1. Who is responsible
The controller for ScanBee is HoneyApps – Lukas Schachtmaier & Johann Warkentin GbR, Rosenstraße 19, 38550 Isenbüttel, Germany. Email: info@honeyapps.de; phone: +49 174 9783003.
This notice covers the ScanBee app, its web library and the ScanBee product, support and legal pages. Other Honeyapps services have their own privacy notices.
2. On-device processing and optional cloud features
ScanBee creates room and 3D scans on your device. You do not need an account for local scanning. You can create an account to use the web library. After you sign in to the app, new and changed scans are uploaded automatically to your private cloud library while the app is open; sample scans stay on your device. You can switch automatic uploads off under “Account & scan transfer” and upload individual scans instead. Nothing is uploaded without signing in. ScanBee has no advertising or tracking.
3. Data we process
- Scans: room geometry, floor plans, measurements, models, textures derived from camera images, scan and room names, timestamps, 2D drawings with lines and measurements, and available export files. These may show personal belongings, rooms or people captured incidentally.
- Account: email address, internal user ID, password protected by the authentication service, and information needed for sign-in and security. Sign in with Apple supplies a pseudonymous Apple identifier and the email address you choose to share, which may be an Apple relay address, instead of a ScanBee password.
- Info points and attachments: the app stores text, measurements, photos and files attached to model points locally. You choose photos from the camera or photo library. A measurement report you create as a PDF contains these items and is uploaded with other export files when cloud uploads are enabled. The original attachments themselves are not uploaded.
- Local photo walkthrough: new room scans with a photo model and freeform 3D scans save selected camera photos with depth, confidence, camera position, calibration and timestamps. Small photo previews in the local scan library are not uploaded. This capture archive stays on your device, is excluded from device backups and cloud uploads, and is removed when the local scan is permanently deleted.
- Tape measure: distances and timestamps you explicitly save. Camera images from measuring are not saved.
- Connection data: cloud and website requests involve IP addresses, timestamps and technical request information needed to deliver and secure the service.
Local files are stored in the app’s private storage with complete file protection on iOS. The mobile app stores authentication credentials in protected system storage. The web app uses your browser’s localStorage to keep you signed in until you sign out. Opening the web library from the signed-in app uses a short-lived, one-time sign-in link generated by Supabase for your account; this does not send an email.
The web app caches up to 16 recently loaded scan files in your browser and clears this cache when you sign out. Large 3D scans may also have a smaller viewing model stored in your private cloud library, created by the app during upload or by the browser when first opened. It is deleted with the cloud scan. Files opened locally in the browser are uploaded only after your explicit confirmation.
Drawings are stored with the scan and uploaded with their floor-plan or top-view image when uploads are enabled. Web drawing drafts use sessionStorage in the current tab and are cleared when you sign out. Saving a copy creates a new private cloud copy; it does not change the original on your iPhone.
You can edit room geometry and photo meshes and add notes in the web app. Model edits stay in the page’s memory until downloaded or saved. Saving an edited copy while signed in creates a new private cloud copy of the models, names and notes. Without signing in, the copy lasts only for that browser session unless downloaded. The original remains unchanged. Browser model previews use the scan files already provided; original photo archives are not transferred.
4. Cloud storage and Sign in with Apple
Supabase Pte. Ltd. processes account and cloud-library data on our behalf under a data processing agreement. Our ScanBee project is hosted in Frankfurt, Germany (EU). Files use private storage, and database and file access is restricted to your account. Transmission uses HTTPS. Necessary access outside the EU is covered by the contractual safeguards, including EU Standard Contractual Clauses. See Supabase’s privacy information.
Optional Apple sign-in: Apple supplies a pseudonymous identifier and the email address you share, which may be a relay address. We do not request your name. Opening the web sign-in dialog loads Apple’s sign-in script, exposing your IP address and browser information to Apple. Apple Distribution International Limited in Ireland is responsible for EEA users; Apple identifies Standard Contractual Clauses as its international-transfer safeguard. Our sign-in uses GDPR Article 6(1)(b). Details and how to request the clauses: Apple’s privacy policy. Disconnecting Apple sign-in does not delete your ScanBee account.
5. Account emails and web hosting
Brevo (Sendinblue GmbH, Germany) sends account confirmation and password emails, processing your email address and the requested message. Open and click tracking is configured as anonymized with the provider; links may still use the provider’s redirect domain.
Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA hosts the web service. Its data processing agreement applies to our Pro plan. EU Standard Contractual Clauses safeguard transfers to the United States.
6. Sharing you choose
ScanBee does not send camera photos to Honeyapps compute servers. Room scans, 3D scans and tape measurements are calculated on your device. Scan data leaves the device when uploaded to your cloud library, individually or automatically after sign-in as described above, or when you share it.
You choose the recipient and purpose when using AirDrop, email, Files or another app. Those services have their own privacy terms.
7. Legal grounds and retention
Requested app, account and cloud features use GDPR Article 6(1)(b). Security measures use our legitimate interest in operating a secure service under Article 6(1)(f). Camera access requires your system permission; changing it in device settings disables the affected functions. Device storage/access strictly necessary for features you request follows section 25(2)(2) of Germany’s TDDDG. Providing account data is optional, but required for cloud and account features. ScanBee does not make automated decisions with legal or similarly significant effects or perform profiling.
Project folders, descriptions and favorites remain local. Scans in the local trash remain until restored or permanently deleted; the trash is not emptied automatically. Permanent deletion also removes capture photos, local notes and previews. Cloud copies are managed separately: you can delete individual cloud scans with their stored revisions or delete your account and all its cloud files under account settings. Uninstalling the app does not delete cloud data.
Backups and technical logs are retained only as needed for recovery, security and investigating errors or abuse, and are overwritten or removed under the providers’ deletion cycles. Where legal retention or establishing, exercising or defending legal claims requires longer storage, processing is restricted to those purposes.
8. App Store and your rights
Apple’s privacy terms apply to downloads and updates. Subject to applicable law, you have rights to access, correct, delete, restrict and transfer your personal data and to object to processing. You can download scan files in the app and web library. Contact info@honeyapps.de for other requests.
Where processing relies on consent, you may withdraw it for the future. You may object to processing based on legitimate interests for reasons relating to your particular situation. You can complain to a data protection authority, including the State Commissioner for Data Protection of Lower Saxony, Germany.
9. Support and international use
When you contact us, we process your contact details, message and attachments you provide to answer your request: GDPR Article 6(1)(b) for contract-related requests, or Article 6(1)(f) for our legitimate interest in answering other inquiries. Send only necessary content. We delete correspondence after the matter is resolved unless legal retention or necessary legal defense requires it to be kept.
We do not sell personal data or share it for behavioral advertising. US users can use the same contact details to request access, correction, deletion or a copy of their data. Additional rights under applicable local privacy law remain unaffected. We use information in a request only for reasonable identity verification and handling the request, and do not discriminate against you for exercising your rights.
10. Changes
We update this notice and inform you in the app when processing changes materially.
Subscriptions and RevenueCat
We use RevenueCat, Inc. (USA) to verify Apple purchases, manage trials and subscriptions, and restore Pro access. The SDK processes a random app user identifier. After optional sign-in, we link it to your internal ScanBee account ID so your subscription can also unlock the web library. Data includes purchase receipts and transaction identifiers, product, purchase and expiry times, trial, renewal and refund status, store country, price/currency, and necessary connection data such as IP address and app, SDK and operating-system details. We do not send scans, photos, names, email addresses or payment/card details to RevenueCat.
The legal basis is GDPR Art. 6(1)(b) for purchase verification and access. RevenueCat dashboard reports about trials, successful payments, cancellations and revenue support product and business planning under Art. 6(1)(f), our legitimate interest in operating the service. Starting a trial is not recorded as a payment. We do not use cross-app advertising tracking or send an advertising identifier. RevenueCat acts as a processor; its DPA includes international transfer provisions, including EU Standard Contractual Clauses. See RevenueCat’s privacy policy.
Our Supabase backend stores your account ID and a short-lived, server-verified access status to control new writes. Existing files remain readable and deletable after expiry. Purchase data is processed for as long as needed for subscription management, restoration and legitimate records. When you delete your account, we also request deletion of the associated RevenueCat customer record; a failure prevents us from reporting account deletion as complete. If you use ScanBee without an account, contact us with privacy requests. Apple independently controls billing and its store purchase history. Deleting data at ScanBee neither cancels your Apple subscription nor deletes Apple’s purchase records.