Your documents, your control

Privacy Policy

Last updated: [DATE]

ScanSafe Pro ("the App", "we", "us", "our") is published by Itech AppStudios ([REGISTERED ADDRESS, MALAYSIA]). This policy explains what information the App handles, how, and the choices you have. By using ScanSafe Pro you agree to the practices described here.

We built ScanSafe Pro to keep your documents private. Most processing happens on your device, and we collect as little as possible.

1. The short version

  • Your scans, the text inside them, and your document files are stored on your device and are not uploaded to us for general storage.
  • Scanning, OCR, document editing, and the document lock run entirely on your device.
  • Two features send document content to a third-party AI provider to work: AI Summary and Smart Data Extraction. That text is processed to generate the result and is not used to store your documents or train models. See Section 3.
  • Cloud backup is optional and you control it. Backups are encrypted on your device before they sync to your own Google Drive, Dropbox, or OneDrive.
  • Share links / QR codes you create are hosted temporarily so the recipient can open the file, and they expire when you set them to. See Section 4.
  • Biometric data never leaves your device.

2. Information the App handles

a. Documents and their contents. Images you scan, the PDFs you create, OCR text, stamps, signatures, and metadata (page counts, file names, dates) are stored locally on your device.

b. Account information (if applicable). [IF YOU OFFER ACCOUNTS: e.g. email address used to create an account and sync settings. IF NO ACCOUNTS: state "ScanSafe Pro does not require an account to scan, lock, or back up your documents."]

c. Purchase information. Pro subscriptions are processed by Google Play Billing. We receive confirmation that a purchase occurred and its status; we do not receive or store your payment card details.

d. Diagnostics and usage data. [IF YOU USE FIREBASE ANALYTICS / CRASHLYTICS: We use Firebase to collect [crash reports / aggregated, non-identifying usage events] to improve stability and the product. Specify what is collected and whether it can be disabled. IF YOU DO NOT: state "We do not collect analytics or usage tracking."]

e. Device and technical information. Standard technical data needed for the App to function (e.g. OS version, device model) [and as collected by the services in Section 7].

3. AI Summary & Smart Data Extraction (cloud processing)

To generate a summary or extract structured data from a document, the App sends the text of that specific document to our processing service ([Supabase Edge Functions]) and on to our AI provider, Anthropic (the Claude API), which returns the result.

  • This happens only when you actively use the AI Summary or Smart Data Extraction feature on a document.
  • The text is transmitted over an encrypted connection and used solely to produce your result.
  • Per Anthropic's terms for API usage, your content is not used to train models. [VERIFY current Anthropic API data-use terms and link them.]
  • We do not retain the document text after the result is returned. [CONFIRM your actual retention behavior in the Edge Function; if any logging occurs, disclose it and the retention period.]
  • All other features — scanning, OCR, editing, locking — do not send your documents anywhere.

If you never use these two features, no document content leaves your device through them.

4. Share links and QR codes

When you create a share link or QR code, the App uploads the selected document (or a representation of it) to our storage ([Supabase Storage]) so the recipient can open it via the link. You control its lifetime:

  • The link/QR expires at the time you choose (e.g. 24 hours, 7 days, 30 days).
  • You may add a password.
  • When a link expires [or you revoke it], the file is [deleted / made permanently inaccessible]. [CONFIRM whether the stored file is deleted on expiry, and after how long.]

Anyone you send a link to can access the document until it expires, so share carefully.

5. Cloud backup

Cloud backup is optional and off until you enable it. When enabled:

  • Backups are encrypted on your device before they leave it.
  • They sync to your own Google Drive, Dropbox, or OneDrive account, which you connect and control.
  • We do not hold the decryption keys; the keys never leave your device. [CONFIRM key handling — this is a strong claim and must be exactly true.]
  • We do not have access to the contents of your backups.

You can disable backup and disconnect any cloud provider at any time in Settings.

6. Biometric data

If you enable biometric (fingerprint/face) lock, authentication is handled by your device's operating system. The App never receives, sees, or stores your biometric data — it only receives a yes/no result from the OS.

7. Third-party services we use

ServicePurposeWhat it may receive
Google Play BillingProcess Pro purchasesPurchase/transaction data (not card details)
Anthropic (Claude API)AI Summary & Smart Data ExtractionDocument text for the requested feature
SupabaseBackend for AI relay and share linksDocument text/files as described in §3–4
Firebase[Crash reporting / analytics — specify or remove][Specify]
Google Drive / Dropbox / OneDriveYour optional encrypted backupsEncrypted backup data only

Each provider has its own privacy policy governing data it processes. [Link each.]

8. How long we keep data

  • On your device: documents stay until you delete them or uninstall the App.
  • AI processing: document text is not retained after the result is returned. [Confirm.]
  • Share links: stored only until expiry/revocation. [State exact behavior.]
  • [Account / diagnostics data, if any]: [retention period].

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent. Because most data lives on your device, you can exercise much of this directly (delete documents, disable backup, clear app data). For anything held by us, contact hello@scansafepro.com and we will respond within [TIMEFRAME, e.g. 30 days].

  • EU/UK (GDPR): [legal bases for each processing activity; right to lodge a complaint with a supervisory authority].
  • California (CCPA/CPRA): [categories of data, "we do not sell or share personal information" if true, how to exercise rights].
  • Malaysia (PDPA): [consent and access/correction rights; designated contact].

10. Children

ScanSafe Pro is intended for users aged [16/18]+ and is not directed to children. We do not knowingly collect personal information from children. [Adjust to your target age and applicable law.]

11. International transfers

Your data may be processed in countries other than your own (for example, where our AI provider or backend operates). [State regions and the safeguards relied on, e.g. standard contractual clauses, where required.]

12. Security

We use encrypted connections, on-device encryption for backups, and on-device locking. No method of transmission or storage is perfectly secure, but we design to minimize what is ever exposed.

13. Changes to this policy

We may update this policy. Material changes will be reflected by the "Last updated" date and, where required, by notice in the App.

14. Contact

Itech AppStudios — ScanSafe Pro

Email: hello@scansafepro.com

[Registered address, Malaysia]

[Data Protection Officer / contact, if appointed]