Account Information

When you create an account, we collect your email address. You may sign up using email and password, or through a social sign-in provider (Google or Apple). We use your email for authentication, scan history association, and service communications.

Social Sign-In (Google, Apple)

When you sign in with Google or Apple:

We receive your email address and basic profile information (name) from the provider.
We do not access your contacts, calendar, drive, or any other account data.
Social sign-in data is used exclusively to create and authenticate your account.

Google User Data Disclosure

SimplyScan's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Scopes requested:

email · Your Google account email address
profile · Your name
openid · Authentication identity verification

We do not request access to your Google Drive, Gmail, Calendar, Contacts, or any other Google services. Google user data is not used for advertising, analytics, profiling, or training AI/ML models · only for authentication and account identification. We do not store Google OAuth tokens long-term; authentication sessions are managed via secure, short-lived session tokens. We do not sell, share, rent, or transfer your Google user data to any third parties, except as required by law.

Payment Information

Pro Report payments are processed through Stripe. We do not store your credit card number, CVV, or billing address. Stripe handles all payment data in accordance with PCI DSS standards. We only receive confirmation of payment status.

Scan Data

URL Scans: We analyze the publicly served output of your application (HTML, JavaScript, HTTP headers, configuration files) · the same content any visitor to your URL can already see. We store scan results (findings, score, summary) associated with your account.
Speed Optimization Scans: Speed analysis examines publicly visible JavaScript bundles, HTTP responses, and resource loading patterns · the same assets any visitor to your URL can already see. No additional data beyond what is publicly accessible is collected or processed.
GitHub Repo Scans (Pro): We fetch and analyze files from your public GitHub repository during the scan. We do not permanently store your source code. Source files are processed in memory during the scan and discarded after results are generated. Only the scan findings and metadata are retained.

Usage Data

We use Google Tag Manager (GTM) to manage analytics and marketing tags, and ProfitWell to track subscription metrics. These tools may collect anonymized usage data such as page views, device type, and browser information. We do not use cross-site tracking, browser fingerprinting, or sell your data to advertisers or data brokers.