Privacy Policy (GDPR)
Last updated: 31 July 2026
1. Data controller
The data controller for BizScan is Rob & The Young Holdings SL, a company incorporated in Spain. For any privacy question or request, contact robain@robandtheyoung.com.
2. What we process
- Photos you capture. The image you take is uploaded to our servers and sent to a third-party AI provider to generate the assessment. When a scan is saved to your account, the image is stored in our private storage and linked to your scan history.
- Account data. If you sign in with Google or Apple, we receive your email address, name and profile picture from that provider.
- Scan results. The AI-generated assessment associated with your account.
- Basic analytics. Aggregated usage data (page views, device and browser type) via Google Analytics.
3. Legal basis
- Performance of a contract (Art. 6(1)(b) GDPR): processing your photo and account data to deliver the assessment you requested and to keep your scan history.
- Legitimate interests (Art. 6(1)(f) GDPR): keeping the service secure, preventing abuse, and understanding aggregate usage.
- Consent (Art. 6(1)(a) GDPR): where you choose to publish a scan as a public page, including whether the photo is shown.
4. Third-party processors
Photos and prompt text may be processed by third-party AI providers in order to generate the assessment. We also use hosting, database and storage providers, and Google Analytics. These providers act as processors on our behalf and are not permitted to use your data for their own advertising.
5. Retention
Saved scans and their photos are retained for as long as your account exists — they are not deleted automatically. You can delete your account at any time from the profile screen, which removes your account and associated scan data. Published public scan pages remain available until you delete them.
6. Your rights
Under the GDPR you have the right to access, rectification, erasure, data portability, restriction of processing, and objection to processing. To exercise any of these rights, email robain@robandtheyoung.com from the address associated with your account; we respond within one month. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD).
7. Never sold
We do not sell your photos or personal data, and we do not use them for advertising.