Phone number (US/Canada) and OTP verification records (short-lived)
Optional postal / ZIP code
Saved scanned items and price-drop history tied to your account
Push notification token (FCM) for alerts
“I’m interested” taps on a deal (stored as your account + deal, not published publicly)
App device logs needed to run and debug the service
Merchants
Company / store name, contact phone, email if provided
Store address (used for directions and tax calculation where enabled)
Product catalog, prices, QR values, scan counts
Subscription, plan usage, and payment references via Stripe (we do not store full card numbers)
Website / QR landing
Basic server logs (IP, browser, page requested) when you open pryzi.ca or a printed QR link
We do not require your name to use the customer app.
2. How we use it
Create and secure your account (OTP login)
Save scanned products and send price-drop notifications
Show merchants scan rankings and interest counts
Enforce plan limits and process subscriptions
Improve reliability and prevent abuse
We do not sell your personal information.
3. What we share
Stores: they can see that customers scanned or marked interest on an item. They do not receive your phone number by default.
Stripe: payment processing for Merchant plans.
Firebase / Google: push notifications and related device tokens.
SMS provider (when enabled): to deliver OTP codes.
We may disclose information if required by law or to protect the service and users.
4. Retention
OTP records are deleted or marked used after verification. Account, saved items, and merchant catalog data stay until you delete them or we close the account. After account deletion, we remove or anonymize personal data except records we must keep for billing, security, or law.
5. Your choices
Customers can remove saved items and delete their account in the app.
You can turn off notifications in device settings.
Merchants can request account or data help at the support email below.
6. Children
Scanbox is not directed at children under 13. We do not knowingly collect their data.
7. Security and transfers
We use standard safeguards (HTTPS, access-controlled servers). No method is 100% secure. Data may be processed in Canada and the United States (for example Firebase and Stripe).