Last updated: 2026-09-30
Konga Scan is developed and distributed by EasyByte Software, division of Converge srl (WeAreProject group), Italy — "we" below.
Questions about this policy: converge@converge.it.
Konga Scan is a work tool: it reads barcodes and sends them to your company's own Konga server, whose address is entered in the app. It sends no data to us and none to any third-party service.
| Data | Where it is handled | Why |
|---|---|---|
| Server address, port, licence key, driver and database name | Stored on the device; sent to the configured server | To establish the connection |
| Konga username and password | Stored in the app's private storage on the device; sent to the configured server with each request | To authenticate requests against your Konga server |
| Scanned barcodes, quantities, lots and serial numbers, session timestamps | Stored on the device; sent to the configured server on sync | This is the work product itself |
| Product catalogue (code and description) | Downloaded from the configured server and stored on the device | So scanned products can be described, and the catalogue searched, while offline |
| Device identifier | A number chosen by whoever configures the app; stored on the device and sent to the configured server | To tell sessions from different devices apart |
| TLS certificate fingerprints the device trusts | On the device only | To verify the identity of the server the app connects to |
Camera. The app requests camera access solely to read barcodes. Frames are processed on the device in real time: they are not saved, not transmitted, and not used for anything else. With a hardware scanner the permission is not needed.
The Konga server the app connects to is operated by your company or by whoever supports it, not by us. For the data passing through it — catalogues, scans, sessions — your company is the data controller, and its own retention and security policies apply. We have no access to that server or to its contents.
The app connects over HTTPS when the configuration says so. Because Konga servers typically sit on a local network and use certificates not issued by a public authority, the server's identity is verified by comparing the SHA-256 fingerprint of its certificate against the fingerprints the device trusts; an unrecognised certificate is refused and shown to the user, who decides whether to accept it.
The configuration may also specify an unencrypted connection (HTTP), because many installations run on a local network. In that case data travels in the clear within your own network. That choice belongs to whoever configures the app.
Data stored on the device lives in the application's private storage, reachable only by the app itself under the operating system's rules, and is not encrypted by us beyond what the operating system provides.
Local data stays on the device for as long as the app is installed. To remove it, uninstall the app or clear its data from the system settings. Data already synced to the Konga server must be deleted by whoever operates that server.
The app is a professional tool and is not directed at children under 13.
Any changes to this policy will be published at this same address, with the update date at the top of the document.