Privacy Policy

ScanMyArt ("we," "us," or "our") is a mobile application and website for preserving children's artwork and voice stories. We are headquartered in San Diego, California. Questions about this policy can be sent to hello@scanmyart.com.

We collect the following information when you use ScanMyArt:

• ✓

  Account information: Email address and password (hashed) when you create an account.

• ✓

  Family and children data: Child nicknames, initials, or emoji — real names are never required and we recommend you never enter them.

• ✓

  Artwork photos: Photos you take or import of your children's artwork.

• ✓

  Voice and video recordings: Audio and video stories your child records describing their artwork. These are stored encrypted in private storage — never public.

• ✓

  Transcripts: Automatic transcriptions of voice recordings, generated on-device using Apple's Speech framework. We do not send audio to a third party for transcription.

• ✓

  Usage data: Basic app usage information such as features used and error logs, used to improve the app. We do not use advertising trackers.

• ✓

  Payment information: Physical product purchases are processed by Stripe. We do not store credit card numbers — Stripe handles all payment data.

• ✓

  Waitlist email: If you join our waitlist on the website, we collect your email address to notify you at launch.

• ✕

  Real names of children — nicknames, initials, or emoji only

• ✕

  School names, teacher names, or any school-related data

• ✕

  Location data or GPS coordinates

• ✕

  Contacts from your phone

• ✕

  Advertising identifiers or cross-app tracking data

• ✕

  Children's voice recordings for any AI training purpose — ever

We use your information only to:

• Operate and improve the ScanMyArt app and website
• Store and display your family's artwork and voice stories
• Send transactional emails (order confirmations, gallery notifications you opted into)
• Process payments for physical products through Stripe
• Provide customer support when you contact us

We do not use your data for advertising. We do not build behavioral profiles. We do not sell data to third parties.

Voice and video stories are the emotional core of ScanMyArt. We treat them accordingly:

• All recordings are stored in private, encrypted cloud storage
• No recording is ever publicly accessible — access requires authentication
• Recordings are never shared with third parties
• Recordings are never used to train AI models — ours or anyone else's
• On-device transcription uses Apple's Speech framework — audio does not leave your device for transcription
• Grandparent share links provide time-limited access to specific artwork only
• Deleting a child profile permanently deletes all associated recordings

When you share artwork with family members, we generate a private link. Anyone with that link can view the artwork and play the voice story. You control who receives the link.

Grandparents who leave voice reactions do so via the same private link. Their reactions are stored in private storage, accessible only to your family. Grandparents are never required to create an account.

All data is stored on Supabase (hosted on AWS in the US West region). We use Row Level Security on all database tables — parents can only access their own family's data. All data in transit is encrypted via HTTPS/TLS. Data at rest is encrypted by the storage provider.

We do not guarantee perfect security — no system does. If we become aware of a breach affecting your data, we will notify you promptly.

ScanMyArt is designed for parents to use on behalf of their children. We do not knowingly collect personal information directly from children under 13. The app is operated by parents or guardians — children use the app under parental supervision.

We do not require real names, birthdates, or school information for children. Birth year (not full birthdate) is used only to display the child's age at the time of each recording.

You have the right to:

• Access — request a copy of the data we hold about you
• Correct — update inaccurate information
• Delete — delete your account and all associated data permanently
• Export — request an export of your photos and recordings
• Opt out — unsubscribe from any email communication at any time

To exercise any of these rights, email us at hello@scanmyart.com. We will respond within 30 days.

We use the following third-party services:

The ScanMyArt website uses only functional cookies required for authentication (teacher dashboard login). We do not use advertising cookies, tracking pixels, or analytics cookies that identify individual users. The iOS app does not use cookies.

We may update this policy as the app grows. We will notify you of material changes by email or via an in-app notice. The "last updated" date at the top of this page reflects the most recent version.

Questions, concerns, or requests regarding your privacy can be sent to: hello@scanmyart.com

We are a small team and read every message. Most replies come within one business day.