UDI Lens Privacy Policy

Effective date: October 2, 2026

UDI Lens (“the App”), its website and its forwarding service (together, “the Service”) are developed and operated by Pei-An Hu (“we”). This policy explains how the Service handles your data.

1. Summary

• Scan history is stored only on your device by default.
• Only if you subscribe to UDI Lens Connect and set a destination URL are scans sent through our servers to the URL you specify. They are deleted from our servers once delivered.
• No accounts or passwords. We never ask for your name, email or phone. No ads, analytics or tracking.
• Product lookups send only the Device Identifier (DI) to the U.S. FDA AccessGUDID.

2. Camera

The App uses the camera to read UDI barcodes in real time. Images are processed on device only and are never captured, recorded, stored or transmitted.

3. Scan history

Device identifiers, dates, lot and serial numbers and product information are stored on your device. Data leaves the App only when you export a CSV and share it, or when Connect forwards it. Deleting the App removes all on-device data.

4. Product lookup (AccessGUDID)

The App queries the public AccessGUDID API, operated by the U.S. National Library of Medicine for the FDA, with the Device Identifier only. Expiry, lot and serial numbers are never sent. See the NLM website policies.

5. UDI Lens Connect (forwarding)

Connect is an optional subscription. It is active only after you, or your organization’s administrator, set a destination URL.

Data sent to our servers

• Scan content: raw barcode content, device identifier, expiry and production dates, lot, serial, scan time, batch ID, and the GUDID brand, company and model found on your device. No patient data; the Service has no fields for patient data.
• Subscription identity: the Apple-signed subscription transaction (including originalTransactionId) to confirm your subscription. We never receive your Apple Account, name or payment details.
• Device attestation: the public key generated by Apple App Attest, used to confirm requests come from the genuine App. It cannot identify you.
• Settings: destination URL, organization name and member labels set by your administrator (please don’t use real names).

Purpose and recipients

Scan content is used only to deliver it to the URL you specify. That URL is operated by you or your organization, whose policies govern the data after delivery. We don’t use it for any other purpose and never sell, rent or share it.

Retention

• Scan content: deleted on delivery; if undeliverable, kept for at most 24 hours while retrying.
• Delivery logs (time, status code, duration, no content): 7 days.
• Organization activity logs: 90 days.
• Subscription identity and settings: until you delete your server data.

Deletion

Delete all server data related to you anytime in the App under Settings, Connect, Delete server data, or email us.

Hosting and processors

The forwarding service and website run on Cloudflare’s global network (Cloudflare, Inc., USA); data may be processed outside your country. Cloudflare acts as our processor under its privacy policy.

6. Website and portal

The website uses no analytics or advertising cookies. Signing in to the portal sets one essential session cookie that expires after 12 hours. Test data sent to the test receiver is deleted after 24 hours.

7. Subscriptions

UDI Lens Pro and Connect subscriptions are processed by the Apple App Store. We never receive your payment information.

8. What we don’t do

• We don’t sell, rent or share your scans.
• We don’t use analytics, advertising or tracking tools.
• We don’t ask for your name, email or phone number.

9. Children

The Service is not directed to children under 13.

10. Changes

We will update this page and the effective date if this policy changes.

11. Contact

Questions? Email anderson.pa.hu@icloud.com.