VersuScan – Privacy Policy

1. Privacy Summary

VersuScan is designed so that its core scanning features operate locally on your device. Camera frames, local-network scan data, and Bluetooth scan data are not sent by the core VersuScan scanning functionality to a VersuScan-owned backend or cloud service.

3. Developer / Data Controller

For data-processing activities controlled directly by the developer, the controller is VersuScan, as identified by the developer/publisher details shown in the relevant Apple App Store or Google Play listing.

Privacy contact: admin@adrian-dmitruk.eu.

Where local law requires additional controller, representative, or data-protection-officer details, those details will be provided as applicable.

4. Scope and Important Definitions

This policy applies to VersuScan for iOS and Android. Where platform behavior differs, this policy explains the difference using “On iOS” and “On Android”.

“Core scan data” means data generated or inspected while using camera/lens scanning, local-network discovery or probes, Bluetooth/BLE discovery, and related risk/evidence analysis.

A device permission does not necessarily mean that VersuScan uploads or retains the underlying data. For example, Android may require a location-related permission for certain Wi-Fi or Bluetooth discovery functions even when VersuScan does not build a location history.

5. Information Processed Locally on Your Device

5.1 Camera / Lens Scan

VersuScan uses the device camera for reflective-lens detection. Camera frames are analyzed locally to identify small bright reflections or patterns that may be consistent with a lens. Camera frames used for this analysis are not uploaded by the core VersuScan scan functionality to a VersuScan server and are not stored in a VersuScan cloud service.

5.2 Local Network and Wi-Fi Discovery

VersuScan may inspect devices and services reachable on the local network. Technical information may include local IP addresses, service names, service types, ports, protocols, device or vendor hints, response headers, and other local service responses.

On iOS: VersuScan uses mechanisms permitted by iOS, including Bonjour/mDNS discovery and local, user-initiated checks such as HTTP, RTSP, and ONVIF-related probes. iOS platform restrictions mean VersuScan cannot enumerate every nearby Wi-Fi device or every device on a network.

On Android: VersuScan may use local discovery and probing mechanisms including mDNS, SSDP, SNMP, and other local network techniques supported by the device and Android version. VersuScan Pro may perform additional local RTSP, ONVIF, HTTP, and related device/service checks.

These network features are intended to help identify devices or services that may correspond to cameras, IoT products, recorders, or other networked equipment. The resulting network scan data is processed locally under the current core implementation and is not uploaded to a VersuScan-owned backend.

5.3 Bluetooth / Bluetooth Low Energy (BLE)

VersuScan may scan for nearby BLE advertisements and analyze technical information made available by the operating system, such as device names or identifiers, advertised services, service UUIDs, manufacturer information, signal strength (RSSI), and related advertisement metadata.

BLE data is used to identify nearby devices or signals that may deserve additional review. The core BLE scan does not pair with devices and does not upload BLE scan results to a VersuScan-owned backend.

On iOS: Bluetooth MAC addresses are not exposed to third-party apps in the same way as on some other platforms. VersuScan uses iOS-safe identifiers and available advertisement data.

5.4 Optional Physical / Sensor Checks on iOS

Some iOS features may use the microphone for an optional ultrasonic check and may use motion or magnetic-field sensor readings for supporting vibration or magnetic checks. These measurements are heuristic supporting signals. The current iOS implementation is designed to analyze these sensor readings locally rather than upload raw audio or sensor streams to a VersuScan server.

5.5 Local Scan History, Evidence, and Notes

VersuScan may store scan summaries, evidence, risk/confidence indicators, detected device hints, service/probe results, vendor/type hints, and related technical information locally on your device.

On Android: locally saved records may also include optional notes entered by you. You can clear local history using Settings → Clear all history.

On iOS: saved scans and evidence can be managed from the app, including the clear/delete controls available in Settings and History/Evidence views.

6. Permissions

VersuScan requests permissions only for features that need them. You can deny or later revoke permissions in iOS or Android system settings. Revoking a permission may disable the related feature.

6.1 iOS

• Camera – reflective-lens scanning.
• Local Network – Bonjour/mDNS discovery and local device/service probes.
• Bluetooth – nearby BLE discovery.
• Microphone – optional ultrasonic check, when used.

6.2 Android

• Camera – reflective-lens scanning.
• Location – Android may require location permission for certain Wi-Fi/Bluetooth discovery functions on some OS versions. VersuScan does not use this permission to create a location history or to track your movements.
• Nearby Wi-Fi Devices – nearby/local Wi-Fi discovery where required by Android.
• Bluetooth / Nearby Devices – nearby BLE discovery.
• Internet / network state / Wi-Fi state – local network communication and discovery where required.

7. When Information May Leave Your Device

7.1 Google Play Billing and VersuScan Pro (Android)

On Android, VersuScan Pro is offered as an optional one-time purchase, not a subscription. The purchase is processed through Google Play Billing. Google processes payment and transaction information under Google’s own terms and privacy practices. VersuScan does not receive your full payment-card number from Google Play.

The app may receive or store purchase/entitlement status necessary to determine whether Pro features are unlocked. If a future version sends purchase tokens or transaction records to a developer-operated server, this policy and the Google Play Data safety declaration must be updated accordingly.

7.2 User-Initiated Export or Sharing

If you choose to export, share, email, save, or copy a scan report or evidence record, the information you select may be transferred to the destination you choose, such as Mail, Files, a cloud-storage app, a messaging app, or another share-sheet destination. That transfer is initiated by you and is then subject to the destination provider’s privacy practices.

7.3 Feedback and Support Communications

If you choose to contact VersuScan by email or use an in-app feedback action, the information you send leaves your device and is received as a support communication. Depending on platform and app version, a feedback draft may include information such as app version, operating-system version, device model, app settings, permission status, and text you choose to enter. You can review the message before sending it.

7.4 Android Crash Reporting and Debug Logging

The Android app includes settings for Crash reporting and Debug logging. Crash reporting is presented as optional/opt-in. Debug logging can be enabled for troubleshooting.

If the distributed Android build is configured to transmit crash diagnostics when crash reporting is enabled, technical diagnostic information may be sent off-device to the diagnostics mechanism configured in that build. VersuScan does not use diagnostic information for advertising or cross-app tracking.

7.5 Apple and Google Platform Services

Apple and Google may independently process information relating to app distribution, purchases, store usage, platform diagnostics, fraud prevention, or device/account services under their own privacy policies. Such platform processing is separate from a VersuScan-owned scan-data backend.

8. Advertising, Sale, Sharing, and Tracking

• VersuScan does not sell personal information.
• VersuScan does not use core scan data for targeted or cross-context behavioral advertising.
• VersuScan does not use core scan data to build advertising profiles across unrelated apps or websites.
• No VersuScan account is required for core scanning functionality.

If a future version adds advertising, analytics, or a third-party SDK that changes these practices, this policy and the applicable store privacy disclosures will be updated before or when the change is released.

9. Data Retention and Deletion

Camera frames: used for live analysis and not saved by default as part of the core reflective-lens scan.

Local scan history/evidence: remains on your device until you delete it using the app’s available history/evidence controls, clear-all function, or remove the app and its local data.

Support communications: if you email VersuScan, the message is no longer purely on-device. Support communications may be retained for as long as reasonably necessary to respond, troubleshoot, maintain support records, resolve disputes, or comply with legal obligations.

Optional transmitted diagnostics: if the Android build transmits crash diagnostics, retention depends on the configured diagnostics mechanism. The exact retention period must be verified for the distributed build.

10. EU / EEA / UK – Legal Bases and Transparency

To the extent the EU GDPR or UK GDPR applies to personal data processed under VersuScan’s control, VersuScan relies on one or more of the following legal bases, depending on the feature:

• Performance of a contract / steps requested by you – to provide app functionality or process a purchase/entitlement you request.
• Legitimate interests – where appropriate for support, security, troubleshooting, abuse prevention, and maintaining reliable app functionality, balanced against your rights.
• Consent – where a feature is optional and consent is required, including optional diagnostics where implemented and required by law.
• Legal obligation – where processing is necessary to comply with applicable law.

Core scan information that remains solely on your device is not accessible to VersuScan as server-side personal data. VersuScan therefore cannot remotely retrieve, correct, or delete local-only scan records. You control those records through the app and your device.

VersuScan’s heuristic risk or evidence scores are intended only to assist your own review. They are not used to make decisions that produce legal or similarly significant effects about you.

11. Your Privacy Rights

11.1 EU / EEA

Where the GDPR applies and VersuScan holds personal data about you, you may have rights including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is based on consent. You also have the right to complain to your local supervisory authority.

11.2 United Kingdom

Where UK data-protection law applies and VersuScan holds personal data about you, you may have rights including access, correction, erasure, restriction, portability, objection, and withdrawal of consent where applicable. You may also complain to the UK Information Commissioner’s Office (ICO).

11.3 United States

Depending on your state and whether the relevant law applies to VersuScan, you may have rights to know or access personal information, correct it, delete it, obtain a portable copy, and opt out of certain sales, sharing, targeted advertising, or profiling. VersuScan does not sell personal information and does not use personal information for cross-context behavioral advertising.

California residents may have rights under the CCPA/CPRA where those laws apply, including rights to know, delete, correct, and opt out of sale or sharing, as well as protection from unlawful discrimination for exercising privacy rights.

11.4 Other Countries and Regions

Privacy laws in other jurisdictions may provide additional rights. Where applicable, VersuScan will honor valid requests as required by local law. Because most core scan information remains only on your device, local deletion is generally performed directly in the app or by removing the app’s local data.

To exercise a right concerning information actually held by VersuScan, contact admin@adrian-dmitruk.eu. We may need reasonable information to verify the request where required or permitted by law.

12. International Data Transfers

Core camera, local-network, and BLE scan data is designed to remain on your device and therefore is not transferred internationally by a VersuScan-owned scan backend.

When you choose an external service — for example Google Play Billing, email, cloud storage, or a share destination — that provider may process information in other countries according to its own terms, safeguards, and privacy policy. Optional diagnostics may also involve international processing depending on the diagnostics provider configured in the Android build.

13. Security

VersuScan reduces privacy risk by keeping core scan analysis local and by avoiding a VersuScan account requirement for core functionality. Local data is protected by the security controls of your device and operating system.

No method of storage or transmission is completely secure. You should keep your operating system up to date, use a device passcode or biometric lock, and carefully choose where you export or share scan reports.

14. Children’s Privacy

VersuScan is not directed to children under 13. VersuScan does not knowingly use its core scan features to collect personal information from children into a VersuScan-owned backend. Where a higher minimum age or additional parental-consent requirement applies under local law, that requirement applies.

15. Responsible Use and Detection Limitations

VersuScan identifies technical indicators, device/service fingerprints, Bluetooth signals, and optical reflections that may deserve further review. These results are heuristic and may produce false positives or false negatives. VersuScan does not guarantee detection of every camera, tracker, recorder, IoT device, or other hidden object.

Use network-scanning and probing features only on networks and devices you are authorized to inspect and in accordance with applicable law.

16. Changes to This Policy

We may update this Privacy Policy when app functionality, platform requirements, data practices, or applicable law changes. The “Last updated” date at the top of this page will be revised when the policy changes. Material changes will be communicated where required by law or platform policy.

17. Contact

Privacy or data-protection questions: admin@adrian-dmitruk.eu.

EU/EEA users can find their national data-protection authority through the European Data Protection Board. UK users can contact the Information Commissioner’s Office. US users may also contact the relevant state privacy regulator or attorney general where applicable.