — these are handled directly by Apple/Google).

3. How We Use Your Data

• To analyze your product photo and generate a compliance report,
• To manage your account and subscription status,
• To track your free-tier usage (daily scan limit),
• To deliver the App in your selected language,
• To keep the service secure and protected from abuse.

4. Third-Party Service Providers

• Firebase (Google): Used for authentication (Apple/Google/email sign-in).
• RevenueCat: Used to manage subscription and purchase status.
• Apple App Store / Google Play: Process payments; your payment details are handled directly by these platforms.

Only the minimum data necessary for the service to function is shared with these providers. Your data is never sold or rented to third parties for advertising purposes.

5. Data Retention

• Product photos are not retained after analysis.
• When you delete your account (Settings > Delete Account), your personal data (email, name) is permanently erased; your historical scan statistics may be retained in anonymized form, disconnected from your identity.
• Data for active accounts is retained for as long as necessary to provide the service.

6. International Data Transfers

Your data may be processed on our servers hosted in Türkiye and on the infrastructure of the third-party providers listed above (Firebase, RevenueCat). These transfers are protected by the standard contractual safeguards and security measures offered by those providers.

7. Your Rights Under GDPR / KVKK

Under the EU General Data Protection Regulation (GDPR) and Turkish Law No. 6698 (KVKK), you have the right to access, rectify, and request erasure of your data, object to its processing, and request data portability. You can exercise these rights by contacting support@finestfor.com or by deleting your account directly within the App. You also have the right to lodge a complaint with the competent data protection authority.

8. Children's Privacy

CertiScan EU is a compliance tool intended for businesses and professionals; it is not directed at individuals under 18 and we do not knowingly collect data from children.

9. Security Measures

All data transmission is encrypted via HTTPS. App-to-server communication is additionally protected by an access key. No method of transmission over the internet can be guaranteed 100% secure.

10. Changes

We reserve the right to update this Privacy Policy at any time. You will be notified in-app of material changes.

11. Contact

For questions about this Privacy Policy:
Email: support@finestfor.com
Data Controller: FinestFor
Web: finestfor.com