Legal

Privacy Policy

Last updated: February 2026

1. Introduction

This Privacy Policy explains how AdLens, operated by Dahlberg Ltd, collects, uses, stores, and protects your personal data when you use our mobile application, website, and related services (collectively, the “Service”). We are committed to protecting your privacy and ensuring that your personal information is handled responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using AdLens, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Data Controller

The data controller responsible for your personal data is:

Dahlberg Ltd
A company registered in England and Wales
Email: [email protected]

If you have any questions about this Privacy Policy or our data practices, please contact us at the email address above.

3. Information We Collect

We collect the following categories of information when you use AdLens:

3.1 Photos You Upload

When you use AdLens to analyse an advertisement, you upload a photograph to our servers. These images are processed by our AI analysis pipeline to identify brands, fonts, colours, and other design elements. Photos and their analysis results are stored in your scan history so you can revisit them later. The photos you upload are of advertisements and commercial media — we do not request or process personal photographs. You can delete individual scans from your history at any time.

3.2 Account Information

If you create an account, we collect the information you provide, which may include your email address and display name. If you use anonymous authentication, we store a unique anonymous identifier but no personally identifiable information.

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide the Service: Processing your uploaded photos through our AI analysis pipeline to deliver brand, font, colour, and cost analysis results.
  • To communicate with you: Sending essential service notifications, responding to your enquiries, and (with your consent) sending marketing communications about new features or updates.
  • To ensure security: Detecting and preventing fraud, abuse, and unauthorised access to the Service.

5. Legal Basis for Processing

Under UK GDPR Article 6, we process your personal data on the following legal bases:

  • Contract performance (Article 6(1)(b)): Processing your photos and providing analysis results is necessary to perform the contract between you and Dahlberg Ltd when you use the Service.
  • Legitimate interests (Article 6(1)(f)): We have a legitimate interest in improving the Service and ensuring its security. We balance these interests against your rights and freedoms.
  • Consent (Article 6(1)(a)): Where we send you marketing communications, we do so only with your explicit consent. You may withdraw your consent at any time by using the unsubscribe mechanism in any marketing email or by contacting us.

6. Data Sharing

We share your data with the following third-party service providers, solely to the extent necessary to operate and deliver the Service:

  • Anthropic: Photos you upload are sent to Anthropic’s AI models for analysis (brand detection, font identification, colour extraction, and ad analysis). Anthropic processes this data in accordance with their own data handling policies. We recommend reviewing Anthropic’s Privacy Policy.
  • Supabase: We use Supabase for database hosting and user authentication. Your account data and saved scan history are stored on Supabase infrastructure.
  • Cloudflare: We use Cloudflare for content delivery, image storage, and website hosting. Your uploaded images may be transmitted through Cloudflare’s network.
  • RevenueCat: If you subscribe to a paid plan, RevenueCat manages subscription state and entitlements. RevenueCat does not receive your payment details directly; those are handled by Apple or Google through their respective app stores.

We do not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or any other parties for their own marketing purposes.

7. Data Retention

  • Photos and scan results: Photos and analysis results are stored in your scan history until you delete them or close your account.
  • Account data: Your account information is retained for as long as your account remains active. If you request account deletion, we will erase your personal data within 30 days, except where retention is required by law.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
  • Right to erasure: You may request that we delete your personal data, subject to certain legal exceptions.
  • Right to data portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
  • Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances.
  • Right to object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As stated above, we do not sell your personal data. To exercise your CCPA rights, please contact us at [email protected].

9. International Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom, including the United States and the European Economic Area, by our third-party service providers. Where such transfers occur, we ensure that appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the relevant authorities
  • Adequacy decisions where applicable
  • Other lawful transfer mechanisms recognised under UK data protection law

These safeguards ensure that your personal data receives a level of protection equivalent to that provided under UK law.

10. Cookies

AdLens uses minimal cookies that are strictly necessary for the operation of the Service, including session management and authentication cookies. We do not currently use third-party tracking cookies or advertising cookies.

If our cookie practices change in the future, we will update this policy and, where required, seek your consent before placing non-essential cookies.

11. Children’s Privacy

AdLens is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that data as promptly as possible. If you believe that a child under 16 has provided us with personal data, please contact us at [email protected].

12. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:

  • Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
  • Encryption at rest: Personal data stored on our servers is encrypted at rest.
  • Access controls: Access to personal data is restricted to authorised personnel who need it to operate and maintain the Service.
  • Regular reviews: We regularly review and update our security practices to address emerging threats.

While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Service itself. When we make material changes, we will notify you through the AdLens app or by other appropriate means. We encourage you to review this policy periodically.

The “Last updated” date at the top of this policy indicates when the most recent revisions were made.

14. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us:

Dahlberg Ltd
Email: [email protected]

For data protection enquiries, including requests to exercise your rights under UK GDPR, please use the same email address and include “Data Protection” in the subject line.