Privacy Policy for Smld

Welcome to Smld ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the application.

1. Information We Collect and How the App Works

A. Camera and Image Data (Critical)

Smld's core functionality relies on scanning and extracting URLs from real-world images using your device's camera or photo library.

• Cloud and On-Device Processing: When cloud scanning is active, images you capture or select are compressed and sent securely via our servers to the Google Cloud Vision API solely for Optical Character Recognition (OCR). In Live AR mode, or when your cloud scan balance reaches zero, text recognition is performed locally on your device using Google ML Kit without sending the image to our servers.
• "We scan and share, we never inspect or store.": No one at Smld looks at your images, and we DO NOT store, save, or keep a database of the images you capture on our servers. Once the text (URL) is extracted during a cloud scan, the image data is immediately discarded from server memory.
• Local Scan History on Your Device: If history tracking is enabled in Settings (on by default), your detected URLs, link preview details, and a reference to the image file on your device are saved locally on your device so you can revisit them. You can clear or disable local history at any time in Settings.

B. Account and Quota Data

When you first open the App as a guest, Firebase Authentication assigns a random anonymous user ID so we can track your free cloud scan balance. When you sign in using Apple or Google Sign-In, Firebase Authentication processes the following basic account details:

• Email address
• Display name
• Profile picture URL (when provided by your sign-in provider)

This information is used solely to maintain your account session and link your scan balance across devices. In our database, we only store your scan usage count, purchased and promo credits, redeemed codes, store transaction IDs, and activity timestamps—never your photos or local scan history.

C. Local Device Preferences

To remember your settings and enforce free guest limits, the App stores your preferences (such as Live AR mode, history toggle, dismissed hints, and local guest scan usage count) locally on your device.

D. Link Validation and Preview Metadata

When a potential URL is detected from an image, your device connects directly to the destination website (and to YouTube's public preview service for YouTube links) to check whether the link works and to fetch its page title, description, and icon for the preview card. Because these requests are made directly from your device to the third-party website you scanned, that website may see your device's IP address and standard browser request information.

2. In-App Purchases

We use RevenueCat to process one-time scan credit pack purchases (such as 100-scan packs). When you make a purchase, the payment is processed directly by the Apple App Store or Google Play Store.

• We DO NOT collect, process, or store your credit card information or payment details.
• Signing in is required before purchasing a scan pack so your credits are tied to your account. When you make a purchase, RevenueCat links the transaction to your account ID and sends us purchase confirmation details (your account ID, product identifier, store transaction ID, and event ID) to credit or adjust your scan balance.

3. Third-Party Services

We utilize trusted third-party services to power Smld. These services have their own privacy policies regarding the data they process on our behalf:

• Google Cloud Vision API & Google ML Kit: For cloud and on-device OCR text recognition.
• Firebase (Google): For authentication, cloud database storage, backend services, and app security verification.
• RevenueCat: For in-app purchase verification and credit management.

4. Account and Data Deletion

You have full control over your data. You can permanently delete your account and associated profile data at any time directly within the App:

1. Navigate to Settings.
2. Tap Delete Account.
3. Confirm the deletion.

Upon confirmation, your local scan history on the device, your authentication record, and your user profile (including your scan usage count and any remaining free or purchased scan credits) are permanently erased. To prevent abuse of free scan credits, we retain a one-way hash of your email address and the number of scans you used so that deleting and recreating an account does not reset free scans; the email address itself is never stored. De-identified purchase event records (containing only the store transaction ID, product identifier, event ID, and timestamp, without your user ID or email) are retained solely to prevent duplicate transaction processing and maintain financial audit records.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. Data transmitted between your device and our third-party providers (like Google Cloud) is encrypted in transit using industry-standard protocols (HTTPS/TLS).

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.

7. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Email: openorg.dev@gmail.com