Privacy Policy
This Privacy Policy explains how we collect, use and protect your information.
We don't sell your data
Your information is never sold or rented.
5 kinds of data
Each one is listed below with the reason we need it.
3 services involved
Named below, with links to their own policies.
You're in control
Contact us by email at hello@onstart.app about your data at any time.
Contents
Who we are
MRZ/NFC Scanner is made by onStart ("we", "us" or "our"). This policy explains what information the app handles, why, who receives it and the choices you have. It applies to the MRZ/NFC Scanner app and this website.
Information we collect
Here is everything the app collects, why we need it and who receives it:
| Data | What it includes | Why we use it | Who receives it |
|---|---|---|---|
| Purchase history | What you bought in the app and when | Purchases | Google Play Billing |
| App interactions | Screens you open and features you use | Analytics | Google Analytics for Firebase |
| Crash logs | Technical details when the app crashes | Crash reports | Firebase Crashlytics |
| Diagnostics | Performance data, device model and system version | Crash reports | Firebase Crashlytics |
| Device or other IDs | Identifiers such as your advertising ID or an app installation ID | Analytics and crash reports | Google Analytics for Firebase, Firebase Crashlytics |
We get this information from you, when you enter it or allow a permission, and automatically as you use the app, through the services named above. If you contact us, we also keep your message and email address so we can reply.
Identity documents you scan
When you scan a document, the app reads its machine readable zone (MRZ) with the camera and, if you choose, its NFC chip. This can include the holder's name, date of birth, nationality, sex, document number, expiry date and the photo stored on the chip.
This data is processed and stored only on your device, in your scan history. It is not sent to us or to any of the services named in this policy, and it is never used for analytics or crash reports. You can delete a record, or all records, from the history at any time.
Files you export to CSV or PDF are saved where you choose and are shared only when you share them yourself.
How we use information
We use information only to:
- provide the app and its features
- process purchases and restore them on your devices
- understand how the app is used so we can improve it
- find and fix crashes and performance problems
- answer your questions and support requests
- keep the app secure and prevent misuse
- meet our legal obligations
How we share information
We share information only in these cases:
- with the service providers listed below, who help us run the app and may use it only for that
- when the law requires it, such as a valid court order
- to protect the rights, safety and security of our users and others
- as part of a merger or sale of the app, under this policy
- with your consent
Services we use
| Service | What it does | Data it receives | Privacy policy |
|---|---|---|---|
| Google Analytics for Firebase | Understand how the app is used | App interactions and device or other IDs | firebase.google.com |
| Firebase Crashlytics | Find and fix crashes | Crash logs, diagnostics and device or other IDs | firebase.google.com |
| Google Play Billing | Process purchases | Purchase history | policies.google.com |
Purchases
Payments are processed by Google Play. We never see your full card number. We receive a record of your purchase so we can unlock it and restore it on your other devices.
How long we keep information
- Crash logs and diagnostics: for up to 90 days.
- Purchase records: as long as tax and accounting laws require.
- Messages you send to support: as long as needed to help you.
- Everything else: only as long as needed for the purposes in this policy.
After that, we delete information or make it anonymous.
Security
Information stored on your device is protected by your device's own security. When information is sent to a service, it is encrypted in transit. No system is completely secure, so we can't guarantee absolute security.
Your choices and rights
- Ask us for a copy of your personal information, or to correct or delete it, by contacting us by email at hello@onstart.app.
- Ask us to stop using your information for analytics.
Additional rights by region
Depending on where you live, you may have extra rights. This section covers the European Union and the United Kingdom and the United States.
European Union and United Kingdom
onStart is the data controller for your personal information. We use it on these legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the app and its features | Performing our agreement with you |
| Purchases | Performing our agreement with you, and legal obligations |
| Analytics, crash reports and improving the app | Our legitimate interest in a reliable app |
| Support requests | Our legitimate interest in helping you |
| Meeting legal requirements | Legal obligations |
You have the right to:
- access the personal information we hold about you
- have inaccurate information corrected
- have your information deleted
- restrict or object to how we use it
- receive your information in a portable format
- withdraw consent at any time, without affecting earlier use
To use these rights, contact us by email at hello@onstart.app. You can also complain to your local data protection authority. When your information is transferred outside the EU or UK, we rely on safeguards such as the European Commission's standard contractual clauses.
United States
Residents of California and other states with privacy laws, such as Colorado, Connecticut, Virginia, Utah and Texas, have these rights. In the last 12 months we collected the categories of information in the table above, from the sources and for the purposes described in this policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
- Right to know what personal information we collect, use and disclose
- Right to delete your personal information
- Right to correct inaccurate information
- Right not to be treated differently for using these rights
To make a request, contact us by email at hello@onstart.app. We will verify your request using information linked to your account or device. You can use an authorized agent, and if we decline your request, you can appeal by replying to our decision.
Children's privacy
MRZ/NFC Scanner is meant for adults aged 18 and over, and we don't knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
International transfers
The services we use may process information in countries other than yours, including the United States. Wherever it is processed, we protect it as this policy describes and use legal safeguards where the law requires them.
Changes to this policy
We may update this policy as the app changes. When we do, we update the "Last updated" date above, and we tell you in the app or by other means before significant changes take effect.