ScanIQ Privacy Policy

Effective date: July 5, 2026

1. Overview & Our Roles

ScanIQ is operated by Zelene Operations LLC ("Zelene", "we"). This Privacy Policy explains how we collect, use, and protect information in connection with the ScanIQ mobile application (the "App"). ScanIQ is used by skincare and scalp-care professionals ("Operators") to capture images of clients and generate cosmetic, appearance-based observations and product suggestions. For images and records an Operator captures about their clients, the Operator's organization is the controller and Zelene acts as a processor on their instructions. For account and app-usage information, Zelene is the controller.

2. Information We Collect

• Images you capture: photographs of skin or scalp taken during a scan, which are sent to our servers and to our third-party AI provider to generate cosmetic observations.
• Account & contact information: name, email, and login credentials when you create an account.
• Client & usage records: client profiles, scan history, and the observations and product suggestions generated for each scan, so Operators can track results over time.
• Device & app-usage data: device type, app version, crash logs, and general usage events used to operate and improve the App.

We do not use this information to track you across other companies' apps or websites, and we do not sell it.

3. How We Use Information

• To provide the scan and recommendation features.
• To maintain client history for Operators.
• To operate, secure, and improve the App.
• To provide customer support and comply with legal obligations.

4. Third-Party AI Processing

To generate cosmetic observations, images are processed by Anthropic (the Claude multimodal AI service), acting as our service provider under contract. We send images to Anthropic only to return the cosmetic analysis you request. Under Anthropic's commercial API terms, submitted images are not used to train its models.

5. How We Share Information

We do not sell personal information. We share it only with: (a) service providers/subprocessors who host our infrastructure and provide the AI analysis, acting on our instructions and under confidentiality and data-protection obligations; (b) authorities where required by law; and (c) a successor in connection with a merger, acquisition, or asset sale.

6. Data Retention

We retain scan images for 12 months, after which they are automatically deleted. Operators can also delete individual client records and scans in the App at any time.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal information, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, and individuals in the EU/UK have rights under the GDPR/UK GDPR. To exercise rights, contact us at the address below; where data is managed by an Operator's organization, we may refer your request to them as the controller.

8. Consent for Images & AI Processing

Operators must obtain each client's consent before capturing images and having them processed by AI. The App presents a consent step, and this processing is disclosed in the consent copy shown in-app.

9. Children

The App is intended for use by professionals and is not directed to children under 18, and we do not knowingly collect their personal information.

10. Data Security

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit (TLS), access controls, and ongoing monitoring. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this policy from time to time. We will post the revised version here with a new effective date and, for material changes, provide additional notice.

12. Contact

Privacy questions or requests about the App: support@ispanify.com.