ScanDoc Privacy Policy

Everything ScanDoc handles is written to the app’s private storage on your phone or tablet and stays there. Specifically:

• Documents — the pages you scan and the PDFs and images you import, together with their names, sizes, dates and the folder you assign.
• Drafts — multi-page scans in progress, including each captured page and, where you have edited a page, the original photo so it can be restored.
• Recognised text and search index — text produced by the built-in offline OCR, kept in a local database so you can search your own documents. Recognition runs on the device; no image or text is sent anywhere to be read.
• Receipt entries — the merchant, date and amount you confirm for a receipt, used for the reports and CSV files the app builds locally.
• Settings and previews — your theme choice, small cached previews of PDF pages that the app can regenerate at any time, and, if you watch a rewarded video, the moment your ad-free hour expires. That last item is a timestamp — nothing about the ad or about you.

None of this is transmitted anywhere. We operate no backend and hold no copy of it, which also means we cannot retrieve or restore it for you.

• Camera — to photograph pages when you scan. A capture is processed on the device and the temporary photo is removed once the page has been added to your draft. The camera is used only while you are on the scanning screen.
• Photos and files (Android 12 and earlier only) — on older Android versions the system may ask for storage or photo access the first time you choose an image or file. It is used only to read the items you select. On Android 13 and newer no such permission exists; the system picker hands the app just what you chose.
• Internet access — to load ads and, where required, the consent form. Nothing about your documents travels over this connection; see section 3 for exactly what does.

Camera is the only permission the app asks you to grant. It does not request your microphone (audio recording is removed at build time), contacts, location, call logs or SMS. The build also declares vibration for haptic feedback, which needs no approval. When you share or export, Android’s share sheet passes the file to the app you choose.

ScanDoc is free and supported by advertising served through Google AdMob. Ads appear as a banner above the tab bar on the main screens, occasionally as a full-screen ad after a task such as text recognition or a PDF merge has finished, sometimes when you return to the app after a few minutes away, and as an optional rewarded video you can choose to watch. Ads never appear over the camera or the page editor.

To serve and measure those ads, Google and its advertising partners may collect and process:

• Advertising identifier — the resettable Android Advertising ID (AAID), used to limit repeated ads and measure performance.
• Device & technical data — device model, operating system version, language, coarse region derived from IP address, and network type.
• Ad interaction data — which ads were shown, viewed, or clicked in the app.

This processing is carried out by Google as an independent controller under its own terms. See How Google uses information from sites or apps that use our services, the Google Privacy Policy, and AdMob’s data disclosure. Where personalised advertising is enabled, Google may use additional ad technology providers.

Advertising is the only reason ScanDoc contacts a third party. The app contains no analytics SDK, no crash reporting, no attribution or tracking SDK, no social login and no cloud sync. Your documents and recognised text are never part of any ad request.

If you are in the European Economic Area, the United Kingdom, Switzerland, or a US state with an applicable privacy law, ScanDoc shows a consent form — provided by Google’s User Messaging Platform (UMP), a certified consent management platform — the first time you open the app, before any ad is requested. Your answer determines whether ads are personalised.

• Change your choice at any time — open Settings → Ads → Ad privacy settings in the app to reopen the consent form.
• Reset or delete your advertising ID — Android: Settings → Privacy → Ads → Delete advertising ID.
• Remove ads temporarily — choose Settings → Ads → Remove ads for 1 hour and watch a short video to hide all ads for one hour; watching again adds another hour. Rewarded videos are never shown unless you start them.
• Decline entirely — if you decline consent where it is required, no ads are requested and the advertising SDK is not initialised. Every scanning, OCR and PDF feature keeps working.

If you decline, ScanDoc does not fall back to a paywall, degrade features, or re-ask on every launch.

We do not sell, rent, or trade personal information. We do not share your data with anyone for our own purposes, because we do not receive it in the first place.

The only data flowing out of the app is the advertising data described in section 3, sent directly from the Google Mobile Ads SDK to Google. Under the CCPA/CPRA, personalised advertising may be considered a “sale” or “sharing” of personal information; you can opt out through the in-app privacy controls above or by deleting your advertising ID at the device level.

Documents leave the device only when you act: sharing, exporting, or saving to a location you pick. The file goes directly to the app or destination you selected through Android, and that recipient’s own privacy terms apply from then on. ScanDoc keeps no record of where you sent anything. We may disclose information if legally compelled to do so — though in practice we hold no user data that could be disclosed.

Your library lives on your device for as long as the app is installed. Documents you move to the Trash can be restored for 30 days, after which the app removes them automatically; you can also delete an item permanently, or empty the Trash, at any time. Permanent deletion removes the file together with its recognised text, search entry, folder and any receipt entry.

Uninstalling ScanDoc permanently deletes everything. The library is deliberately excluded from Android’s device backup, so no copy is uploaded to a backup service and nothing is restored on a new phone. Share or export anything you want to keep. Because we hold no copy, there is nothing for us to delete on your behalf and no account to close. To have advertising data deleted, use Google’s controls at myaccount.google.com/data-and-privacy.

All data is stored in the app’s private sandbox directory, which Android isolates from other applications, and is protected by your device’s own lock and encryption. Documents and recognised text are never transmitted, so there is no traffic of ours to intercept. Traffic to Google’s ad servers is encrypted in transit (HTTPS). Files you export are protected only as well as the destination you send them to.

ScanDoc is a general-purpose utility, intended for adults, and is not directed at children under 13. We do not knowingly collect personal information from children. Ad content requested by the app is capped at Google’s “General audiences” (G) rating. If you believe a child has provided personal information, contact us and we will act on it.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict processing, to withdraw consent, and to lodge a complaint with a supervisory authority.

For data held on your device, you can exercise all of these directly: everything is visible in the app, editable in the app, and removed by deleting it or uninstalling. For advertising data, the controller is Google — use the consent controls in section 4 or Google’s own privacy tools. Where consent is the legal basis (GDPR Art. 6(1)(a)), withdrawing it is as simple as reopening the form in Settings → Ads. You may also write to us at the address below.

If this policy changes materially, the updated version will be published at this URL with a new effective date, and — where the change affects how ads are served — the in-app consent form will be presented again. Continued use of the app after an update constitutes acceptance of the revised policy.

Questions, requests, or privacy concerns about ScanDoc: contact@salmansaleem.dev

Developer: Muhammad Salman Saleem · Lahore, Punjab, Pakistan · salmansaleem.dev