Amazon Barcode Scanner Privacy Policy

Effective October 8, 2026

Amazon Barcode Scanner provides this independent app. For privacy requests, email support@amazonbarcodescanner.com.

Accounts and purchases

Clerk processes account identifiers and verified sign-in information. Your chosen sign-in provider processes authentication. Apple handles subscriptions; we do not receive your card or bank details. We retain verified purchase, usage and request records to associate subscriptions and enforce allowances.

Optional Amazon sign-in

Login with Amazon shares an account identifier to connect your verified app account. We retain a keyed identifier, not your Amazon password or OAuth tokens. Sign-in requests expire after ten minutes and are removed by scheduled cleanup. Disconnect in Settings → Account; minimal allowance aliases remain to prevent used free allowance from resetting.

Scanning and photos

Barcode decoding happens on your device. Product lookup sends the necessary identifier or search terms, not a camera frame, to our backend and product-data providers. When you choose photo search, your selected photo is shared with third-party image-recognition providers to find product matches. Saving an inventory photo does not run recognition.

Inventory and storage

Cloudflare stores your account's saved names, notes, quantities, product identifiers and compressed photos privately. Offline edits stay on your device. Disposable local caches target 500 synced items and 100 MiB of photos; unsynced edits and files in use are protected.

Retention

Raw private barcode values remain only for the active operation. Product identity caches expire after twelve hours; offers are fresh for one hour. Recognition images are removed after processing settles, with five-minute scheduled cleanup and a one-day temporary-storage backstop. Failed cleanup can take longer. Inventory remains until removal or account deletion. Minimal deletion markers prevent old offline edits from restoring removed items. Expired request records are cleaned up; financial totals remain. Purchase-event deduplication and unreferenced expired purchase periods have ninety-day retention windows.

Deletion and control

Use Settings → Account → Delete account. New activity is blocked while retryable cleanup removes inventory, photos and the authentication profile. Minimal keyed identity aliases, consumed free allowance and store-association records remain to prevent usage resets; they contain no inventory notes or photos. Sign-out preserves unsynced edits. Account deletion does not cancel an Apple subscription. Email us for data requests.

Support correspondence

Email and in-app support messages are stored in a private Cloudflare mailbox for authorized operators. Email may include accepted attachments; in-app messages are text only. Compact account-linked ticket receipts prevent duplicates and limit abuse. We keep correspondence to answer requests and retain history. Trash is removed after thirty days by bounded daily cleanup, followed by empty threads and their ticket receipts. There is no separate raw-email archive. Request correspondence removal by email; app account deletion does not automatically delete support messages.

Third parties

We use Clerk, Cloudflare, Apple, Google, Amazon, SearchApi and FNSKUtoASIN for these functions. They may process service, security and network information under their own terms. Our retention periods do not promise provider retention or deletion. We do not operate advertising or tracking analytics, collect automatic scan history, or keep permanent raw provider-response archives.

This website

Public pages do not require an account. We do not add advertising trackers or analytics cookies. Cloudflare handles network information needed to deliver and protect the website. Emailing support uses the correspondence practices above.