CedarScan App Privacy Policy
Last updated: 28 September 2026
This Privacy Policy covers the CedarScan iPhone app. It is the same text shown inside the app under Account, Legal & Privacy. See also the app Terms and Conditions and the End User Licence Agreement. For the Cedar247 website and the services ordered through it, see our Privacy Notice. Version française.
1. Who we are
CedarScan is a mobile application published by Cedar247. When you scan a property and order drawings through the app, Cedar247 is the controller of the personal data described below. Write to us at [email protected] about anything in this policy.
2. The short version
We collect what we need to turn your scan into a floor plan, to run your account, and to stop the free-order allowance from being abused. We do not sell your data, we do not show advertising, and we do not track you across other apps or websites.
3. Information you give us
Account details: your name, email address and a password (stored only as a cryptographic hash). Property details: the address or label you type for each home, so the drafting team knows which building a drawing belongs to. Order details: the packages and add-ons you choose, drawing preferences, notes you write, coupon codes, and any files you attach, such as a logo or a marked-up PDF. Payment details: when you pay by card, you type your card details into a payment form provided by Stripe, and they go to Stripe, not to us — see “Who sees your data”. If that form offers to read your card with the camera, the image is read on your phone and is not uploaded. Where the app offers them, you can also pay with Apple Pay, or with Link, Stripe’s own service for saving payment details, and manage the cards saved in the app under Account, Payment methods; these details, too, go to Apple or to Stripe, not to us — see “Who sees your data”.
4. Information the app captures
Scan data: the 3D geometry produced by the LiDAR sensor, a colour video recorded while you walk through the space, and the model files derived from them. These capture the inside of the property, so please treat them as you would photographs of the same rooms. Anything visible while you scan will be in the file, including people, documents and screens. Ask everyone present before you start, and put private items away first. Each scan also carries a short technical report of the scanning session, such as the device model, the iOS and app versions, how long the scan took, tracking and temperature states, capture figures and any error codes, which we use to find and fix problems with scan quality.
5. Location
The app can fill in a property address from your device location, but only in the moment you tap the button that asks for it. There is no background or continuous location tracking. The coordinates are turned into a street address, the address is what gets stored, and you can always type the address by hand instead — the app works fully without location permission.
6. Device identifier
The app reads the identifier iOS gives to apps from the same developer on your device, and sends it to us when you create your account, when you view prices and when you place an order. We use it for one purpose: to apply the limited free-order allowance per device as well as per account. Where the app shows Stripe’s payment screens itself (its card form and, where the app offers it, Payment methods), those screens also send this identifier to Stripe (see “Who sees your data”). It is not the advertising identifier and it is not shared with third parties for marketing. iOS resets it once you remove every Cedar247 app from the device. We keep a record of the identifier and how many free orders it has used even after an account is deleted, otherwise the allowance could be reset simply by making a new account; write to us if you want that record removed.
7. Notifications
If you allow notifications, iOS gives the app a push token for your device, and the app sends it to us so we can tell you about your orders: when drawings are ready, when a payment is due or an unpaid order was cancelled, and when our team has written to you. We keep the token with your account until you sign out, delete your account or the token stops working. Each notification names the property label or the order number and is delivered through Apple’s push notification service. You can turn notifications off at any time in your device settings.
8. Technical records
Our servers keep ordinary operational records — timestamps, request paths, error messages, network address and approximate file sizes — to keep the service running, investigate faults and detect abuse.
9. What we never collect
We do not access your contacts, calendar, photo library (beyond a file you deliberately attach), health data, or advertising identifiers, and the app does not record audio. The scan video has no sound track.
10. Why we use your data
To perform our contract with you: producing and delivering the drawings you order, taking payment, and supporting you afterwards. For our legitimate interests: keeping the service secure and running, testing changes to it, preventing abuse of promotions, improving the accuracy of the capture guidance, and understanding how the service is used, for example who registers, who orders, and who stops before ordering. To meet legal obligations: tax, accounting and record-keeping. Where the law requires consent — for example device location — we ask for it and you may refuse or withdraw it in your device settings.
11. Who sees your data
The Cedar247 production team and the drafting specialists working on your order see the scan files, the property label and your order notes, under confidentiality obligations. We also use service providers who process data on our behalf: cloud hosting and object storage, an email delivery provider, and Stripe, our payment provider. All of them are bound by terms that require them to protect your data to at least the standard set out in this policy. Our hosting, storage and email providers act on our instructions only and use your data only for the service they provide to us. Stripe does not act only on our instructions: as a payment company it also uses payment data for its own purposes, such as fraud prevention and security, meeting its own legal obligations and improving its services. Its payment screens report to Stripe how they are used, together with your network (IP) address and basic details of your device such as its model, system version, screen size, language and time zone and identifiers Stripe generates, and, in the app, the app version and the identifier iOS gives to apps from the same developer (see “Device identifier”); Stripe uses this for its own analytics and fraud prevention. Stripe handles all of this under its own privacy policy. When you pay by card, whether in the app or on our payment page, or save a card in the app, you give your card details to Stripe directly: they never pass through our servers and we never see your full card number. Where the app offers Apple Pay, a card you pay with through Apple Pay stays in your Apple Wallet: Apple Pay gives Stripe’s form in the app a payment token for it, which the form sends to Stripe together with details such as the card’s brand and last four digits and the name and billing address Apple Pay asks you to confirm, and Apple handles Apple Pay under its own privacy policy. When the app prepares Stripe’s card form for an order, we pass Stripe your name, email address, identifiers for your account and your order, the order number and the amount due, whether or not you then pay there; where the app offers that form, the app prepares it by itself right after you tap “Place order” for an order that is not free, and again each time you tap a button to pay for it. The app may also give the form your name and email address. The form can use them, or the email address in the customer record described below, to fill in fields that ask for them, to check with Stripe whether you already have a Link account and, if you choose to save your details with Link — for example by entering your phone number in its part of the form, or by leaving its option selected — to create one. Where the app offers Payment methods under Account, opening it also passes Stripe your name, email address and an identifier for your account if Stripe does not hold a customer record for you yet. Once the app has prepared that form or opened Payment methods, Stripe keeps your name and email address in a customer record under our Stripe account, together with any card you choose to save in the app, while paying or under Payment methods; we ask Stripe to delete that record when you delete your account. We receive back the result and the amount of any payment. Where the form offers Link, Stripe’s own service for saving payment details, you may choose to use it: Link asks for details such as your email address and phone number, may confirm who you are with a code it sends you, and can save the card you enter to your Link account or let you pay with a payment method already saved there. Your Link account is yours, not part of our Stripe account, and Stripe holds it under Link’s own terms and privacy policy. In our Stripe account we can also see the record Stripe keeps of each card or other payment method used or saved — including a card’s brand, last four digits, expiry date, type and country, the postal code if the form asks for one, the name and billing address if Apple Pay passes them on, and the email address of a Link account — and Stripe’s own fraud assessment of the payment; for payments made in the app, we do not store that record or that assessment in our own systems. Our payment page is part of our website, cedar247.com, and runs on its shop software: it may pass Stripe more about you than the app does — for example the details of a cedar247.com account you are signed in to, such as its billing address — and the website may keep records of those payments, such as the brand, last four digits and expiry date of a card you save to that account. If you choose another payment method offered on our payment page, the provider of that method handles your details under its own privacy policy. If you allow notifications, they reach your device through Apple’s push notification service: Apple receives the push token and the content of each notification, which names the property label or the order number (see “Notifications”), and handles them under its own privacy policy. We may disclose data if the law requires it, or to establish or defend legal claims. We do not sell personal data and we do not share it with data brokers.
12. Address look-up uses Apple
The address screen is powered by Apple’s mapping services. When you tap the location button, your coordinates are sent to Apple to be turned into a street address; that button is entirely optional. Address suggestions work differently: from the third character onwards, what you type in the address field is sent to Apple to fetch the suggestion list, and that happens as you type whether or not you tap a suggestion. The same is true of the map at the top of that screen: it loads map imagery from Apple, and once you have typed at least five characters the address is sent to Apple to find the point it marks. There is no switch for any of this in this version. Apple handles that data under its own privacy policy and we receive nothing from it beyond the address text you end up with — the coordinates behind the map pin stay on your device and never reach us.
13. Where your data is held
Our hosting and storage providers operate in the United States and the European Union, so your data may be transferred outside your own country. Where transfers are covered by European or United Kingdom rules, we rely on standard contractual clauses with those providers.
14. How long we keep it
On your phone, scans stay until you delete them — nothing is removed on a timer. Deleting a property in the app deletes that property’s scans from the phone, and that cannot be undone; any copy already uploaded to us — for an order, or when you opened the order form from that scan without ordering — is not affected. Each scan is large, so delete the properties you have finished with to reclaim space. On our side we currently keep scan files, order attachments and order records for as long as they are needed for the order and its records; a delivered drawing can come back for revision, and order records are required for tax and accounting. A scan uploaded when you opened the order form without ordering, or whose order was cancelled before it was paid, stays until you delete your account or ask us to remove it. We do not run an automatic purge of these files today. Finished drawings stay available for you to download for at least 365 days from delivery; after that we may remove them, so keep your own copy. Some of this outlives the account itself — see “Deleting your account” below. If you want your scan files removed sooner, delete your account; for the files of an order still in progress, and for order attachments, email us and we will remove them once the order is closed.
15. Deleting your account
Account, Delete account removes your account and, from our storage, your scan files and the virtual tour photos you uploaded in the app, except those described below. We also ask Stripe to delete any customer record the app created for you at Stripe, together with any card you saved in the app; Stripe keeps its own records of the payments themselves, which we can still see in our Stripe account. Deleting the account does not affect a card saved on our payment page to a cedar247.com account, which can be removed from that account or by writing to us, nor a Link account you have with Stripe, wherever you created it or saved to it: it stays with Stripe and you manage it yourself. Some data survives the deletion, mainly the following. Our business records of the orders you placed stay, together with the order our website creates for each paid order, in which its payment is recorded; they hold what you gave us for each order, such as your name and email, the property address or label, the packages, options and coupon, your notes, revision requests and messages, the names and measurements of your scans and the payment references, because tax law requires the record and a delivered drawing can still come back for revision. An order placed in the app that is still awaiting payment is cancelled first, so its scan files and tour photos are removed like the rest, unless it cannot be cancelled at that moment, for example because a payment for it is under way. The scan files and virtual tour photos of any other order still open when you delete the account, paid or not, stay so that the job can be finished, and they are not removed automatically when it closes. Other files you attached yourself, such as a logo or a marked-up PDF, stay whether or not you sent them with an order. The drawings we delivered, and any virtual tour page we published, stay at their links; a tour page loses the photos you uploaded in the app, and any floor plan image that came with your scan files, unless its order is still open, but keeps its title (often the property address), the room and floor names, the floor plans our team drew or uploaded, any photos you sent us that our team added to it for you, and anything else our team added. The device record described under “Device identifier” stays too. Copies of our database also keep your account record, including your password hash, and your scan records: the daily backups, deleted about 60 days later, and the copies we make by hand from time to time to keep data safe or to test changes to the service, kept for as long as we need them. We also take smaller extracts by hand — account and order details, and your scan records with the label you typed, the type, the status and the dates — to understand how the service is used, and keep those for as long as we need them. Our ordinary technical records (see “Technical records”) stay for as long as we keep them to run the service. Email [email protected] if you want any of the files, pages or order details above removed — for example the files of an order once it is closed, an attachment you never sent, or a tour page — and we will do it wherever the law lets us; database copies, those extracts and technical records are not edited one by one, and Stripe’s own records are governed by Stripe’s privacy policy. Deletion of the account itself cannot be undone.
16. Your rights
Depending on where you live, you may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or object to certain processing, or ask for it in a portable format. Email [email protected] and we will answer within the period the law allows. If you are in the European Economic Area or the United Kingdom you may also complain to your data protection authority; if you are in California you may exercise the rights given by state law without being treated differently for doing so.
17. Security
Traffic between the app and our servers is encrypted in transit. Uploads use short-lived, single-purpose links, and each link is bound to the account that requested it. Passwords are stored only as hashes. One thing to be aware of: once a file is uploaded it lives at a long, unguessable web address that works without a password, so that our drafting team and your download links keep working — treat a link to your scan or drawing as you would the file itself, and tell us if one has been shared by mistake so we can move or remove the file. No system is perfect, so please use a strong, unique password and tell us at once if you think someone else has reached your account.
18. Children
CedarScan is a professional tool and is not directed at children. We do not knowingly collect data from anyone under sixteen. If you believe a child has given us data, write to us and we will remove it.
19. Changes
If we change this policy we will update the date at the top and, for anything significant, tell you in the app or by email. Continuing to use CedarScan after a change means you accept the updated policy.
20. Language
This document exists in English and in French. If you are a consumer in Québec, the French version is made available to you and applies; the English version binds you only if you expressly choose it after receiving the French version. Everywhere else, if the two versions ever differ, the English version prevails to the extent your local law allows. You may write to us in English or in French.
21. Contact
Cedar247 LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110 — [email protected]