Privacy Policy

Last Updated: October 11, 2025

Effective Date: October 11, 2025

Company Information

Introduction

Welcome to ScanJunk ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and junk removal services.

Important: By using ScanJunk, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

Data Controller (GDPR)

For the purposes of the General Data Protection Regulation (GDPR), the data controller is:

Information We Collect

1. Personal Information You Provide

Account Information:

• Full name
• Email address (optional, via Apple Sign In)
• Phone number
• Account password (encrypted using bcrypt)

Service Information:

• Pickup address and location
• Booking details and preferences
• Service estimates and pricing information
• Special instructions for pickup

Payment Information:

• Payment details are processed securely through Stripe
• We do not store your credit card information on our servers
• Stripe's privacy policy applies to payment data: https://stripe.com/privacy

2. Information Collected Automatically

Device Information:

• Device type and model
• Operating system version
• Unique device identifiers
• Mobile network information

Location Information:

• GPS location (only when using the app)
• Used for scheduling pickups and service delivery
• You can disable location access in device settings

3. Information from Third Parties

Apple Sign In:

• User ID from Apple
• Email address (if you choose to share)
• Name (if you choose to share)
• Apple's privacy policy applies: https://www.apple.com/legal/privacy/

Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide junk removal services you have requested
• Consent: Marketing communications and optional features (you can withdraw consent at any time)
• Legitimate Interest: Fraud prevention, service improvement, and security measures
• Legal Obligation: Tax records, financial compliance, and legal requirements

How We Use Your Information

Service Delivery:

• Schedule and manage junk removal pickups
• Process payments for services
• Communicate booking confirmations and updates
• Provide customer support

Communication:

• Send booking confirmations via SMS/push notifications
• Provide service updates and pickup reminders
• Respond to your inquiries and support requests

Text Messaging and User Consent

When you provide your phone number through the ScanJunk mobile app, you authorize ScanJunk Removal Services LLC to send you text messages for account verification, booking confirmations, and updates regarding your service. Message and data rates may apply.

You may opt out at any time by replying STOP to any SMS we send. Reply HELP for assistance or contact us at [email protected] for further support.

We will not share, sell, or disclose your phone number to third parties for marketing purposes. Your phone number will only be used for operational and service-related communications initiated by you.

How We Share Your Information

We do not sell your personal information.

We may share your information only in the following circumstances:

Service Providers:

• Stripe: Payment processing
• Apple: Authentication via Sign In with Apple
• Twilio: SMS notifications for booking confirmations
• Cloudflare: Backend infrastructure and hosting

All service providers are contractually obligated to protect your information and use it only for providing services to us. We have Data Processing Agreements (DPAs) in place with all processors handling personal data.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs): Approved by the European Commission for transfers to third countries
• Data Processing Agreements: With all third-party service providers
• Adequacy Decisions: Where applicable, relying on European Commission adequacy decisions
• Encryption in Transit: All data transfers use TLS/HTTPS encryption

For more information about international data transfers or to request copies of safeguards, contact [email protected].

Data Storage and Security

Security Measures

Encryption:

• All data transmitted via HTTPS/TLS encryption
• Passwords hashed using bcrypt (industry-standard)
• Sensitive data encrypted at rest using AES-256

Server Security:

• Hosted on Cloudflare's secure infrastructure
• Regular security updates and patches
• Automated backups and disaster recovery
• Access controls and authentication

Data Retention

Active Accounts:

• Account information retained while your account is active
• Booking history kept for 2 years for customer service and legal compliance
• Financial records retained for 7 years (tax and legal requirements)

Deleted Accounts:

• Personal data deleted within 30 days of account deletion request
• Some information may be retained for legal compliance (e.g., financial records, dispute resolution)
• Anonymous analytics data may be retained indefinitely

Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach (GDPR requirement)
• Notify relevant supervisory authorities as required by law
• Provide details of the breach, affected data, and mitigation steps
• Offer appropriate remediation measures (e.g., credit monitoring if financial data compromised)

Your Privacy Rights

Rights Under GDPR (All Users)

1. Right to Access:

• View your profile information in the app
• Request a copy of all personal data we hold about you
• Email: [email protected] with subject "Data Access Request"

2. Right to Rectification (Update):

• Edit profile information in app settings
• Update contact details and preferences
• Request correction of inaccurate data

3. Right to Erasure (Delete):

• Delete your account in-app via Privacy & Security settings
• Request data deletion by emailing [email protected]
• We will delete your data within 30 days (except legally required records)

4. Right to Data Portability:

• Export your data in machine-readable format (JSON)
• Available in-app via Privacy & Security settings
• Includes: account info, booking history, preferences

5. Right to Object:

• Object to processing based on legitimate interests
• Opt-out of marketing communications
• Email: [email protected] with "Object to Processing"

6. Right to Restrict Processing:

• Request limitation of how we process your data
• Available during disputes or verification of accuracy
• Email: [email protected]

7. Right to Withdraw Consent:

• Withdraw consent for processing at any time
• Manage in-app via Privacy & Security settings
• Does not affect lawfulness of processing before withdrawal

8. Right to Lodge a Complaint:

• File a complaint with your local data protection authority
• EU residents: Contact your national supervisory authority
• We encourage you to contact us first to resolve concerns

Control Location Access:

• Grant or deny location access in device settings
• Location only used when app is active (not background tracking)
• Required for scheduling pickups at your address

Verification Process for Data Requests

To protect your privacy, we verify your identity before processing data requests:

• Current users: Login verification or email confirmation to registered email
• Former users: Government-issued ID or previous account information
• Response time: 30 days (GDPR) / 45 days (CCPA)
• Extensions: We may request a 30-day extension for complex requests

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about data collected in the past 12 months, including categories, sources, purposes, and third parties
• Right to Delete: Request deletion of your personal information (subject to legal exceptions)
• Right to Opt-Out of Sale: We do not sell your personal information
• Right to Opt-Out of Sharing: We do not share for cross-context behavioral advertising
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond necessary services
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To Exercise Your CCPA Rights:

• Email: [email protected]
• Phone: (209) 800-3515
• Subject: "California Privacy Rights Request"
• Response time: Within 45 days (may extend to 90 days with notice)

Authorized Agents (California):

California residents may designate an authorized agent to make privacy requests on your behalf. The agent must provide:

• Written authorization signed by you
• Proof of their identity and authority
• Verification of your identity

Do Not Sell My Personal Information

Children's Privacy

ScanJunk is not intended for children. The minimum age requirements are:

• United States: 18 years or older (legal contract age)
• European Union: 16 years or older (GDPR requirement)
• Other jurisdictions: Legal age to enter contracts

We do not knowingly collect personal information from individuals under these age limits. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information immediately.

Third-Party Services

Our app uses the following third-party services. We encourage you to read their privacy policies:

• Stripe: https://stripe.com/privacy (Payment processing)
• Apple: https://www.apple.com/legal/privacy/ (Sign In with Apple)
• Cloudflare: https://www.cloudflare.com/privacypolicy/ (Infrastructure)
• Twilio: https://www.twilio.com/legal/privacy (SMS notifications)

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

Notice of Changes:

• Updated "Last Updated" date at the top of this policy
• Notification in the app for material changes
• Email notification for significant changes affecting your rights
• Continued use of the app after changes constitutes acceptance

Contact Us

Summary

By using ScanJunk, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is effective as of October 11, 2025.

© 2025 ScanJunk Removal Services LLC. All rights reserved.