Privacy Policy

Who this policy covers

This policy explains data use in PDF Scanner: Document Scan (PDF Scanner), provided by Yozahandy Handy, an individual developer in California, United States. Contact privacy and support at natestudio13@gmail.com. The app requires no sign-in or account.

Your documents stay under your control

Camera frames, imported images, PDFs, recognized text, document names, and signatures are processed locally using Apple frameworks. The app does not upload these contents to our servers, RevenueCat, advertising services, or external AI services. Local recognition may suggest a short document name. Review generated names and OCR results before relying on them.

Saved PDFs, original revisions, page images, thumbnails, local text indexes, folders, and saved signatures are stored in the app’s on-device storage. Unsaved editing drafts may be lost if the app is closed. The app does not provide a cloud backup service. Your device’s operating system, backup settings, and files you choose in iCloud Drive may separately involve Apple or another storage provider.

Permissions are used for the action you choose

Camera access is used to capture pages or signatures. The system Photos picker supplies the images you select; saving a page to Photos requests the system permission needed for that action. File pickers provide access to the files you choose. Optional Face ID, Touch ID, or iPhone passcode authentication uses Apple’s authentication result; PDF Scanner does not receive face images or biometric templates. You can change permissions in iPhone Settings.

Purchases and subscription verification

Apple handles checkout, payment credentials, billing, introductory-trial eligibility, renewals, cancellation, and refunds. PDF Scanner does not receive your card or banking details.

RevenueCat verifies purchases and provides subscription access, pricing, and purchase analytics. It receives an automatically generated app customer identifier, purchase and subscription records, product and transaction information, and basic app/platform/locale and network connection information needed to provide its service. The app does not send document contents or customer names, email addresses, or advertising identifiers to RevenueCat. We use this information to validate access, restore purchases, troubleshoot subscriptions, and understand subscription performance. Apple and RevenueCat may process information in countries other than yours under their applicable terms and privacy practices.

Daily allowance and app activity

A local setting records the day and random draft identifier of a successful free scan to apply the one-scan-per-day allowance. It does not contain document text or images. The app stores basic event names, timestamps, event counts, and aggregated task durations locally to troubleshoot reliability and understand task completion. These records contain no document contents, names, or document identifiers. These local events are not uploaded to an analytics service. There are no advertising SDKs, ad tracking, or cross-app advertising profiles in this version. We do not sell personal information or share it for targeted advertising.

Support messages you choose to send

The support composer includes an anonymous support ID, app version, and the most recent local activity name and time. Only sending the message shares it. Email also reveals the address and content you choose to send to us and our email provider. Do not attach sensitive scans, financial information, identity documents, or private signatures unless necessary and agreed with support. We use support messages to respond, investigate issues, and meet applicable obligations.

Sharing, exports, and external services

When you choose Share, Files, Photos, or another destination, that destination receives the file you select and handles it under its own practices. Copies and backups outside PDF Scanner are not deleted when an in-app copy is removed. Visiting our support or legal website may disclose ordinary network request information, such as an IP address, to its hosting provider. These pages do not ask you to upload documents or create an account.

Retention and deletion

Your library remains until you remove it or uninstall the app. Ordinary PDF deletion moves the PDF, original revisions, page images, preview, and local text to Recently Deleted for 30 days. You can restore an unexpired PDF or delete it permanently sooner. Expired files are no longer restorable and are erased at the next allowed background cleanup or app opening; iOS controls background execution. Settings → Privacy & Data Controls permanently deletes active and recently deleted local documents and separately lets you delete saved signatures. Deleting documents does not cancel a subscription or erase your free allowance. App preferences, purchase verification identifiers, exported copies, and device backups may remain separately.

We retain support messages and subscription records only as needed for support, service operation, fraud prevention, and applicable recordkeeping. Apple and RevenueCat control their own records and retention. Deleting the app does not cancel Apple billing. To request access, correction, or deletion of information we hold, contact natestudio13@gmail.com. We may request limited information to verify a request; we cannot retrieve your local document library.

Security and your choices

We use iOS app storage and file-protection features and offer optional device authentication or a four-digit app PIN. No method of storage or transmission is completely secure. Use a device passcode, keep iOS current, and maintain your own exports or backups for important documents. PDF Scanner does not certify compliance with sector-specific rules for medical, financial, or legal records.

An app PIN is confirmed twice during setup. A salted PIN verifier and failed-attempt timing are kept in the iOS Keychain on this device. The app PIN is never sent to us or another service. Changing or turning off a PIN requires your current PIN. Device-only PIN records do not transfer to another device, and we cannot recover a forgotten PIN. App Lock controls access inside PDF Scanner; iOS file-protection features protect the stored files.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing, obtain a copy of information, withdraw consent where processing relies on it, or contact your local privacy authority. Exercise applicable rights through the contact above. We will not deny app access for a legally protected privacy request. Deleting local documents is available without Pro.

The app does not respond differently to browser Do Not Track signals. We do not track your activity across other companies’ apps or websites for advertising.

Children and changes

PDF Scanner is a general-purpose productivity tool, not a service directed to children under 13. We do not knowingly seek children’s personal information. A parent or guardian can contact support about information a child may have sent. Purchases require the appropriate Apple Account authorization.

We may update this policy when practices change. The date above identifies this version. Material changes will be described in the app or through another appropriate notice before they take effect where required.