Privacy Policy

Effective Date: June 20, 2026

This privacy policy explains how we handle your information when using our pharmaceutical QR code scanning application (including our mobile and web experiences). We are committed to protecting your privacy and complying with relevant privacy regulations, including Google Play's user data requirements.

1. Camera Access

We request access to your device’s camera only after you provide explicit permission. The camera is used solely to scan QR codes found on pharmaceutical packaging. No video or images are stored, recorded, or transmitted to our servers.

2. Data Collection

When you scan a QR code, the application reads the code in real time and processes it locally to validate the authenticity of the product. We do not store camera images or video from scanning.

If you voluntarily submit a product complaint or report through our form, we may collect information you choose to provide, such as your name, email address, phone number, shop or location details, product information, and uploaded images. You may also submit a report anonymously without providing contact details.

3. Third-Party Sharing

We do not sell your personal data. We do not share user data with third parties except where required to operate the service (for example, secure hosting infrastructure) or where required by law. QR scan verification is processed without sharing camera footage with third parties.

4. Data Retention

We retain different types of data only for as long as necessary for the purposes described below:

• QR scan data: Processed in real time on your device and not stored on our servers after verification is complete.
• Complaint and report submissions: Retained for up to 5 years after submission, or longer if required by applicable pharmaceutical or regulatory obligations, to investigate reports and maintain audit records.
• Uploaded images: Retained for the same period as the related complaint or report, then deleted or anonymized unless a longer retention period is legally required.
• Technical logs: Server and security logs may be retained for up to 90 days for troubleshooting, fraud prevention, and system security, then automatically deleted.
• Session and browser data: Temporary session data used to operate the website is cleared when your session ends or within 30 days, whichever is sooner.

When retention periods expire, data is securely deleted or anonymized so it can no longer be linked to you, except where we are legally required to keep specific records.

5. Data Deletion

You may request deletion of personal data we hold about you. To submit a deletion request:

1. Email us at nasuha@danapuri.com with the subject line Data Deletion Request.
2. Include enough information for us to locate your data, such as the email address or phone number you used, the approximate date of submission, and a brief description of the data you want deleted.
3. We may ask for additional information to verify your identity before processing the request.

We will acknowledge your request within 7 business days and complete eligible deletion requests within 30 days, unless a longer period is permitted by law. We will inform you if we cannot delete certain data because it is required for legal, regulatory, security, or fraud-prevention purposes.

If you submitted a report anonymously and did not provide contact details, we may be unable to identify and delete that specific submission. In such cases, please include any details you do remember (such as product serial number and submission date) so we can try to locate the record.

Deleting complaint data does not remove information that has already been anonymized or aggregated for statistical or regulatory reporting purposes.

6. User Consent

Camera access is granted only after your consent. You can revoke this permission anytime via your browser or device settings. No scanning or data processing will occur without this access. Submitting a complaint is optional and only occurs when you choose to complete and send the form.

7. Security

Our site uses HTTPS to ensure secure communication. We follow standard security practices to protect your session and prevent unauthorized access. Personal data is stored on secured servers with access limited to authorized personnel.

8. Policy Updates

We may update this privacy policy as needed. Any changes will be posted on this page, with the "Effective Date" updated accordingly.

9. Contact

If you have questions or concerns about this policy, please contact us at nasuha@danapuri.com.