Privacy Policy
Last updated 7 August 2026
Who we are
myscran is operated by Ascension Labs Ltd, a company registered in England and Wales (company no. 17261748), registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. We are the data controller for the personal data described here.
This policy covers both people who order food through myscran (“customers”) and staff at the restaurants and takeaways that sell through us (“partners”). Where something applies to only one group, we say so.
Questions, or to exercise any right below: support@myscran.io.
What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, email, mobile number | To create your account, sign you in, and let the restaurant and driver reach you about your order. | Contract |
| Delivery addresses, including approximate coordinates | To deliver your order, work out delivery distance and fees, and show you restaurants that deliver to you. | Contract |
| Order history and payment records | To process and fulfil orders, handle refunds, and meet our tax and accounting obligations. | Contract / Legal obligation |
| Refund requests, including any photos you upload | To assess and resolve a problem you report with an order. | Contract |
| Device push token | To send order updates. Only collected if you allow notifications. | Consent |
| App usage, crash reports and session recordings | To find and fix faults and improve the apps. Text you type is masked — see below. | Legitimate interests |
| Marketing preferences | To send offers only if you have asked for them. You can withdraw at any time. | Consent |
| Partner staff: name, work email, phone, role | To give restaurant staff access to their own orders and settings, and to keep an audit trail of who changed what. | Contract / Legitimate interests |
Session recordings
To diagnose faults we record how the apps are used, including screens viewed and taps. Everything you type is masked — addresses, search terms and payment details are never captured as text. Images in the app, such as food photos, are recorded. Recordings are sampled, so most sessions are not captured at all.
If you would rather not be recorded, email us and we will exclude your account.
Who we share it with
We do not sell personal data. We share it only with the following, and only so far as each needs it:
- The restaurant you order from — your name, order, delivery address and phone number, so they can prepare and deliver it.
- Privy — sign-in and account verification.
- Supabase — database and file hosting, in the UK/EU.
- Vercel — application hosting.
- PostHog — product analytics, error tracking and the session recordings described above.
- Expo — delivery of push notifications.
- Resend — sending order confirmations and other service email.
- Google Maps Platform — calculating driving distance between a restaurant and a delivery address.
Some of these process data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Agreement or equivalent safeguards.
We will also disclose data where the law requires it, or to establish or defend legal claims.
How long we keep it
Order and payment records are kept for six years after the order, because tax law requires it. Refund photos are deleted once the request is resolved. Everything else is deleted or anonymised within 12 months of you closing your account.
You can delete your account from the app at any time. We remove your personal details and keep only what the law obliges us to retain.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete your data, where we have no obligation to keep it;
- restrict or object to how we use it;
- send your data to another provider.
Where we rely on consent — marketing and push notifications — you can withdraw it at any time in the app, without affecting anything done beforehand.
Email support@myscran.io and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office, the UK supervisory authority.
Children
myscran is not intended for under-16s and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Changes
If we change how we use personal data we will update this page and, where the change is significant, tell you in the app or by email.
Ascension Labs Ltd · Company no. 17261748 · 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ