Privacy Policy

Assure Tech LLC (“Assure,” “we,” “us” or “our”) operates the mobile drug and substance test result scanning and interpretation application (hereinafter referred to as the “Service” or “Application”). This Privacy Policy applies to all users located in Germany and the European Economic Area (EEA) and complies with the General Data Protection Regulation (GDPR), German Federal Data Protection Act (BDSG), and global app store compliance requirements for Google Play and Apple App Store.

This policy transparently explains how we collect, use, store, transfer, and disclose personal data when you use our drug test scanning and result analysis services, as well as your statutory data subject rights. By accessing or using our Service, you acknowledge and agree to the data processing practices set out in this Privacy Policy. All processing activities strictly follow the principles of lawfulness, fairness, transparency, data minimization, purpose limitation, and storage limitation. Unless otherwise defined herein, terms used in this Privacy Policy have the same meanings as in our Terms of Service.

Definitions

Service: Service is the mobile drug and substance test scanning and result interpretation application operated by Assure Tech LLC.

Personal Data: Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession), in accordance with GDPR Article 4.

Usage Data: Usage Data is data collected automatically either generated by your use of the Service or from the Service infrastructure itself.

Anonymous Data: Anonymous Data refers to data that cannot be associated or linked to any identifiable individual, which does not constitute Personal Data under GDPR.

De-identified Data: De-identified Data means data processed to remove direct personal identifiers, which cannot be used to identify a specific user without additional auxiliary data.

Cookies & Tracking Technologies: Cookies and Tracking Technologies mean cookies, web beacons, tags, and scripts used to record service preferences and analyze service operation. For mobile applications, such technologies are only applied to embedded web pages and service statistics modules.

Data Controller: Assure Tech LLC is the independent Data Controller for all user Personal Data processing activities under this Policy, responsible for complying with GDPR and German local data protection laws.

Data Processors (Third-Party Service Providers): Data Processor (or Service Provider or Third Party) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

Data Subject (User): Data Subject is any living individual located in Germany or the EEA who is using our Service and is the subject of Personal Data.

User Consent: Separate, explicit and revocable consent is the primary legal basis for processing sensitive data, including location access, advertising tracking and marketing communications. Simply using the Service does not constitute implied consent. You have the right to withdraw any consent at any time through device settings or in-app privacy center, without affecting the legality of processing conducted before withdrawal.

Types of Data We Collect

We strictly adhere to the data minimization principle and only collect data necessary for the normal operation of the drug test scanning and result interpretation Service.

User-Provided Personal Data: You may voluntarily provide the following data during registration, login, and service use: Account information: Email address, user nickname, and account password; Service interaction data: Drug test photos uploaded for scanning, test result records, and feedback content submitted to customer service; Contact information you actively provide when consulting customer service.

Automatically Collected Usage & Device Data: When you use our mobile Application, we automatically collect technical data to ensure service stability, identify abnormal risks, and optimize product experiences: Mobile device model, device unique identifier, operating system version, network type, device language, time zone, App access time, function usage records, page navigation logs, service crash logs, and crash diagnosis data.

Location data (only with your separate authorization): Approximate geolocation for regional service adaptation and compliance management; you may disable location permission at any time via your device system settings.

Tracking Technology Data: We use Session Cookies, Preference Cookies, and security tracking technologies on embedded web modules to maintain service operation, retain user preferences, and ensure service security. You may disable Cookie collection through browser settings; disabling Cookies may affect partial embedded page functions but will not affect core drug scanning services.

Third-Party Authorized Data: If you log in via third-party platforms (Google/Apple), we only obtain public basic information authorized by you (nickname, avatar, open ID) and will not obtain any private data of third-party accounts.

Use of Your Personal Data

We only use collected data for the explicit purposes stated below, and will not expand the processing scope beyond user authorization and legal provisions:

• Core service provision: To perform drug test picture scanning, intelligent identification, and test result analysis functions to enable the core functions of the Application.
• Account management: Complete user registration, login verification, and account security maintenance.
• Service optimization: Analyze usage data, fix program bugs, optimize scanning recognition accuracy, and improve user experience.
• Security protection: Identify abnormal operations, prevent malicious attacks and service abuse, and protect platform and user data security.
• Customer service response: Reply to user consultations, feedback, and problem handling.
• Legal compliance: Comply with GDPR, BDSG, and other applicable laws, and respond to regulatory requirements.
• Marketing communications (separate explicit consent required): Send service updates and functional optimization notifications; you may opt out of marketing messages at any time.
• We may process Personal Data into Anonymous Data and De-identified Data for statistical analysis, product iteration, and industry research. Anonymous Data may be used and disclosed freely without user restriction.

Data Storage, Retention & Cross-Border Transmission (Germany/EEA Compliance)

Overseas Data Storage: All user data collected by this Service is stored and processed on overseas secure servers. We adopt AES-256 end-to-end encryption for data transmission and storage, establish strict data access permission mechanisms and operation audit logs, and prevent unauthorized access, disclosure, tampering, and loss of user data.

Data Retention Period (GDPR Storage Limitation): We follow the principle of storage limitation: Account active period: Retain account data and service records normally; After account cancellation: Completely delete or fully anonymize all user personal data within 30 days; Compliance retention: Service logs and security records required by laws will be retained for a maximum of 3 years and automatically deleted upon expiry.

Cross-Border Data Transmission: As a global service, your data may be transmitted and processed across borders. For users in Germany and the EEA, all cross-border data transmission strictly complies with GDPR cross-border rules. We adopt Standard Contractual Clauses (SCCs) approved by the European Commission to ensure that overseas data processors can provide equivalent data protection levels consistent with EU standards.

Disclosure of Your Personal Data

We will never sell, rent, or trade your personal data for commercial purposes. We only share data with third parties in the following legal scenarios:

Authorized Third-Party Service Providers: We cooperate with compliant third-party service providers to support service operation. All third parties have signed data confidentiality agreements and can only process data in accordance with our instructions and GDPR requirements: Analytics Services: Google Analytics, Firebase. Used for service operation analysis, crash monitoring, and product optimization; Advertising Services: Google AdSense, AdMob. Used for in-app compliant advertising display; users can turn off advertising tracking through device settings; Payment Services (if applicable): Apple In-App Purchase, Google Play In-App Purchase, Stripe, PayPal. Used for processing paid service transactions, compliant with PCI-DSS security standards; Social Remarketing (if applicable): Facebook. Used for legal interest-based advertising remarketing.

Corporate Transaction Scenarios: In the event of company merger, acquisition, asset transfer, or restructuring, user personal data may be transferred as business assets. The successor shall continue to assume data protection obligations under this Privacy Policy.

Legal Mandatory Disclosure: We may disclose user data when required by laws, judicial investigations, regulatory official orders, or to protect the legitimate rights and interests of users, platforms, and the public.

GDPR Data Subject Rights (Core for German Users)

All users in Germany and the EEA enjoy the following statutory rights free of charge. We will respond to all legitimate requests within 30 calendar days, which may be extended by 2 months for complex requests with prior notice: Right to Access: You may inquire about the scope, purpose, and details of your personal data processed by us; Right to Rectification: You may correct inaccurate or incomplete personal data;

Right to Erasure (Right to be Forgotten): You may request to delete your personal data and delete your account via mobile application or the official website account deletion function. Please note that we may be required by law to retain certain information and cannot delete it immediately, and we will only complete erasure after fulfilling legal retention obligations. After deletion, data will be removed from active databases, but archives held by service providers may be retained for anti-fraud and risk control purposes;

Right to Restriction of Processing: You may request us to suspend data processing when data accuracy is verified or processing legality is disputed; Right to Data Portability: You may request to receive your personal data in a machine-readable format; Right to Object: You may object to data processing for marketing or legitimate interest purposes; Right to Withdraw Consent: You may withdraw any authorized permission at any time; Right to Lodge a Complaint: You have the right to lodge a complaint with the local data protection authority in Germany or the EEA at any time.

Exercise Method: You can submit requests by sending an email to support@drugscreenmate.com. We will verify your identity and complete the processing as required by law.

Children’s Privacy Protection

Our Service is intended for adult users only and not intended for users under the age of 13. We do not knowingly collect personal data from minors under 13. If we unknowingly obtain minor personal information, we will completely delete it within a reasonable period upon discovery. If you are a parent or guardian and find that your child has provided us with personal data without consent, please contact us via support@drugscreenmate.com to process it.

Third-Party Links & Platforms

Our Application may contain links to third-party websites or services. We have no control over the privacy policies and data processing practices of third-party platforms. We recommend that you carefully check the privacy policy of the third party before using relevant services. We shall not be liable for any data risks arising from third-party services.

Data Security Protection

We adopt industry-standard technical and management measures to protect user personal data, including data encryption storage, access authority isolation, operation log auditing, and regular security vulnerability detection. We limit data access to only authorized employees and third-party processors who need data to perform their duties. We will promptly notify you and relevant regulatory authorities in accordance with legal requirements once a data security breach is confirmed. Although we try our best to ensure data security, no internet data transmission and storage system can guarantee absolute security, and we shall bear legal liability for negligent security problems.

Policy Updates & Notification

We may update this Privacy Policy from time to time according to legal changes, regulatory requirements, and service iteration. For major changes affecting your core privacy rights, we will obtain your explicit consent via in-app pop-up notification and email reminder in advance. Minor optimizations will be announced via in-app announcements. Your continued use of the Service after the policy update takes effect means you accept the revised policy. If you disagree with updated terms, you may cancel your account before the effective date of the updated policy. Please regularly visit www.drugscreenmate.com to check policy updates.

Contact Information

If you have any questions, objections, or requests to exercise your rights regarding this Privacy Policy and data processing activities, please contact us via:

Company Name: Assure Tech LLC

Address: 3411 Silverside Road Tatnall Building #104, Wilmington DE 19810 Delaware, United States

Email: support@drugscreenmate.com

Applicable Law

This Privacy Policy is governed by the laws of the GDPR and the German Federal Data Protection Act (BDSG). For disputes involving local users, the local competent court in Germany shall have jurisdiction.

Medical Disclaimer

This APP is intended for general information only and may not be used or relied upon for any preventive, diagnostic or therapeutic purposes. The medical information on the APP is provided as an educational resource only and is not a substitute for professional advice, diagnosis and treatment.

The Company does not warrant the accuracy, completeness or usefulness of any content, whether provided by us or by third parties.