uScan

1. PERSONAL DATA CONTROLLER

Lopofist Limited, a company registered under the laws of the Republic of Cyprus, having its registered office at 26 Stavrou Street, Strovolos 2035, Nicosia, Cyprus will be the controller of your personal data.

2. CATEGORIES OF PERSONAL DATA WE COLLECT

We collect data you give us voluntarily (for example, when you contact us for technical support and provide us with your name and email address). We also collect data automatically (for example, your IP address, device type, etc.).

The App may request access to files stored on your device (such as PDFs, images, or documents) solely to enable core functionality, including viewing, editing, scanning, converting, and saving documents.

We do not access files without your explicit permission and do not use the content of your files for advertising or marketing purposes.

2.1. Data we receive directly from you:

2.1.1. Identifiers

When you require support and contact us, we may ask you to provide us with your name and/or email. You do not have to give this data to us in order to use the App. It will be required only when you wish to contact us directly.

2.1.2. Content

Our Service will access the content, photo libraries or separate photos, files to enable the normal running of the Service. We do not access files without your explicit permission and do not use the content of your files for advertising or marketing purposes.

You are prohibited from uploading sensitive personal data (such as health, biometric, genetic, or children’s data), government identifiers, or confidential/protected information (such as legal advice, privileged communications, or trade secrets).

2.1.3. Feedback/Communications

You can also provide us with your email and/or name when you contact our support team, along with any screenshots or information that you or we believe would assist in resolving the issue.

2.2. Data we collect automatically:

2.2.1. Data about how you found us

We collect data about your referring URL (that is, the place where you were when you tapped on our ad).

2.2.2. Device and Location data

We collect data from your mobile device. Examples of such data include: language settings, IP address, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID.

2.2.3. Usage data

We record how you interact with our Service. For example, we log your taps on certain areas of the interface, the features, and content you interact with, how often you use the App, how long you are in the App, what sections you use, your subscription orders and crashes you experienced while using the Service.

2.2.4. Advertising IDs

We collect your Apple Identifier for Advertising (“IDFA”), Identifier for Vendor (“IDFV”) or Universally Unique Identifier (“UUID”). You can typically reset these numbers through the settings of your device’s operating system (but we do not control this).

3. FOR WHAT PURPOSES WE PROCESS YOUR PERSONAL DATA

We process your personal data:

3.1. To provide our Service

This includes enabling you to use the Service seamlessly and preventing or addressing Service errors or technical issues.

3.2. To customize your experience

We process your personal data, to adjust the content of the Service and make offers tailored to your personal preferences.

3.3. To provide you with customer support

We process your personal data to respond to your requests for technical support, Service information or to any other communication you initiate. For this purpose, we may send you, for example, notifications or emails about the performance of our Service, security, payment transactions, notices regarding our Terms and Conditions of Use or this Privacy Policy.

3.4. To communicate with you regarding your use of our Service

We may communicate with you, for example, by push notifications. These may include reminders or other information about the App. As a result, you may, for example, receive a push notification that a new feature has been deployed in the App. To opt out of receiving push notifications, you need to change the settings on your device.

The services that we use for these purposes may collect data concerning the date and time when the message was viewed by our users, as well as when they interacted with it, such as by clicking on links included in the message.

3.5. To research and analyze your use of the Service

This helps us to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the App and our new products. We also use such data for statistical analysis purposes, to test and improve our offers. This enables us to better understand what features and sections of the App our users like more, what categories of users use our App. As a consequence, we often decide how to improve the App based on the results obtained from this processing. For example, if we discover that users do not use the App for removal of duplicate contacts, we may focus on improving this section.

3.6. To send you marketing communications

We process your personal data for our marketing campaigns. We may add your email address to our marketing list. As a result, you will receive information about our products, such as, for example, special offers. If you do not want to receive marketing emails from us, you can unsubscribe following instructions in the footer of the marketing emails.

We may also show you advertisements in our App, and send you push notifications for marketing purposes. To opt out of receiving push notifications, you need to change the settings on your device.

3.7. To personalize and display ads

We and our partners, including Facebook, Google, use your personal data to tailor ads and possibly even show them to you at the relevant time. For example, if you have installed our App, you might see ads of our products, for example, in your Facebook's feed.

We may target advertising to you through a variety of ad networks and exchanges, using data from advertising technologies on and off of our Services like, unique cookie, or similar tracking technology, pixel, device identifiers, geolocation, operation system information, email.

We may also use advertising technologies to monetize the App by displaying advertisements. We and our advertising partners may process certain personal data to show ads within the App, measure their performance, and deliver personalized or non-personalized advertising, depending on your device settings and applicable law.

How to opt out or influence personalized advertising

iOS: On your iPhone or iPad, go to Settings > Privacy > Apple Advertising and deselect Personalized Ads.

In addition, you may get useful information and opt out of some interest-based advertising, by visiting the following links:

• Network Advertising Initiative – http://optout.networkadvertising.org/
• Digital Advertising Alliance – http://optout.aboutads.info/
• Digital Advertising Alliance (Canada) – http://youradchoices.ca/choices
• Digital Advertising Alliance (EU) – http://www.youronlinechoices.com/
• DAA AppChoices page – http://www.aboutads.info/appchoices

3.8. To process your payments

We provide paid products and/or services within the Service. All payments are processed exclusively through Apple's App Store using Apple's StoreKit framework. We do not collect, store, or process your payment card details. All payment information is handled directly by Apple in accordance with Apple's Privacy Policy and App Store terms.

3.9. To enforce our Terms and Conditions of Use and to prevent and combat fraud

We use personal data to enforce our agreements and contractual commitments, to detect, prevent, and combat fraud. As a result of such processing, we may share your information with others, including law enforcement agencies (in particular, if a dispute arises in connection with our Terms and Conditions of Use).

3.10. To comply with legal obligations

We may process, use, or share your data when the law requires it, in particular, if a law enforcement agency requests your data by available legal means.

4. UNDER WHAT LEGAL BASES WE PROCESS YOUR PERSONAL DATA (applies only to EEA-based users)

In this Section, we are letting you know what legal basis we use for each particular purpose of processing. For more information on a particular purpose, please refer to Section 3. This Section applies only to EEA-based users.

We process your personal data under the following legal bases:

4.1 your consent;

4.2 to perform our contract with you;

Under this legal basis we:

• Provide our Service (in accordance with our Terms and Conditions of Use)
• Customize your experience
• Provide you with customer support
• Communicate with you regarding your use of our Service

4.3 for our (or others') legitimate interests, unless those interests are overridden by your interests or fundamental rights and freedoms that require protection of personal data

We rely on legitimate interests:

to communicate with you regarding your use of our Service

This includes, for example, sending you push notifications. The legitimate interest we rely on for this purpose is our interest to encourage you to use our Service more often. We also take into account the potential benefits to you.

to research and analyze your use of the Service

Our legitimate interest for this purpose is our interest in improving our Service so that we understand users’ preferences and are able to provide you with a better experience (for example, to make the use of the App easier and more enjoyable, or to introduce and test new features).

to send you marketing communications

The legitimate interest we rely on for this processing is our interest to promote our Service in a measured and appropriate way.

to personalize our ads

The legitimate interest we rely on for this processing is our interest to promote our Service in a reasonably targeted way.

to enforce our Terms and Conditions of Use and to prevent and combat fraud

Our legitimate interests for this purpose are enforcing our legal rights, preventing and addressing fraud and unauthorised use of the Service, non-compliance with our Terms and Conditions of Use.

to investigate and respond to any comments or complaints that you may send us

In the event of a merger or acquisition of our business and/or all or any portion of its assets, your information may be disclosed to the prospective purchaser, our advisers, and any other prospective purchaser's advisers and will be one of the assets that is transferred to a new owner; and

in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of information in connection with government agency requests, legal process or litigation)

Where we process your information based on legitimate interests, you can object to this processing in certain circumstances. In such cases, we will cease processing information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons. To exercise your right to object, please see Section 6 of this Privacy Policy.

4.4 to comply with legal obligations, including, but not limited to, responding to requests by government or law enforcement authorities conducting an investigation.

5. WITH WHOM WE SHARE YOUR PERSONAL DATA

We share information with third parties that help us operate, provide, improve, integrate, customize, support, and market our Service. We may share some sets of personal data, in particular, for purposes and with parties indicated in Section 3 of this Privacy Policy. The types of third parties we share information with include, in particular:

5.1. Service providers

We share personal data with third parties that we hire to provide services or perform business functions on our behalf, based on our instructions.

5.2. Law enforcement agencies and other public authorities

We may use and disclose personal data to enforce our Terms and Conditions of Use, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.

5.3. Third parties as part of a merger or acquisition

As we develop our business, we may buy or sell assets or business offerings. Customers’ information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated entity (e.g. parent company or subsidiary) and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

5.4. Affiliates

We may share your personal information with our partner organizations that are part of our corporate group – these are companies that are owned by, own, or are jointly owned with us. These partner organizations will use the information in ways that align with this Privacy Policy.

6. HOW YOU CAN EXERCISE YOUR RIGHTS

To be in control of your personal data, you have the following rights:

Accessing / reviewing / updating / correcting your personal data. You may request a copy of, as well as updating and correcting your personal data collected during your use of the Service at info@lopofist.limited.

Deleting your personal data. You can request erasure of your personal data by sending us an email at info@lopofist.limited.

When you request deletion of your personal data, we will use reasonable efforts to honor your request. In some cases we may be legally required to keep some of the data for a certain time; in such an event, we will fulfill your request after we have complied with our obligations.

Objecting to or restricting the use of your personal data. You can ask us to stop using all or some of your personal data or limit our use thereof by sending a request at info@lopofist.limited.

Additional information for EEA-based users

If you are based in the EEA, you have the following rights in addition to the above:

The right to lodge a complaint with supervisory authority. We would love you to contact us directly, so we could address your concerns. Nevertheless, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work or where the alleged infringement has taken place.

The right to data portability. If you wish to receive your personal data in a machine-readable format, you can send a respective request at info@lopofist.limited.

7. AGE LIMITATION

We do not knowingly process personal data from persons under 16 years of age. If you are under 16, do not use or provide any information to or on this Service or through any of its features.

If you learn that anyone younger than 16 has provided us with personal data, please contact us at info@lopofist.limited.

We are not liable for any damages that may result from a visitor’s misrepresentation of age.

8. INTERNATIONAL DATA TRANSFERS

We may transfer personal data to countries other than the country in which the data was originally collected in order to provide the Service set forth in the Terms and Conditions of Use and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.

In particular, if we transfer personal data originating from the EEA to countries with not adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission (details available here), or (ii) the European Commission adequacy decisions about certain countries (details available here).

9. CHANGES TO THIS PRIVACY POLICY

We may modify this Privacy Policy from time to time. If we decide to make material changes to this Privacy Policy, you will be notified through our Service or by other available means and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.

For a detailed summary of key updates, please refer to the Change Log available at Section 12. It provides an overview of all recent modifications and helps you track updates over time.

10. U.S. STATES PRIVACY NOTICE

Applicability

If you reside in a state that has enacted consumer privacy laws, this section applies to you. This U.S. States Privacy Notice (“Notice”) supplements our Privacy Policy and provides disclosures required by laws in states such as, for example, California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia.

This Notice is designed to supplement our Privacy Policy to ensure compliance with state-specific laws and applies to the collection, use, and sharing of your Personal Information through our websites, mobile applications, and other online or offline services (collectively, the “Services”).

For California residents, this also serves as our California Notice at Collection.

The definition of “Personal Information” may vary by state law. Generally, it refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

10.1. Categories of Personal Information We Collect and For What Purposes

The table below outlines the categories of Personal Information we collect, along with purposes of such collection. For more details, refer to other sections of our Privacy Policy.

For additional details on the purposes of processing and third parties with whom data is shared for each specific purpose, please refer to Section 3 of this Privacy Policy.

We may also process de-identified data, ensuring it cannot reasonably be linked back to you. We commit to maintaining and using de-identified data responsibly and will not attempt to re-identify such data unless required to validate our de-identification measures.

10.2. What Personal Information We Share

Certain state privacy laws, such as those in California, require us to disclose the categories of Personal Information that we have shared with third parties for business purposes over the past 12 months. During this period, we have disclosed all categories of Personal Information outlined in the “Categories of Personal Information We Collect” section for business purposes. For example, we may share IP addresses and device identifiers with service providers that assist us with crash monitoring and reporting.

Some U.S. states grant residents the right to opt out of sharing their Personal Information with third parties in exchange for valuable consideration (which may be classified as a “sale” or “share” under state privacy laws, even if no monetary transaction occurs). If you reside in one of these states and would like to limit the disclosure of your Personal Information to third parties for advertising or marketing purposes, please refer to Section 10.4. below.

For details regarding the categories of third parties with whom we share Personal Information, please refer to Section 3 and Section 5 of this Privacy Policy.

10.3. Your Privacy Rights Under State Laws

Certain U.S. state privacy laws grant residents specific rights regarding their personal information. If you reside in a state with such laws, you may have the following rights:

To exercise any of these rights, submit a request to our customer support team via email: 📧 info@lopofist.limited

Verification

To ensure that we properly handle the requests you make regarding your rights, we are required to verify those requests. Depending on the type of request, this may include your email, date of subscription purchase, date of last activity, date of account creation or some other Service use data that will reasonably identify you as an owner of the account. We may also ask you for additional proof of identity, if necessary.

Right to Appeal

If we deny your request, you may have the right to appeal our decision. To do so, please contact us and explain your concerns. If you are dissatisfied with the result of the appeal, you may escalate the matter by contacting the Attorney General’s office in your state of residence.

Authorized Agents

If you are an authorized agent acting on behalf of a consumer, you may submit an opt-out, access, deletion, or correction request by contacting us. If you are making a request on behalf of a California resident, you may be required to submit proof of authorization, such as:

• A valid power of attorney
• Written permission signed by the consumer, along with identity verification from the consumer

California “Shine the Light” Law

California’s Shine the Light law gives California residents the right to ask companies once a year what personal information they share with third parties for those third parties’ direct marketing purposes. Learn more about what is considered to be personal information under the statute.

To obtain this information from us, please send an email message to info@lopofist.limited, which includes “Request for California Privacy Information” on the subject line and your state of residence and email address in the body of your message. If you are a California resident, we will provide the requested information to you at your email address in response.

Retention of Personal Information

We retain the categories of personal information listed above as reasonably necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. In many situations, we must retain all, or a portion, of your personal information to comply with legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.

10.4. Sales, Sharing, and Targeted Advertising

Privacy laws in some U.S. states broadly define the term “sale” to include sharing of information via cookies, pixels, and similar tracking technologies for certain targeted advertising activities. We do not sell Personal Information for monetary compensation. However, when you visit our websites, we and our advertising partners may collect device data and behavioral insights through tracking technologies, which could be interpreted as a “sale” or “sharing” under state laws, even if no money is exchanged.

We do not knowingly engage in sales, sharing, or targeted advertising using the personal information of individuals under 18.

More information about our data-sharing practices is available in the table below.

Opt-Out Rights

You may opt out of sales, sharing, or targeted advertising by contacting us at info@lopofist.limited.

Your opt-out settings apply per device and browser. If you switch devices, clear cookies, or use a different browser, you may need to reapply your opt-out settings.

11. DATA RETENTION

We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy (including providing the Service to you, complying with our legal obligations, and enforcing Terms of Use and our other agreements). For example, to prevent abuse of trials, introductory offers, or discounts, we will retain records that you have previously initiated such trials as long as these offers remain available in our Service.

Please note that personal information may be retained for longer if it becomes the subject of a legal claim or is somehow relevant for litigation or other proceedings.

12. CONTACT US

You may contact us at any time for details regarding this Privacy Policy and its previous versions. For any questions concerning our Service and your personal data please contact us at info@lopofist.limited.

Effective as of: 26 June 2026