Last updated: 1 September 2026
This Privacy Policy explains how the ScanDrop app (the "App"), developed by Pietro Cangiano (JK Studios), collects and processes personal data, in accordance with the EU General Data Protection Regulation ("GDPR", Regulation (EU) 2016/679) and with the Apple App Store and Google Play privacy guidelines.
ScanDrop organises delivery rounds for couriers. That means it handles data about two different groups of people, and the rules are not the same for both: you, who installed the App, and the recipients of the parcels, who never chose anything. Most of this policy is about the second group, because that is where the responsibility actually sits.
The distinction tells you who to address: your account is us, a delivery is your company.
When you photograph a parcel label or import a list from the depot, the App takes in the name, address, sometimes the phone number and, where applicable, the cash-on-delivery amount of a person who does not use ScanDrop. This is the data you need in order to deliver, and it is processed for that and nothing else: it is never used to profile anyone, never sold, never fed into any analytics.
When you frame a label, the photo exists only to read the text on it. Recognition happens on your phone: the image is not sent to any server, ours or anyone else's. The fields land in the confirmation screen where you correct them, and the photo is deleted in the same moment. It goes into no folder, stays in no gallery, and cannot be found later in the history. What remains is only what you confirmed.
If you choose to take one, a proof-of-delivery photo stays on your phone. The App does not upload it to any server, not even ours, and nobody else can see it — not your colleagues, not whoever coordinates the team, not us. It disappears when you delete the delivery, when you delete the route, or when you uninstall the App.
One thing that is true and not up to us: if your phone has system backup switched on (iCloud on iPhone), that photo is copied there along with the rest of the App data. On Android we have excluded the App from automatic backup; on iPhone the system offers no way to exclude it, so if this matters to you, turn the App off in your iCloud backup settings.
Your location is requested only when you tap "Put the round in order", so the route can be calculated from where you actually are. It is not recorded anywhere: there is no trace of your movements, on the phone or elsewhere, and nobody can reconstruct where you have been.
As long as the delivery, and not a minute longer. Name, address, phone and cash-on-delivery are erased at the instant you mark a parcel as delivered — not after a month, not at the end of the day. What remains of that delivery is the outcome, the number of parcels, the tracking code, the time, and the round's collected totals: the figures you need to get paid, which no longer say who the person was.
An undelivered parcel is the exception while it is still work to be done: if it comes back and someone retries tomorrow, the address is still needed. It is erased when the round is closed leaving the parcel inside as a record. If it is moved to another round or sent for reassignment, the data stays until it is delivered.
A nightly safety net erases anything that somehow escaped both moments after ninety days. In practice it catches only rounds that were opened and never closed.
Your own account and your rounds stay until you delete them. Deleting your account removes everything about you.
Camera and location have no separate legal basis because they leave no trace: the phone asks you for permission, the location serves one calculation and is never recorded, the label photo is read and deleted.
Three providers keep ScanDrop running, and no others:
If you work in a team, whoever coordinates sees how your rounds are going — how many deliveries you made, how many are left, at what time — but not recipients, addresses or photos. This is not an interface choice: that data never leaves the database towards them. Deliveries are seen by whoever has to make them and whoever prepared the round.
There is one exception, and the courier starts it. If at the end of a round they send undelivered parcels "to be reassigned", those parcels pass to whoever coordinates so they can decide what happens to them: from that moment, and only for those parcels, they see recipient and address. It is the minimum needed to answer the question being asked of them — who takes this parcel — and it ends the instant they hand it to another courier. If that option is never used, whoever coordinates sees no recipient at all.
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw consent.
Two of these you exercise yourself, inside the App, under More → Account: Export hands you a file with everything about you — profile, rounds, deliveries — and account deletion is immediate and permanent. For the others, email support@jkstudios.it: we answer within one month.
If a parcel was delivered to you and you want your data removed, there is almost certainly nothing left to remove: it was erased when the courier marked the delivery as made. If the delivery is still in progress, write to the company that is delivering to you — it is the controller of that data. Its coordinator has a tool inside ScanDrop that erases a recipient's details across the whole company immediately.
If you do not know which company to write to, or you get no answer, write to us at support@jkstudios.it and we will point you to the right controller.
You can delete your account at any time from More → Account → Delete account inside the App. It is immediate and permanent. You can also request deletion by emailing support@jkstudios.it, or through the Support page.
Google and Expo are US companies, so the data they receive leaves the European Union. The transfer rests on the safeguards each provider declares it adopts under Art. 44-46 GDPR: adherence to the EU-US Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission. Supabase stores data on servers inside the European Union.
ScanDrop is a work tool for couriers. It is not intended for children under 13, and we do not knowingly collect their data.
Your session is stored encrypted by the device hardware (iOS Keychain, Android Keystore). All traffic uses TLS. Access to delivery data is enforced by the database itself, row by row, and not merely hidden in the interface: a colleague who has no business with a round cannot read it even by asking the server directly. Access security also depends on keeping your credentials confidential.
We may update this policy. Material changes will be indicated by updating the date at the top of this page. Please review it periodically.
Write to us first — we would rather know and fix it. But you are not obliged to: you have the right to address the supervisory authority directly. In Italy that is the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garante@gpdp.it — garanteprivacy.it). If you live in another EU country, you may address your own country's authority.