Privacy
Effective 29 August 2026
The short version
Bodyguard has no network code. It has no account, no server and no sync. Nothing you scan is sent to us or to anyone else, because the app has no way to send it. Everything the app records stays in its own storage on your phone until it expires or you delete it.
This website is a separate matter and is not as quiet as the app: if you give us your email address we keep it, and the site runs analytics. That is described near the end.
Who we are
Bodyguard: ID Scanner Pro is published by EasifyStudios. Contact: [email protected]
What the app does
Bodyguard reads the barcode on the back of a driver's licence, or the machine-readable zone on a passport or identity card, and shows whether the holder meets a minimum age. It can also flag an identity document so the same document is recognised on a later scan.
All reading and decoding happens on the device, using the camera and the operating system's own text and barcode recognition.
The camera
The app uses the camera only while a scan screen is open. Frames are processed in memory to find a barcode or a machine-readable zone. No photograph or video is ever captured, saved, or transmitted. The app requests no access to your photo library.
What is stored on your device
Scan records. By default each scan records only the time, the outcome (admitted, refused, or checked by eye), the reason for that outcome, and how long the read took. No name, date of birth, document number or address is recorded.
Identity details, only if you switch them on. The Settings screen has a "Store ID details" option. While it is on, the name, date of birth, document number, address, jurisdiction, nationality and sex encoded in the document are saved alongside the scan. Turning the option off deletes those details from every past scan. This option exists because some licensing regimes require a venue to keep records; it is yours to enable or leave off.
Flagged documents. When you flag a document, the app does not store the document number. It stores an irreversible code derived from that number using HMAC-SHA256 and a random key generated on your device and held in the iOS Keychain. The code can confirm that a document scanned today matches one flagged earlier; it cannot be turned back into a document number, and it is meaningless on any other phone. Your note and the dates are stored as you wrote them.
Settings and counts. Your venue name, minimum age, retention period and similar preferences, plus a count of scans performed and reads that failed.
Reads that fail are not recorded. If the app cannot decode a document, it tells you to try again and counts the failure for its own reliability statistics. Nothing is written to the log, because nothing was read and nobody was identified.
How long it is kept
Scan records are deleted automatically once they reach the retention period set in Settings — 30, 90, 180 or 365 days, with 90 days as the default. Deletion runs when the app opens.
Flags last until they expire or you lift them.
You can delete everything at any time from Settings → Export & wipe, which erases every scan and every flag and generates a new key, making any earlier flag codes permanently unmatchable. Deleting the app also removes all of it.
What we receive from the app
Nothing. We operate no servers connected to this app and we receive no scan data, no document details, no identifiers, no usage analytics and no crash reports.
If you email our support address, we receive that email and whatever you choose to put in it. We use it to answer you and for nothing else.
When data leaves the phone at your request
Two features hand data to other apps, and only when you ask:
Export. Exporting the log produces a CSV file and passes it to the iOS share sheet, so you choose where it goes — Mail, Files, another app. From that moment the file is governed by wherever you sent it, not by this policy.
Links. Tapping a link in Settings opens Safari, the App Store or your mail app. Those are governed by Apple's terms, and by the website section below.
Device backups
The app's database is stored in its Documents folder, which iOS includes in device backups. If you back your phone up to iCloud or to a computer, that backup will contain the app's scan records and flags. Those backups are managed and encrypted by Apple, not by us, and we have no access to them. If your venue requires that records never leave the device at all, turn off backups for this app in iOS Settings.
Who is responsible for the people you scan
If you use Bodyguard at a licensed premises, your venue is the controller of any personal data it chooses to record about customers, and is responsible for having a lawful basis, telling customers what is recorded, and answering their requests. We are not a processor of that data, because it is never transmitted to us and we cannot access it.
The app is built to help you hold as little as possible: with "Store ID details" off, a scan record contains no personal identifiers at all.
If you are a customer whose ID was scanned at a venue, we hold nothing about you and cannot look you up. Please contact the venue directly.
This website
Everything above describes the app. The website works differently, and this section covers it.
What you type into the form. Your email address, and optionally your venue name and city. The venue and city fields are optional and exist so we know which markets and document types to prioritise. Submissions are processed and stored by Formspree, a form backend based in the United States, acting as our processor. We use the address to tell you about the app and occasionally to share writing about door operations, and to answer you if you reply. Our lawful basis under GDPR is your consent, which you give by submitting the form and can withdraw at any time. We keep it until you ask us to delete it; any bulk email carries a one-click unsubscribe link.
Analytics. We use Google Analytics 4 to understand which pages people read and where they arrived from. It sets cookies in your browser and sends data, including your IP address and details about your device and browser, to Google, who may process it outside your country. We use it to decide what to write next — not to identify you, and not to advertise to you. We do not run a Meta Pixel or any advertising tracker on this site, and we do not sell or share anything collected here with data brokers.
Nothing else. The site is static and has no database behind it. No account, no fingerprinting, no session recording, and no advertising or cross-site tracking beyond what Google Analytics does as described above.
Your rights
Depending on where you live, you may have rights to access, correct, delete or export personal data held about you, including under the GDPR, the UK GDPR and the California Consumer Privacy Act.
Because we hold no personal data from the app, there is nothing for us to disclose or delete in relation to it. For data held by a venue that scanned your ID, contact that venue. For an email address you gave us on this website, or anything you have emailed us, write to the address below and we will action it — we do not require you to prove anything elaborate.
Children
Bodyguard is a tool for staff at licensed premises, and this site is for venue operators. Neither is directed at children, and we do not knowingly hold data about anyone under 18.
Purchases
The app is currently free and contains no purchases, no advertising and no third-party tracking software.
Changes to this policy
If a future version of the app adds anything that transmits data — analytics, sync, or a purchase service, for example — this policy will be updated before that version is released, and the effective date above will change. Where a change affects data we already hold, we will email the list.