Privacy

Last updated 1 October 2026

LyteScan is field inventory software for medical device representatives. It tracks product — lots, expiration dates, what sits in a trunk or on a hospital's consignment shelf, and what gets used in a case. This page says what it stores, where, and who can see it.

Plain summary: we hold inventory records and the account details of the people using the app. We are not trying to hold patient information, the app is built not to collect it, and we do not sell or share anything with advertisers or data brokers. There are no ads, no analytics SDK, and no third-party trackers in the app.

What we store

Your account. Email address, display name, and which sign-in methods you use. Authentication is handled by Google Firebase Authentication. If you sign in with Google or Apple, we receive your email address and name from them; we never receive your password.

Inventory records. Product name, catalogue reference, lot number, GTIN, expiration date, quantity, price, where the stock sits and when it was received.

Activity history. A log of what happened — shipments received, shelf audits, cases, returns — with the facility, unit counts, and amounts, and which account performed the action.

Case paperwork. When a transaction form is completed, we store the hospital account, an optional case or purchase-order reference, the product used, and — where entered — the name of the physician and the name and signature of the hospital employee acknowledging delivery. Signatures are stored as the drawn strokes, with the signer's name and a timestamp.

Photos stay on your device. The app can attach a photo of a carton, a label, a packing list or a damaged unit to what you are capturing. Those images are currently held on the phone and are not uploaded to our servers.

Patient information

LyteScan is designed not to collect it, and this is a design decision rather than a promise.

• There is no field for a patient name, identifier, date of birth or diagnosis, and no general-purpose notes box.
• The case reference field is for a case or purchase-order number. It is labelled that way in the app for a reason.
• The photo prompt tells you to photograph objects — labels, cartons, packing lists, damage — and to avoid whiteboards, schedules, screens and people. Photos are shown back to you before they are attached, so you can discard one before it goes anywhere.

We do hold lot numbers. A lot number is one half of the chain that links a device to a patient; we do not hold the other half, and we do not want it.

If you are a covered entity or business associate evaluating this software, that is a conversation we are glad to have in detail — write to us at the address below.

Where it is kept, and who can see it

Data is stored in Google Cloud Firestore in the United States. Access is enforced by server-side security rules, not by what the app chooses to show: records are scoped to the account that owns them, and a request for anything wider is refused by the server.

If you use LyteScan through an organisation, that organisation's administrators can see the records belonging to people they manage. That is the product working as intended — it is an inventory system for a company's stock — but it is worth knowing.

We do not sell personal information, and we do not share it with advertisers or data brokers. Our service providers are Google (Firebase Authentication, Firestore, Cloud Storage) and Netlify (which hosts this website and serves no application data).

Your activity history cannot be edited

Worth stating plainly rather than burying, because it is unusual. The activity log is append-only by design: entries cannot be changed or deleted, by you or by us. An inventory history that can be rewritten is not a record of anything, and for regulated product that matters more than convenience.

So if you ask us to delete your data, we can delete your account, your inventory records and your personal details, and we will. The historical log of transactions in an organisation's account stays, because it is that organisation's business record rather than ours to erase.

Your choices

• See what we hold. Most of it is visible in the app. Ask us for the rest.
• Correct it. Inventory records are editable in the app.
• Delete your account. Write to us and we will remove it, subject to the activity log above.
• Camera and photo access are requested only when you use the scanner or attach a photo, and can be withdrawn in your device settings.

Depending on where you live you may have additional rights — for example under the GDPR or the CCPA. Write to us and we will honour them.

Children

LyteScan is a professional tool for medical device representatives. It is not directed at children and we do not knowingly collect information from anyone under 18.

Changes

If this policy changes in a way that affects what we collect or who can see it, we will update the date at the top and tell account holders. Features that change what is stored — photo upload to our servers, for instance — will be reflected here when they ship, not before.

Contact

Write to hello@lytescan.com. A real person answers.