iPhone & AndroidSee the apps
ScratchProof · Legal

Privacy Policy

Effective 28 October 2026Developer: Sintios (KAVIO LABS SOFTWARE LIMITED)[email protected]

The short version

  • We don't run servers for ScratchProof, and we never receive your photos, rentals or reports.
  • Photos, the place and time they were taken, your marks and your reports are stored only on your phone.
  • Location is used only while you take a scan photo, to stamp where it was taken. ScratchProof never tracks you in the background.
  • The comparison between pick-up and return photos runs on your phone.
  • No account and no analytics tools of our own.
  • The free version shows ads from Google AdMob, only on the list of rentals, never on the camera, report or letter screens. You control ad personalisation (App Tracking Transparency on iPhone; Google's consent form and Android's ad settings on Android). ScratchProof Pro removes ads.
  • Your photos and reports are never shared with advertisers.

This policy explains how ScratchProof: Rental Car Check ("ScratchProof", "the app") handles information, on iPhone and on Android. ScratchProof is made by Sintios ("we", "us"). Points marked iPhone or Android apply only to that platform; everything else applies to both.

1. What the app stores, and where

ScratchProof stores what you add: rental details (car, plate, rental company, pick-up place and dates, fuel or mileage notes), the photos of each scan, the time and place each photo was taken, the damage marks you place, the seal (a fingerprint of the scan), charges you record and your dispute letters. All of this is kept in the app's private storage on your phone, protected by the device's encryption. If you delete a rental, its photos are deleted too. If you delete the app, everything is deleted.

  • iPhone Your iPhone's own backup (iCloud Backup or a computer backup) may include ScratchProof's data, as with any app. That backup belongs to your Apple Account; we can't access it.
  • Android If backup is turned on for your phone (usually in Settings → Google → Backup; wording varies by device), Android's Auto Backup may save a copy of ScratchProof's rentals, photos and settings to your Google Account's backup storage, so they can be restored on a new phone. That backup belongs to your Google Account, is stored by Google under the Google Privacy Policy, and we can't access it. If backup is off, nothing leaves your phone this way.

2. Camera and location

  • The camera is used only when you take scan photos.
  • Location is requested "while using the app" (on Android, through Google Play services' location service) and read only at the moment a scan photo is taken, so the report can show where the car was photographed. You can say no; photos are then stamped with time only.
  • Return reminders are local notifications scheduled on your phone.

3. On-device processing

Sealing (SHA-256 fingerprints of photos and marks) and the comparison that suggests areas that changed between pick-up and return run entirely on your phone. Nothing is uploaded for this.

4. Things you send yourself

When you share a PDF report, original photos or a dispute letter, they go only where you send them (for example by email to a rental company, your bank or a consumer body), using your own apps. We don't receive a copy.

5. Purchases

  • iPhone ScratchProof Pro is sold through Apple. Apple processes the payment; we receive no card details. The app checks your purchase status with Apple on your device.
  • Android ScratchProof Pro is sold through Google Play. Google processes the payment; we receive no card details. The app checks your purchase status on your device using the Google Play Billing Library, and Google Play keeps a record of your purchase in your Google Account under the Google Privacy Policy.

Buying on sintios.com and your Sintios account

You can also buy ScratchProof's paid features on our website (ScratchProof on the web). The seller is KAVIO LABS SOFTWARE LIMITED and Stripe (Stripe Payments UK Ltd and its affiliates) processes the payment, by card, Apple Pay or Google Pay: your card or wallet details, billing details and email go to Stripe, never to us. Stripe acts as an independent controller for its own legal and fraud-prevention duties (Stripe's privacy policy).

For web purchases, and only if you choose to sign in (Settings → Sintios account), we keep a small Sintios account: your email address; what you bought, its status and dates, Stripe's reference numbers and when you ticked the box to start access straight away; and sign-in links, codes and sessions, stored only as hashes. You sign in with a link we email you (single use, valid 15 minutes); there is no password. The app asks our server which purchases are linked to your email so it can unlock them; nothing else about how you use ScratchProof is sent. We don't use the account for marketing.

Deleting it: in the app (Settings → Sintios account → Delete account) or at sintios.com/account. Any web subscription is cancelled and your email, purchase list and sign-ins are deleted from our server straight away. Payment and invoice records are kept by Stripe, and by us in our accounts, for as long as tax and accounting law requires (in the UK, generally six years); they are used for nothing else. App Store labels: if you sign in, "Contact Info: Email Address", linked to you, used for app functionality only.

6. Advertising (free version)

The free version shows a banner from Google AdMob at the bottom of the rentals list. Before ads load, a Google consent message may ask for your choices where the law requires it.

  • iPhone iOS may ask whether the app can track you (App Tracking Transparency). If you decline, ads are not personalised.
  • Android Android has no tracking prompt. Where Google's consent form is shown, ads are personalised only if you agree to it. You can also delete or reset your advertising ID at any time in Android's settings (usually Settings → Privacy → Ads, or Settings → Google → Ads).

Google may process device information and identifiers to show and measure ads, as described in Google's policy. Your photos, rentals and reports are never shared with Google or advertisers. You can change your ad choices any time in Settings → Privacy & ads choices.

7. Crash reports and diagnostics

We don't add crash reporting or analytics tools.

  • iPhone If you choose to share diagnostics with app developers in iOS settings, Apple may share anonymous crash reports with us.
  • Android If you have chosen to share usage and diagnostics data with Google on your phone, Google Play may provide us with crash reports and app performance data (Android vitals).

8. What we don't do

  • We don't sell or rent your information.
  • We don't create accounts or profiles.
  • We don't track your location outside a scan photo.

9. Your choices and rights

Because your data stays on your device, you control it directly: you can view, export (PDF, original photos) and delete it in the app. If you have a question about your rights under laws such as the UK GDPR or the EU GDPR, contact us.

10. Children

ScratchProof is for adults who rent cars. It isn't directed at children.

11. Changes

If we change this policy, we'll update the date above and, for significant changes, tell you in the app or release notes.

12. Contact

Sintios · [email protected]