Legal · PurescanTips

Privacy Policy

Effective date: October 17, 2026

This Privacy Policy explains how Tummi Studio (“we,” “us,” or “our”) handles information when you use the PurescanTips mobile application (“PurescanTips” or the “App”). It applies to the current app and its scan, report, history, credit, and advertising features.

In brief: When you request an analysis, the label photo and selected scan details are sent to our analysis API. A pseudonymous device identifier is used for credit and quota requests. Scan history and profile preferences are stored locally on your device. Google Mobile Ads may process advertising data when ads are used.

1. Information the App processes

Label photos and analysis details. When you submit a scan, the App sends the selected image as Base64 data, its image type, the selected category (skincare or food), the profile option you selected, and the app language to the PurescanTips API. The service returns the analysis report. The App does not add scan photos to local scan history.
Profile and app preferences. Your selected skincare profile, food preference, language, and scan mode are stored on your device. The profile you select is also sent with a scan so the service can use that context in the requested analysis. Profile choices can describe sensitivities or dietary concerns; do not submit information you do not want processed for a scan.
Device identifier. The App derives a stable, pseudonymous UUID from a system-provided device identifier where available (Android ID on Android or Identifier for Vendor on iOS). It sends this UUID in an X-Device-UUID header for credit balance, scan quota, analysis, and rewarded-ad credit handling. The UUID is not your name or email address, but it can distinguish the App installation/device for these functions.
Local scan history. Completed reports are saved in local app storage so you can revisit them offline. The App does not sync this history to a PurescanTips account. You can delete individual entries or reset local app data in Settings.
Credits and rewarded ads. The API processes your device UUID and usage information to return credit balances and ad limits. If you watch a rewarded ad, Google AdMob and its ad partners may process data needed to serve and measure the ad. AdMob may send a server-side verification event containing the device UUID, ad transaction identifier, and verification fields so the API can validate the reward.
Support messages. If you email us, we receive the email address and the information you include so we can respond.

2. How information is used

We use the information above to perform the scan you request, return the analysis report, maintain credit and rewarded-ad quotas, save local history and preferences, protect the service against abuse, troubleshoot issues, and respond to support requests.

3. Where information is processed and shared

PurescanTips API. Scan photos, selected profile and category, language, and the device UUID are sent to the API currently hosted on Cloudflare Workers at purescancare-api-proxy.makrifatussulkha.workers.dev. The API processes the request and may use service providers configured to deliver the analysis. Credit and quota requests also go to this API.
Google Mobile Ads. The App uses the Google Mobile Ads SDK for rewarded and app-open ads. Google and its advertising partners may process device, advertising, and ad-interaction data under their own terms and privacy policies. You can manage advertising settings using your device and Google account controls where available.
AdMob server-side verification. Google may send rewarded-ad verification information to our API to confirm an earned credit. We use it for reward validation and fraud prevention.
Legal and safety purposes. We may disclose information when reasonably necessary to comply with law, enforce our terms, protect users, or protect the service.

We do not sell scan photos or profile choices. We do not currently require users to create an account, and the current app does not offer in-app purchases. The current closed-testing build has Firebase App Check disabled and sends a fixed disabled marker instead of an App Check token. We do not use Firebase Analytics in the current app build.

4. Storage, retention, and deletion

On your device: Local history and preferences remain until you delete a report, use Reset Local Data, clear the App’s storage, or uninstall the App. Reset Local Data does not erase server-side credit, quota, or verification records.
On the API: The device UUID and credit, quota, and rewarded-ad verification records may be retained as needed to operate the service, prevent abuse, resolve disputes, and meet legal obligations. Scan images and request data are processed to return an analysis; operational logs may be retained for service reliability and security. Data is deleted or de-identified when it is no longer needed for these purposes, subject to legal requirements and the retention settings of service providers.
Deletion requests: There is no PurescanTips account to delete. To request deletion of API records associated with your device UUID, contact us at tummistudio3@gmail.com. Include the UUID only if you can retrieve it safely; do not email a product photo or sensitive health details unless support specifically needs it. We will verify and handle requests for records under our control, subject to legal and security obligations.

5. Security and international processing

API requests use HTTPS. We use reasonable technical and organizational measures for information under our control. No internet transmission or storage method can be guaranteed completely secure. Cloud service and advertising providers may process data in countries outside your own; where required, we use the transfer safeguards available under applicable law and provider terms.

6. Your choices

You choose whether to take or select a photo and whether to submit it for analysis.
You can change profile and language settings in the App.
You can delete local history and reset local settings in the App. This does not delete server-side credit or verification records.
You can choose not to watch a rewarded ad. Ad availability and credits are subject to the limits shown in the App.
You may contact us to exercise privacy rights available in your location, including access, correction, or deletion requests.

7. Children’s privacy

PurescanTips is not designed for children under 13, and we do not knowingly ask children to submit personal information. If you believe a child has sent us personal information, contact us so we can review and take appropriate action.

8. Changes to this policy

We may update this policy when the App, providers, or legal requirements change. We will update the effective date on this page. Material changes will be communicated through the App or this website where appropriate.

9. Contact

Tummi Studio is responsible for this policy. For privacy questions or requests, email tummistudio3@gmail.com.