LEGAL
Privacy policy
Last updated 16 September 2026
SpaScanner is operated by [Legal name] (company number [UK company number if any]). This policy explains what we collect when you use SpaScanner, why we use it, and how to ask us about it. It is written for a UK launch and is not a solicitor-reviewed policy.
Who is responsible
The controller for your personal data is [Legal name]. Write to us at admin@spascanner.uk.
What we collect
Account: your name, email address, and password, or the details Google shares if you sign in with Google.
Your spa: make, model, water volume, fill date, and optional town or village if you turn on weather tips.
Water tests: photos of test strips and colour charts, the readings we read from them, appearance notes, and any corrections you save.
Journal: spa use, people, duration, temperature, chemicals and care you log, and household invite codes if you share the spa.
Billing: if you subscribe to SpaScanner Plus, Stripe holds payment details. We store your Stripe customer and subscription status, not your full card number.
Technical: cookies needed to keep you signed in and to run the app, as described in our cookie note.
Why we use it
To create and run your account, show guidance for your spa, and keep a household journal.
To read test strip photos with an automated vision service so we can suggest the next care step.
To look up a UK forecast for your town if you opt in to weather tips.
To take payment for SpaScanner Plus and unlock journal, household sharing, reminders, and season scans.
We rely on performing our contract with you, our legitimate interests in running a safe product, and your choices (for example weather tips, or Google sign-in).
Who we share it with
Supabase hosts accounts and app data.
OpenAI receives test strip photos so we can read the pads and printed numbers. Do not photograph people or anything other than the test strip and chart.
Google provides sign-in (if you choose it) and weather for a town you give us.
Stripe processes SpaScanner Plus subscriptions.
If you invite someone to the household, they can see the shared spa, tests, and journal for that tub.
We do not sell your personal data.
How long we keep it
We keep account, spa, test, and journal data while your account is open, and for a short period afterwards if we need to close billing or resolve a request.
You can ask us to delete your account and the data we hold about you, subject to records we must keep for tax or a legal claim.
Your rights
Under UK GDPR you can ask for a copy of your data, corrections, deletion, or a restriction on how we use it. Contact admin@spascanner.uk. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Cookies
We use essential cookies to sign you in and run the app. See the cookie note for the list. We do not use advertising cookies.
Children
SpaScanner is for adults looking after a UK Lay-Z-Spa inflatable hot tub. It is not aimed at children.