Privacy Policy – ScanList

Last updated: 29 March 2026

The short version: ScanList stores all of your data locally on your device. We do not collect, transmit, or share any personal information. We have no servers, no accounts, and no analytics.

Who we are

ScanList is an Android application for scanning barcodes and organising scanned items into lists. It is developed and maintained as an independent application. If you have any questions about this policy, please get in touch via the contact details on our Google Play Store listing.

Information we collect

ScanList does not collect any personal information. The app has no user accounts, no registration, and no login. All data you create — lists, folders, and scanned items — is stored exclusively in a local database on your own device.

We do not collect, receive, or have access to any of the following:

Your name, email address, or any other identifying information
Your location
The barcodes or values you scan
Your lists or any content within them
Device identifiers or advertising IDs
Usage statistics or analytics
Crash reports

Device permissions

ScanList requests the following device permissions. Each is used solely for the stated purpose.

📷

Camera

Used to scan barcodes and QR codes. Camera frames are processed entirely on-device using Google ML Kit and are never stored or transmitted anywhere.

📂

Storage access (optional)

Used only when you choose to export a backup file or restore from a backup. Files are read from and written to a location you select using the system file picker. No files are accessed without your explicit action.

📳

Vibration

Used to provide haptic feedback when a barcode is successfully scanned. No data is involved.

Local data storage

All lists, folders, and scan history are stored in a private database on your device using Android's Room persistence library. This data is only accessible to ScanList and is removed when you uninstall the app.

The app settings you configure (such as sort order, compact view, and undo duration) are also stored locally using Android's DataStore and never leave your device.

Backups

ScanList includes an optional manual backup feature. When you choose to back up your data, the app creates a JSON file containing your lists and their contents. This file is saved to a location of your choosing on your device. We never receive, store, or have access to these backup files.

If you use Android's automatic cloud backup (Google Backup), please refer to Google's Privacy Policy for information on how that service handles data.

Third-party services

ScanList uses the following third-party libraries, all of which operate entirely on-device:

Google ML Kit (Barcode Scanning) — processes camera images locally to detect barcodes. No images or barcode data are sent to Google's servers. See ML Kit Terms of Service.
CameraX — an Android Jetpack library for camera access. Operates entirely on-device.

ScanList does not include any advertising SDKs, social media SDKs, or analytics libraries.

Children's privacy

ScanList does not knowingly collect any information from anyone, including children under the age of 13. Because we collect no data at all, the app is safe for use by people of all ages.

Changes to this policy

If we make material changes to this privacy policy, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after any changes constitutes acceptance of the updated policy.

Contact us

If you have any questions or concerns about this privacy policy or the ScanList app, please get in touch via the contact details on our Google Play Store listing.