Privacy Policy — Xray Body Scan Camera
This Privacy Policy describes how Marbellaspa app ("we", "us", "our") handles information in connection with the mobile app Xray Body Scan Camera (the "App", package name com.marbellaspa.XRayScanner), available for Android on Google Play. By installing or using the App, you acknowledge the practices described in this policy.
The App is an entertainment simulation. It adds an X-ray style effect to images from your camera or gallery. It does not see through the body or clothes, does not measure anything and does not provide any medical information or diagnosis.
- We do not require an account and we do not ask for your name, e-mail address or any other personal details.
- Camera images and photos never leave your phone. They are processed on your device only to draw the X-ray effect, and are never uploaded to us or to anyone else.
- An image is saved to your gallery only when you tap Save, and shared only when you tap Share and choose an app.
- Your settings are stored only on your device. We operate no servers that receive your data.
- The App displays ads served by Google AdMob. Google may collect certain device data to deliver and measure those ads, as described below.
- The App uses Google Analytics for Firebase to understand, in aggregate, how the App is used.
- Where required by law, you are asked for consent before any ad is requested, and you can change your choice at any time from the App's Privacy page.
Contents
- Who we are
- Information we collect
- Camera, photos and on-device processing
- Advertising (Google AdMob)
- Analytics (Google Analytics for Firebase)
- Data collected by third-party SDKs
- Device permissions
- Legal bases (EEA / UK)
- Consent and your choices
- Data retention and deletion
- Security
- International transfers
- Children's privacy
- Your privacy rights
- U.S. state privacy rights
- Third-party links
- Changes to this policy
- Contact us
1. Who we are
The App is developed and published by Marbellaspa app, an independent developer based in Montreal, Quebec, Canada. For the purposes of applicable data protection laws, Marbellaspa app is responsible for the App. Google acts as an independent controller for the data it processes through its advertising services and as a data processor on our behalf for Google Analytics for Firebase.
- Developer: Marbellaspa app
- Address: 5845 Chem. de la Côte-des-Neiges, Suite 360, Montreal, Quebec H2S 1Z4, Canada
- Phone: +1 514-969-7767
- E-mail: solaristangier@gmail.com
- Website: https://marbellaspa.netlify.app/xraybodyscan/
2. Information we collect
2.1 Information you provide
None. The App has no registration, login, chat, contact forms or in-app purchases, and does not ask you to enter any personal information. The age, gender, skin tone, face shape and similar choices you make in the App only change the look of the simulation; they are stored on your device (see 2.2) and are never sent to us. If you contact us by e-mail, we receive your e-mail address and the content of your message, which we use only to reply to you.
2.2 Information stored on your device
The App saves your preferences locally on your device: language, age choice, selected X-ray style, sound setting, and the time until which the optional premium styles stay unlocked after a rewarded ad. This information is never transmitted to us and cannot be used to identify you.
2.3 Information collected automatically
We do not operate our own servers or analytics systems. The App integrates Google SDKs that collect certain information automatically: the advertising SDK (Google Mobile Ads, including Google's User Messaging Platform for consent) and Google Analytics for Firebase. They are described in sections 4, 5 and 6.
3. Camera, photos and on-device processing
- Camera. The camera is used only while a scanner page (X-ray scanner or aging simulator) is open, and only after you allow camera access. The live image is analysed directly on your phone by on-device models that find the position of a hand, face or body, so the X-ray drawing can follow it. No camera image, video or detection result is recorded, stored on a server or sent to us or to any third party.
- Photos from your gallery. When you choose a photo with the system photo picker, the App receives only that photo. It is read and processed on your phone only, and is never uploaded.
- Saving. An image or GIF you create is saved to your phone's gallery (folder "Pictures") only when you tap Save.
- Sharing. When you tap Share, the image is passed to the app you choose (for example WhatsApp or Instagram). From then on, it is handled under that app's own privacy policy.
- No biometric identification. The App does not recognize who you are, does not create face templates and does not compare faces.
4. Advertising (Google AdMob)
The App is free and supported by advertising provided by Google AdMob, a service of Google LLC (and, for users in the EEA, the UK and Switzerland, Google Ireland Limited). The App shows the following ad formats:
- Banner ads at the bottom of the screen;
- Native ads, clearly labelled "Ad", placed between the content of some pages;
- Interstitial ads shown occasionally at natural breaks (for example when a result is displayed), never during an active scan, and at most about once per minute;
- App open ads, shown when the App starts or comes back to the foreground after a while;
- Rewarded ads, always optional and shown only when you choose to watch one to unlock the premium X-ray styles for 24 hours.
To serve, personalize (where permitted), measure and protect these ads, Google may use the device's advertising identifier (Android Advertising ID) and similar technologies. For more information, see How Google uses information from sites or apps that use its services and How Google uses cookies in advertising.
5. Analytics (Google Analytics for Firebase)
The App uses Google Analytics for Firebase, a service of Google LLC, to help us improve it. It records events such as the screens opened, the scan mode and X-ray style chosen, a capture or GIF being made, an image being saved or shared, a premium unlock, the app language, and whether an ad was shown or could not be shown, together with standard information such as app version, device model, operating system, country (derived from the IP address) and an app instance identifier. We use this information only in aggregate. We do not send your name, e-mail address, photos, camera images or any other information that directly identifies you. Where the law requires it, analytics and advertising data are handled according to the choices you make in the consent message. Analytics data is retained by Google for up to 14 months. See Privacy and Security in Firebase.
6. Data collected by third-party SDKs
The table below reflects the data that the Google SDKs may collect and share, consistent with the App's Data safety section on Google Play and Google's published disclosures.
| Data type | Examples | Purpose |
|---|---|---|
| Device or other identifiers | Android Advertising ID, App Set ID, app instance ID | Advertising, analytics, fraud prevention |
| Approximate location | Derived from the IP address | Advertising, analytics, fraud prevention |
| App interactions | Screens opened, features used, ad views and clicks | Advertising, analytics, fraud prevention |
| Diagnostics | Crash logs, performance and SDK diagnostic data | Analytics, fraud prevention |
Not collected: photos, videos, camera images, contacts, precise location, name, e-mail address or any account information. None of the data above is linked to your identity by us: the App has no accounts and we do not know who you are.
This data is encrypted in transit. We do not have access to data collected by Google, and we do not sell personal information. Google's processing is governed by the Google Privacy Policy. Google's disclosures for its SDKs are available at:
- Google Mobile Ads: developers.google.com/admob/android/privacy/play-data-disclosure
- Firebase: firebase.google.com/docs/android/play-data-disclosure
7. Device permissions
The App requests only the following permissions:
- Camera: asked the first time you open a scanner page, to show the live X-ray effect. You can refuse; the photo features still work. You can change it at any time in your phone settings.
- Internet access and network state: required to load advertisements and consent messages and to send analytics events.
- Advertising ID (
com.google.android.gms.permission.AD_ID): used by the Google Mobile Ads SDK for advertising and measurement, and by Google Analytics for Firebase where permitted. - Vibration: short haptic feedback on countdowns and captures; it can be turned off with the Sound button in the App.
- Storage (Android 8 and 9 only): needed on these older versions to save an image to your gallery when you tap Save. Android 10 and later need no storage permission.
Photos are chosen through the Android system photo picker, which gives the App access only to the photo you pick. The App does not access your contacts, microphone, precise location or other files.
8. Legal bases for processing (EEA / UK)
If you are located in the European Economic Area, the United Kingdom or Switzerland:
- Personalized advertising and the use of device identifiers for advertising purposes are based on your consent, collected through Google's certified consent management platform;
- Non-personalized advertising, fraud prevention and security are based on our legitimate interests in funding a free App and protecting it from abuse;
- Analytics, used to understand in aggregate how the App is used and to improve it, is based on our legitimate interest in improving the App or, where the law requires it, on your consent;
- Camera and photo processing happens only on your device to provide the feature you request;
- Replying to your e-mails is based on our legitimate interest in answering your requests.
9. Consent and your choices
- Consent message. Where required by law (in particular in the EEA, the UK, Switzerland and certain U.S. states), a consent message provided by Google's User Messaging Platform is displayed when you first open the App, and no ad is requested before you have made a choice.
- Changing your choice. Where a consent message applies to you, you can review or withdraw your consent at any time from the Privacy page of the App (link at the bottom of the home screen), with the "Manage ad consent" button.
- Camera. You can allow or remove camera access at any time in your phone settings (Settings > Apps > Xray Body Scan Camera > Permissions).
- Advertising ID. You can reset or delete your advertising ID at any time in your device settings (Settings > Privacy > Ads on most Android devices). Once deleted, apps can no longer use it for personalized advertising.
- Google ad settings. You can manage ad personalization at adssettings.google.com.
- Analytics. Google Analytics for Firebase identifies your installation only by a random app instance ID. Clearing the App's data or uninstalling the App resets this ID, and future analytics are then no longer linked to past ones.
10. Data retention and deletion
We do not store personal data on any server. Settings stored on your device remain there until you delete them. Images you saved stay in your gallery until you delete them there. Because the App has no user accounts, there is no account to delete. You can delete all App data at any time by clearing the App's storage (Settings > Apps > Xray Body Scan Camera > Storage > Clear data) or by uninstalling the App.
Advertising data collected by Google is retained in accordance with Google's data retention policy. Analytics data collected through Google Analytics for Firebase is retained for up to 14 months and then deleted automatically. E-mails you send us are kept only as long as needed to handle your request and are deleted afterwards on request.
To delete your data, see Delete your data.
11. Security
We take reasonable measures appropriate to the nature of the App to protect information. Camera images and photos are processed on your device. Data exchanged between the App and Google's servers is encrypted in transit using industry-standard protocols. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
12. International data transfers
Google may process information in countries other than your own, including the United States. Google relies on appropriate safeguards for such transfers, such as the Standard Contractual Clauses approved by the European Commission and the EU-U.S. Data Privacy Framework, where applicable.
13. Children's privacy
The App is intended for adults (18 years and older) and is not directed at children. We do not knowingly collect personal information from children. If you believe that a child has provided personal information through the App, please contact us and we will take appropriate steps, including asking Google to delete the relevant information where possible.
14. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete or port your personal data, to restrict or object to its processing, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with your local data protection authority.
We do not hold data that identifies you by name (other than e-mails you send us). Analytics data is pseudonymous and linked only to a random app instance ID; if you ask us to delete it, we will ask Google to delete the data linked to your installation where it can be identified. Requests relating to advertising data are best exercised directly with Google through the options in section 9 or via Google's privacy tools. For any request, you may also contact us at solaristangier@gmail.com; we will respond within 30 days.
Canada (PIPEDA and Quebec Law 25)
If you are located in Canada, you have the right to access and correct your personal information and to withdraw your consent, subject to legal and contractual restrictions. Under Quebec's Act respecting the protection of personal information in the private sector, the person in charge of the protection of personal information for the App is the developer of Marbellaspa app, who can be reached at solaristangier@gmail.com or at the postal address in section 18. You may also file a complaint with the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
15. U.S. state privacy rights
Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia and Utah) may have additional rights, including the right to know, delete and correct personal information and to opt out of the "sale" or "sharing" of personal information for targeted advertising. We do not sell personal information for money. The use of advertising identifiers by Google for targeted advertising may be considered "sharing" under some laws; where applicable, you can opt out through the consent message shown by the App, through the "Manage ad consent" button on the App's Privacy page, or by deleting your advertising ID. We will not discriminate against you for exercising any of these rights.
16. Third-party links
Advertisements shown in the App may link to third-party websites or apps, and shared images are handled by the app you choose. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies.
17. Changes to this policy
We may update this Privacy Policy from time to time, for example to reflect changes to the App or to legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Significant changes will be highlighted in the App's store listing or in the App where appropriate.
18. Contact us
If you have any questions about this Privacy Policy or our privacy practices, please contact:
Marbellaspa app
5845 Chem. de la Côte-des-Neiges, Suite 360
Montreal, Quebec H2S 1Z4
Canada
Phone: +1 514-969-7767
E-mail: solaristangier@gmail.com
Website: https://marbellaspa.netlify.app/xraybodyscan/