ScanLeap Privacy Policy

Effective Date: [publish date] · Last updated: [publish date]

App Name: ScanLeap
Developer: CDOXS

This policy explains what information the ScanLeap app ("ScanLeap", "the app") collects, why it collects it, and the choices you have. ScanLeap is published by CDOXS ("we", "us"). It covers the app on Google Play, the Apple App Store and Huawei AppGallery.

The short version

• Your documents stay on your phone. We do not upload, read or store the files you scan, edit or convert.
• If you choose to save to Google Drive or iCloud, the file goes to your own account. Vault files are encrypted on your phone before they are uploaded.
• You can use ScanLeap without signing in.
• Free versions show ads. Ad partners may use device identifiers, subject to the consent choices you make.
• We do not sell your personal information.

1. Information we collect

1.1 Account information (only if you sign in)

You can use ScanLeap without an account. If you sign in, we receive the following from the sign-in provider you pick:

• Google Sign-In (Google Play build): your name, email address, profile picture and a Google account ID.
• Sign in with Apple (App Store build): an Apple user ID, and your name and email if you choose to share them. Apple may give us a private relay email instead of your real address.
• Huawei ID (AppGallery build): a Huawei account ID, and your display name and email if you allow it.

On the Google and Apple builds, sign-in is handled by Firebase Authentication, which gives your account a Firebase user ID. If you continue without signing in, the app uses an anonymous ID that is not linked to your name or email.

1.2 Account record

For signed-in users on the Google and Apple builds, we keep a small record in Google Cloud Firestore, linked to your Firebase user ID. It holds app settings that follow you between phones, such as an in-app balance. It does not hold your documents.

1.3 Your documents and files

Scanning, cropping, filters, edge detection, PDF editing, form filling, signatures, merging, splitting and converting Word or PowerPoint files to PDF all run on your phone. To find page edges, the app uses Google ML Kit's document scanner on Android, Apple's Vision framework on iOS, and a detection model built into the app. These run on the device, and we do not receive your images or files.

Your files leave your phone only when you choose to send them:

• Share: the file goes to the app or person you pick.
• Save to Google Drive: the file goes to your Google Drive. ScanLeap asks only for the drive.file permission, which lets it see files it created or that you open with it. It cannot see the rest of your Drive.
• Save to iCloud Drive (iOS): the file goes to your iCloud Drive.

We cannot read files you store in Google Drive or iCloud. Your use of those services follows the Google and Apple privacy policies.

1.4 The vault (ScanLeap Plus)

The vault keeps files behind a PIN, with optional fingerprint or face unlock. Here is how it handles your data:

• Files and their names are encrypted on your phone before they are uploaded. They are stored in a "ScanLeap vault" folder in your Google Drive, or your iCloud Drive on iOS.
• The encryption key is protected by your PIN, together with a secret kept in your phone's secure storage (Android Keystore or iOS Keychain), and by a recovery key the app shows you once.
• We never receive your PIN, your recovery key or your encryption key. Fingerprint and face checks are done by your phone's operating system. The app only gets a yes or no answer.
• We cannot open your vault. If you lose both your PIN and your recovery key, we cannot recover your vault files.

1.5 Purchases (ScanLeap Plus)

Plus is sold through Google Play, and later the App Store and AppGallery. The store handles payment, and we never see your card or bank details. The app receives the product you bought, its status (active, pending, cancelled or expired) and a purchase token. It uses these to unlock Plus and to restore it on a new phone.

1.6 Usage analytics

On the Google Play and App Store builds, we use Google Analytics for Firebase to count which screens are opened. Firebase also collects standard information such as an app instance ID, device model, operating system version, app version, country and session times. We do not record file names, document content or what you type. Analytics follows your ad consent choices (section 1.7). The Huawei build does not use analytics.

1.7 Advertising

Free versions show ads, including rewarded ads you watch before saving. Plus removes ads.

• Google Play and App Store builds: ads are served by Google AdMob.
• Huawei build: ads are served by Huawei Ads Kit.

Ad partners may collect your advertising ID (Android advertising ID, Apple IDFA or Huawei OAID), IP address, approximate location from your IP address, device and app information, and how you interact with ads. They use this to show, measure and, if you allow it, personalise ads.

Where the law requires, the app asks for your consent before ads load:

• In the EEA, UK and Switzerland, and in US states with privacy laws, Google's consent form lets you accept, refuse or choose purposes.
• On iOS, Apple's App Tracking Transparency prompt asks whether ad partners may track you across other companies' apps.

You can change these choices at any time:

• In the app, under Account > Ad privacy options, where your region needs it.
• In iOS Settings > Privacy & Security > Tracking.
• On Android, by resetting or deleting your advertising ID in your device settings.

If you refuse personalised ads, you may still see ads that are not personalised.

1.8 Device and technical information

To keep the app working, it checks Google Play or the App Store for a newer version. This sends the app's ID and your country to the store. Google and Apple services used by the app may also record crash and error details.

2. Permissions

• Camera: to scan documents. Images stay on your phone.
• Photos and media: to import pictures and save scans to your gallery. The app only reads the photos you pick.
• Files and storage: to open, import and save PDF, Word, PowerPoint and image files that you pick.
• Biometrics (optional): to unlock the vault with your fingerprint or face.
• Tracking (iOS, optional): see section 1.7.
• Internet: for sign-in, ads, analytics, purchases, cloud saving and update checks.

You can turn off any permission in your device settings. Features that need it will then stop working.

3. How we use information

We use the information above only to:

• sign you in and keep your account and Plus status in step across phones
• provide and unlock app features, including restoring purchases
• show ads in the free version and measure them
• understand which parts of the app are used, so we can improve it
• answer you when you contact support
• prevent fraud and abuse, and meet legal obligations

Where EU or UK law applies, our legal bases are:

• the contract with you, for the app and Plus
• your consent, for personalised ads, analytics where consent is needed, and tracking on iOS
• our legitimate interests, for security, fraud prevention and basic app statistics
• legal obligations

4. Who we share information with

We do not sell or rent your personal information. We share it only with the service providers that run parts of the app, each under its own privacy policy:

We may also disclose information when the law requires it, to protect the rights and safety of users or others, or as part of a merger or sale of the business. In a merger or sale, this policy would continue to apply to your information.

5. International transfers

Our providers may process information in countries other than yours, including the United States. Where EU or UK law applies, they rely on approved safeguards such as Standard Contractual Clauses.

6. How long we keep information

• Documents: on your phone until you delete them or uninstall the app. Files in Google Drive or iCloud stay there until you delete them.
• Account record: until you delete your account.
• Analytics: kept by Firebase for up to 14 months.
• Purchases: kept by the store under its own rules.
• Support emails: kept for as long as needed to help you, and up to 2 years.

7. Deleting your account and data

To delete your account, go to Account > Delete account in the app. This permanently deletes:

• your sign-in account and your account record
• the files saved in ScanLeap on that phone
• your vault, including the "ScanLeap vault" folder in your Google Drive or iCloud Drive

It does not delete other files in your Drive or iCloud, including files you saved there from ScanLeap. It also does not cancel Plus. Cancel your subscription in the store yourself.

You can also ask us to delete your data by email (section 11).

8. Your rights

Depending on where you live, you may have the right to:

• access, correct or delete your personal information
• object to or limit how we use it
• receive a copy of it
• withdraw consent at any time
• complain to your local data protection authority

Residents of California and other US states with privacy laws may ask what we collect and ask us to delete it. They also have the right to opt out of the "sale" or "sharing" of personal information for targeted ads. You can opt out through the app's privacy settings or your device's ad settings. We will not treat you differently for using these rights.

To use any of these rights, email us. We may need to confirm the request comes from you.

9. Security

• Data sent between the app and our providers is encrypted in transit.
• Vault files are encrypted on your phone with AES-256, using a key only you can unlock.

No system is perfectly secure, so we cannot guarantee absolute security. Protect your phone with a screen lock and keep your recovery key somewhere safe.

10. Children

ScanLeap is not directed at children under 13, or under 16 in the EEA and UK. We do not knowingly collect their personal information. If you think a child has given us information, email us and we will delete it.

11. Contact us

If you have any questions regarding this Privacy Policy, please contact us using the developer contact information provided on the Google Play Store or Apple App Store listing page.

12. Changes to this policy

We may update this policy when the app changes. We will change the date at the top. If a change is significant, we will tell you in the app or on the store listing before it takes effect.