The short version: ID Scanner reads IDs on your phone and does not keep what it reads. No name, date of birth, ID number, address or photo is saved or sent anywhere. The app keeps nightly counts on your phone. If you turn on the optional team feature, door phones share a list through our server, and that list never contains names or ID numbers. We show no ads, do no tracking and never sell data.
1. Reading an ID
The camera reads the barcode on the back of the card. The barcode is decoded and checked on the phone. The name and date of birth appear only while the result is on screen and are then discarded. The camera never takes or saves photos. Scanning never waits for, or sends anything to, the internet.
2. What stays on your phone
- Nightly counts: results (PASS, CHECK, DENY), deny reasons, age ranges, sex as printed on the card, issuing state or province, and the hour. These are totals, not records of people. They stay until you reset the venue.
- Your list: guests you mark VIP or banned, with the label and note you write. A guest is stored only as a key made from the ID number and issuing state with a secret unique to your venue; the key cannot be turned back into a number or a person. The list stays until you remove an entry or reset the venue.
- Visit records (only if you choose “Remember visits”): the time, result and visit count of each entry, under the same key. They are deleted after the period you choose (7, 30 or 90 days). Guests who are not on your list are forgotten after the period you choose without a visit (90 days by default). With “Count only” (the default in some states) no visit records are kept.
- Settings and your free-scan counter, kept in the phone's secure storage.
Your venue's secret is kept in the owner phone's iCloud Keychain, so a new phone of the same Apple Account can recognise your list. It is never sent to us.
3. The team feature (optional)
If you set up a team, the owner signs in with Apple. We receive only the account identifier Apple gives us; we do not ask for your name or email. Our server then stores:
- Your venue: age limit, visit-history setting, retention period, state or province, capacity, time zone, and its name encrypted on your phone.
- Door phones: a key with which Apple App Attest shows that the request comes from this app on an Apple device, when it joined and was last seen, its door role, and its door name encrypted on your phone.
- Scans: for each scan, the time, the door phone, the result and deny reason, the age range, sex as printed on the card, the issuing state or province, and whether the guest was marked VIP. Where visit history is on, the scan also carries the guest's key; in “Count only” the key is kept for 30 minutes only, to warn other doors.
- The shared list: each guest's key, VIP or banned status and ban end date, visit count, first and last visit, which door phone set the status, and the label and note encrypted on your phone. We cannot read labels or notes.
- Counter taps: “someone left” and “someone came in without a scan”, with the time and door.
- Your team subscription: the plan, its status and when it renews or ends, as reported by Apple.
No name, date of birth, ID number, address or photo ever reaches our server.
4. How long the server keeps things
- Scans: for the retention period of your venue (7, 30 or 90 days).
- Other doors' warnings: 30 minutes.
- Guests who are not on your list: 90 days after their last visit.
- If the team subscription ends: your venue's data is deleted 60 days later.
- Deleting the venue or your account (Settings › Team) deletes its data from our server. Deleted venues are removed completely within 30 days.
5. Anonymous usage counts
To see which features are used, the app sends a few anonymous events to Aptabase (servers in the EU): for example that the app was opened, which set-up option was chosen, the 1st, 10th or 100th scan, and whether a purchase went through. Events carry no device identifier, no advertising identifier and nothing read from an ID; the result of a scan is never sent. You can turn this off in Settings › Share anonymous usage.
6. Rule updates
Once a day at most, the app downloads the latest age and expiry rules from mikailyurt.com. The request carries no identifier.
7. Purchases
Purchases are handled by Apple. We never see your card or Apple Account details. For the team plan, Apple's signed record of the purchase is checked by our server.
8. Where data is processed
Our server runs in Germany (Hetzner), with Cloudflare in front for security. Anonymous usage counts go to Aptabase in the EU. Apple processes sign-in, App Attest and purchases under its own terms. There is no advertising, tracking or data broker involved.
9. Diagnostics you choose to share
Settings › Share diagnostics creates a file of scan timings and result codes, with no names, birth dates or ID numbers. It leaves your phone only if you send it.
10. Your choices and rights
- Remove any list entry, switch off visit history, or reset the venue on the phone at any time.
- Delete the team venue or your account in Settings › Team; this also removes the data on our server.
- Turn off anonymous usage counts in Settings.
- For any request about your data, email support@mikailyurt.com.
ID Scanner is meant for businesses that check IDs and is rated 18+.
11. Changes
If this policy changes, the new version is posted here with a new effective date.