App Privacy Policy

Effective Date: 2026-10-20

This policy covers the Thing Identity app for iOS and its App Clip (together, the "App"), published by:

Bizarre Grzegorz Osak
Grabowiec 22A, 21-302
Lubelskie, Poland
NIP: 5381864992
REGON: 522616642
Email: support@thingidentity.com

The App scans QR codes and shows the product pages they lead to. It has no account and no sign-in. The pages it shows are published on the Thing Identity platform by the brands whose products you scan, at thingidentity.com or on a brand's own domain served by us. The platform's data practices are described in the website's Privacy Policy (thingidentity.com/en-us/privacy-policy); the content of a product page comes from its brand, which we do not control. This document describes what the App itself does with your data and what the pages it shows may do.

1. What the App does on your device

Camera. The App asks for permission to use the camera only to read QR codes. Codes are decoded on your device. The App does not store, transmit or analyze camera images. You can withdraw the permission at any time in the iOS Settings.

Scan history and favorites. The codes you scan, and the ones you mark as favorites, are kept only on your device, in the App's own storage. They are not sent to us or to anyone else, and they are deleted when you delete the App.

2. What leaves your device

The App itself sends nothing about you anywhere. What leaves your device comes from the product pages it shows, web pages served by our platform at thingidentity.com or on a brand's own domain, displayed in an in-app web view:

• Google Analytics 4 runs only after you accept statistics cookies in the cookie banner shown on the page. It records the pages you view, the product's GTIN, the page type and language, and an approximate location derived from your IP address, without advertising features. You can decline or withdraw this in the banner on any page.
• Sentry receives reports of errors in a page's code: the error, the page address and the browser and operating system versions and, from about 10% of visits, data on the page's performance (load times and request addresses), without your IP address or any identifier of you. Sentry keeps this data in the European Union for 30 days.
• Server logs of our website record the address requested, the time and the device's IP address, as for any visit, for security and troubleshooting.

Brand content. The content of a product page is published by the brand that owns the product. A brand may include any content on its page, including content served from other servers. When such a page loads, your device requests that content from those providers directly, which lets them see your IP address and set their own cookies, under their own privacy policies. The brand is responsible for the content of its pages, and you can contact it through the details on the page.

3. Other websites

A scanned code that leads to a website other than ours opens in Safari, outside the App, under that website's own privacy policy. The App's own browser shows our pages only.

4. What the App does not do

The App does not collect your name, email address or contact details. It does not use the advertising identifier or any other device identifier. It does not show advertisements, and it does not track you across other companies' apps or websites.

5. App Clip

The App Clip is a small part of the App that iOS offers when you scan a Thing Identity code with the Camera app. It shows the product page the same way, keeps no scan history, and is otherwise covered by this policy.

6. Your rights

For the data described in section 2 that our platform collects (analytics, error reports and server logs) we are the data controller under the GDPR. For content a brand embeds from other providers, the provider and the brand are responsible under their own policies. You have the right to access, correct or erase that data, to restrict or object to its processing, to data portability and to lodge a complaint with a supervisory authority, as set out in sections 7 to 10 of the website's Privacy Policy (thingidentity.com/en-us/privacy-policy). The scan history and favorites are under your sole control on your device.

7. Changes to this policy

We may update this policy from time to time. The new version is posted at this address with its effective date; a change that matters to you is also announced in the App Store release notes.

8. Contact

Questions about this policy: support@thingidentity.com.