DupeScan

Privacy Policy

Last Updated: September 6, 2026

Welcome to DupeScan ("we", "our", or "us"). We respect your privacy and are deeply committed to safeguarding your personal data. This Privacy Policy details how our mobile application collects, uses, processes, and protects your information in strict compliance with the Apple App Store Review Guidelines, Google Play Developer Policies, and applicable international privacy frameworks (including GDPR and CCPA).

1. Information We Collect

DupeScan is designed with privacy at its core. We only request the minimum permissions necessary to deliver our core cosmetic recognition and dupe-finding functionality:

• Camera & Photo Library Access: When you snap a picture or upload an existing image of cosmetics, bottles, palettes, or color swatches, the photo is captured to detect brand packaging, shade labels, finishes, and undertones.
• Device & Diagnostic Information: Non-personally identifiable diagnostic and telemetry data (such as app version, device OS version, language preference, and crash reports) may be gathered to troubleshoot technical issues and optimize performance.
• In-App Purchase Information: If you purchase a subscription or unlock premium features, transactions are processed directly by Apple through StoreKit. We receive only non-identifying transaction tokens and subscription validation receipts. We never access, handle, or store your credit card or payment credentials.

2. How We Use Your Information

We utilize the collected information strictly for the following operational purposes:

• To visually analyze cosmetic packaging, formula types, shade names, and finishes.
• To query our curated beauty database for verified drugstore dupes under $15 (e.g., e.l.f., NYX, Milani, Maybelline).
• To calculate price differentials and estimate cost savings.
• To enable and manage your optional in-app subscription status and restore purchases across your devices.
• To maintain, protect, and enhance app reliability and diagnose performance anomalies.

3. Third-Party Services & Processing

To provide seamless and secure service, DupeScan integrates with select industry-leading cloud and infrastructure providers:

• Cloudflare Workers: Powers our secure, encrypted backend API proxy and image optimization pipelines. Data transmitted is encrypted end-to-end via TLS/SSL.
• AI Vision Providers: Encrypted image payloads are analyzed to recognize cosmetic packaging and shade characteristics. Third-party AI model providers process requests in real-time under enterprise data confidentiality terms and do not retain images for model retraining.
• Apple App Store / StoreKit: Handles in-app purchase authentication, billing management, and receipt validation.

4. Data Retention & Local Storage

On-Device Scan History: DupeScan stores your past scans and saved dupe recommendations locally on your device using AsyncStorage. This information resides exclusively on your device. You can clear your scan history at any time from within the app or by deleting the app.

Server Logs: Transient server processing logs are purged on a routine basis and contain no personally identifying cosmetic images.

5. We Never Sell Your Personal Information

We do not sell, rent, monetize, or trade your personal data, images, or scan history to data brokers, advertisers, or third-party marketing networks.

6. Your Privacy Rights & Controls

Depending on your jurisdiction, you maintain full control over your data:

• Revoke Camera / Photo Access: You can disable camera or photo library permissions at any time via your device's operating system settings (iOS Settings > DupeScan).
• Erase History: You can delete all locally cached scan results directly within the app interface.
• Manage Subscriptions: You can modify or cancel active subscriptions at any time via your Apple ID account settings.
• Contact for Inquiries: You can submit questions or data requests to our privacy team via email.

7. Security Measures

We enforce rigorous technical and administrative protocols to protect your information against unauthorized access, exposure, or alteration. All communications between the mobile application and our servers are encrypted in transit using industry-standard TLS/HTTPS protocols.

8. Children's Privacy

DupeScan is not intended for or directed toward children under the age of 13 (or under 16 where required by local law). We do not knowingly collect personal information from minors. If you believe a child has submitted personal data to us, please contact us promptly so we may take corrective action.

9. Changes to This Privacy Policy

We may occasionally update this Privacy Policy to reflect app enhancements, new features, or legislative requirements. Any revisions will be published on this page with a refreshed "Last Updated" timestamp. We encourage you to review this policy periodically.

10. Contact Us

If you have questions, feedback, or privacy-related requests, our support team is available to assist you:

Useful Links