Control INC apps

Privacy Policy

Effective date: 28 October 2026 · Last updated: 28 October 2026

1. Who we are

Our apps are published on Google Play under the developer name Control INC. The company responsible for the apps, and the data controller for the personal data described in this policy, is:

If you are in the EEA or the UK, you may contact us at [email protected].

In this policy, "we", "us" and "our" mean BILLION MILLION INTERNATIONAL LIMITED. "You" means a person who uses one of our apps or visits this website.

2. Scope of this policy

This policy applies to all mobile apps published by Control INC on Google Play (the "apps") and to the website cardscan.controlsolution.org. Individual apps can differ in which features and partners they use. Where an app has its own privacy notice, that notice explains the app's specific data flows and forms part of this policy. For example, see the MonScan privacy notice.

This policy does not cover third-party websites, stores or services that our apps link to, such as Google Play or online marketplaces. Their own privacy policies apply.

3. Data we collect

None of our apps require you to create an account or sign in. We do not ask for your name, email address, phone number, contacts or precise (GPS) location. Depending on the app and the features you use, we and our partners collect the following categories of data.

Device permissions. Apps ask for permissions only for the features that need them, for example the camera (to take a photo of an item you want to scan) and notifications (to send you alerts). You can withdraw a permission at any time in your device settings. Pictures picked from your gallery go through the Android system picker, which gives the app only the image you select.

We do not intentionally collect special categories of personal data (such as health, religion or biometric data). Please do not include such information in photos, chats or community posts.

4. Where the data comes from

• From you: content you submit in an app and messages you send us.
• From your device: identifiers, device information, app activity and diagnostics, collected automatically by the app and by the SDKs listed in section 7.
• From Google Play: confirmation of purchases and subscription status.
• From advertising and attribution partners: information about the ad campaign that led to your install and about ads shown in our apps (for example impressions and revenue).

5. Data that stays on your device

Much of what you do in our apps is stored only in the app's private storage on your phone and is not sent to us. Examples are collections, scan or history lists, favourites, drafts, an optional nickname or avatar you set in the app, and preferences such as language or currency. This data is deleted when you clear the app's storage or uninstall the app.

If Android backup is turned on in your device settings, Android may include app data in your Google account backup. That backup is controlled by you and handled by Google under Google's Privacy Policy. We do not have access to it.

6. Purposes and legal bases

We use data only for the purposes below. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the right-hand column shows the legal basis we rely on under the GDPR or UK GDPR.

Where we rely on legitimate interests, we have balanced those interests against your rights. You can object at any time (see section 16). Where we rely on consent, you can withdraw it at any time without affecting processing that happened before.

We do not use automated decision-making that produces legal or similarly significant effects on you.

7. Third-party SDKs and service providers

Our apps include software development kits (SDKs) from the companies below. Not every app uses every SDK; an app's own privacy notice lists the SDKs in that app. Some of these companies process data on our behalf (as processors). Others, mainly advertising and attribution networks, may also use the data for their own purposes as independent controllers under their own privacy policies.

8. Advertising and the Advertising ID

Most of our apps are free and are funded by ads. Ads are served by Google AdMob, which may pass the ad request to the mediation partners listed above. Ad partners use the Advertising ID, device information and approximate location to choose ads, limit repetition, prevent fraud and measure results. In apps that offer a paid Premium plan, subscribers usually do not see ads; the app's own notice or paywall says so.

Reset or delete your Advertising ID

• Android 12 and later: open Settings → Privacy → Ads (on some devices Settings → Google → Ads) and tap Delete advertising ID. Apps then receive a string of zeros instead of an ID.
• Earlier Android versions: open Settings → Google → Ads and tap Reset advertising ID, and turn on Opt out of Ads Personalization.

After you delete or reset the ID, you will still see ads, but they will be less tailored to you. You can also learn more about Google's ad controls at My Ad Center, and ask Adjust to stop processing your device's data using Adjust's Forget Device page.

9. Consent and how to change your choices

If you are in the EEA, the UK, Switzerland or another region where consent is required, our apps show a consent message from Google's User Messaging Platform (UMP) the first time you open them. The message explains the purposes for which we and our advertising partners would like to use your data and lets you accept, reject or customise. UMP supports the IAB Transparency & Consent Framework. If you do not consent to personalised ads, you may still see non-personalised or limited ads.

To change your choices later:

1. Use the Privacy settings or Consent option in the app's Settings screen, where the app provides one; or
2. Clear the app's storage (Settings → Apps → [app name] → Storage → Clear storage). The consent message will appear again the next time you open the app. Note that this also deletes data stored only on your device; or
3. Email us at [email protected] and we will help you.

You can also turn off notifications and camera access at any time in Settings → Apps → [app name] → Permissions.

10. When we share data

We do not sell your personal data for money. We share data only:

• with the service providers and SDK partners listed in section 7, for the purposes described there;
• with Google Play, to process purchases and subscriptions;
• with other users, when you publish content to a public in-app community (see section 11);
• if required by law, a court order or a valid request from a public authority, or to protect the rights, safety and property of our users, the public or us;
• with a buyer or successor if our business or an app is sold, merged or restructured, in which case this policy will continue to apply to your data.

Sharing device identifiers and app activity with advertising partners for targeted advertising may count as "selling" or "sharing" personal information under some US state laws. See US state privacy rights for how to opt out.

11. User content and AI features

Public community content

Some apps let you publish content, such as custom cards with images and text, to a community feed. Anything you publish is public: other users can view, like, download and share it. Do not include personal information (yours or anyone else's) in community content. You can delete your own published content in the app where this option is provided, or ask us to remove it. Content may be removed if it breaks our Terms of Use or an app's community guidelines.

Photos sent for recognition or analysis

When you ask an app to recognise or analyse a photo, the photo is uploaded over an encrypted connection to our servers so the result can be produced. The photo is processed only to return the result and is deleted right after processing; we do not retain it on our servers or use it to identify you. Search terms you enter are handled the same way. Please photograph only the item you want to scan, and avoid including people, documents or other personal details in the picture.

AI chat and AI-generated results

When you use an AI feature, the text you type (and, for a chat, the earlier messages in that conversation) is sent to our servers and to third-party AI service providers acting on our behalf, which are contractually not permitted to retain your content or use it to train models. Chat messages are processed only to generate the answer and are deleted right after processing; we do not retain them. We do not use your chat messages to identify you or to build an advertising profile. Do not enter personal, confidential or sensitive information into AI features. AI output can be wrong; see our Terms of Use.

12. Children

Our apps are not directed to children under 13 (or the higher minimum age that applies in your country, for example 16 in some EEA countries), and we do not knowingly collect personal data from them. Because our apps use advertising and analytics SDKs, they are not designed for use by children. If you are a parent or guardian and believe that a child has provided personal data through one of our apps, contact us at [email protected] and we will delete it. In line with the US Children's Online Privacy Protection Act (COPPA), if we learn that we have collected personal information from a child under 13, we will delete it promptly.

13. Data retention

We keep personal data only as long as we need it for the purposes in this policy, then delete or anonymise it.

14. International transfers

We are based in Hong Kong, and our service providers and partners operate servers in several countries, including the United States, Singapore and countries in Europe. Your data may therefore be processed outside your country. When we transfer personal data from the EEA, UK or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or on our partners' own approved transfer mechanisms. You can ask us for more information about these safeguards.

15. Security

Data sent between our apps and our servers is encrypted in transit using HTTPS. Access to our back-end systems is limited to people and services that need it. Our apps do not ask for passwords, and payments are handled by Google Play. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects you, we will notify you and the authorities where the law requires.

16. Your rights

Depending on where you live, you may have the rights below. To exercise any of them, email [email protected]. Because we do not have accounts, we may need information from you (see section 17) to find the data that relates to you. We will not discriminate against you for exercising your rights.

EEA, UK and Switzerland (GDPR and UK GDPR)

• access a copy of your personal data;
• correct inaccurate data;
• erase your data;
• restrict or object to processing, including processing based on legitimate interests and processing for direct marketing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

We respond within one month. This can be extended by two further months for complex requests, in which case we will tell you.

US state privacy rights (including California CCPA/CPRA)

If you live in California or another US state with a consumer privacy law, you have the right to:

• know what personal information we collect, use and disclose (the categories are listed in sections 3, 4, 6 and 10);
• access and receive a copy of your personal information;
• delete your personal information;
• correct inaccurate personal information;
• opt out of the "sale" or "sharing" of personal information for cross-context behavioural (targeted) advertising;
• not receive discriminatory treatment for exercising these rights.

Do Not Sell or Share My Personal Information. We do not sell personal information for money. However, sharing identifiers and app activity with advertising partners may count as a "sale" or "sharing" under these laws. To opt out: (1) delete or reset your Advertising ID and turn off ads personalisation as explained in section 8, which stops targeted advertising based on that ID; and (2) email us at [email protected] with the subject "Do Not Sell or Share", and we will apply your request to the data we hold. We do not knowingly sell or share the personal information of consumers under 16. We do not use sensitive personal information to infer characteristics about you.

You may use an authorised agent to make a request on your behalf; we may ask the agent for proof of authority. We respond within 45 days, which can be extended once by a further 45 days where allowed. If we deny your request, you may appeal by replying to our decision email.

Hong Kong

Under the Personal Data (Privacy) Ordinance (Cap. 486), you may request access to and correction of your personal data. We may charge a fee that is not excessive for a data access request, as the Ordinance permits.

Vietnam

If you are in Vietnam, you have the rights given by Vietnam's personal data protection laws and their implementing regulations, including the rights to be informed, to consent and withdraw consent, to access, correct and delete your data, to restrict or object to processing, and to complain. Send requests to the email above.

Other countries

If you live elsewhere, you may have similar rights under your local law (for example Brazil's LGPD). Contact us and we will respond as your law requires.

17. How to request deletion

Because our apps have no accounts, we cannot look you up by name or email. Please follow these steps:

1. Delete data on your device yourself. Clear the app's storage or uninstall the app. This removes collections, history, drafts, settings and anything else stored only on your device.
2. Delete public content you posted. Use the delete option in the app where available, or include the details in your email (step 3).
3. Email us at [email protected] with the subject "Data deletion request" and include: the app name; your device model; approximately when you used the app; your Google Play order ID(s) (they start with "GPA." and appear in your Google Play purchase receipt) if you made a purchase; and, for community content, the name of the item and a screenshot.

What we can delete: data on our servers that we can link to the details you give us, such as purchase-verification records, push-notification registrations, and community content. Photos, AI chat messages and search terms are deleted right after processing, so there is no stored copy of them to delete. What we may keep: records we must retain by law (for example order records needed for tax and accounting), and aggregated or anonymised statistics that no longer identify you. Data held by independent partners such as Google, Meta, TikTok or Adjust is controlled by them; resetting your Advertising ID (section 8) breaks the link between your device and that data, and we will pass on your request where a partner provides a way to do so.

Deleting data does not cancel a subscription. To stop being charged, cancel in Google Play (Play Store → profile icon → Payments & subscriptions → Subscriptions).

We will confirm receipt and complete your request within 30 days, or tell you if we need more time or more information.

18. This website

cardscan.controlsolution.org does not use cookies, analytics or advertising trackers. The site is delivered through Cloudflare, which processes technical data such as your IP address to deliver pages and protect the site from attacks (see Cloudflare's Privacy Policy). Pages load fonts from Google Fonts and icons from the jsDelivr CDN, so those services receive your IP address when you load a page (see Google's Privacy Policy and jsDelivr's Privacy Policy).

19. Changes to this policy

We may update this policy when our apps, partners or legal requirements change. We will post the new version on this page and change the "Last updated" date. If a change is significant, we will also give notice in the affected apps or on their Google Play pages before it takes effect.

20. Contact us

For any privacy question or request, contact:

See also our Terms of Use.