Privacy Policy

Last updated: May 13, 2026

Scanner PDF: Scan & Edit ("Scanner PDF", "we", "us", "our") is a mobile application that lets you scan physical documents with your iPhone camera, edit them, convert them to other formats, sign them, and organize them as PDF files. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use Scanner PDF.

1. Information We Collect

a) Authentication Information

You may create and access your account using email/password or Sign in with Apple. Depending on the authentication method you choose, we may collect:

A unique, stable user identifier tied to your account.
Your email address (or an Apple private relay address if you choose to hide your real email).
Your first name or display name, if provided.
Authentication-related metadata required to maintain your session securely across app launches.

Email/password authentication and account management are securely handled through Supabase. Passwords are never stored in plain text; they are hashed and salted by Supabase's authentication infrastructure. Sign in with Apple is managed by Apple and provides us only with a unique identifier and, optionally, your name and email.

b) Camera Access

Scanner PDF requests access to your device camera solely to scan physical documents and turn them into digital files. Camera access is only used when you actively tap the scanner inside the app. We do not access your camera in the background, and we do not access your photo library unless you explicitly choose to import an image.

c) Photo Library Access (Optional)

You may optionally grant access to your photo library to import existing images or PDFs and convert them. This permission is requested only when you tap "Import from Photos" or a similar action. We never scan your photo library in the background.

d) Scanned Documents and Files

When you scan a document, edit it, sign it, or import a file, the resulting PDF or image is stored locally on your iPhone inside the app's private storage directory. Document processing (edge detection, perspective correction, OCR text extraction, signing, merging, splitting, compression) happens directly on your device using Apple's native frameworks (VisionKit, Vision Framework, PDFKit, PencilKit).

We do not upload your scanned documents to our servers, and we do not have access to their content. Your documents stay on your iPhone unless you explicitly choose to share them, export them, or back them up to your own iCloud or other cloud service.

e) PDF-to-Document Conversion (Optional Server Feature)

The Convert PDF feature (converting your PDF to Word, Excel, PowerPoint, or other formats) requires server-side processing because Apple's native frameworks do not support these conversions on-device. When you actively initiate a conversion:

The specific PDF you select is transmitted via encrypted HTTPS to our trusted conversion provider.
The provider performs the conversion and returns the resulting file to your device.
We do not intentionally retain the original PDF or the converted output on our infrastructure beyond what is reasonably necessary to deliver the result.
Our conversion provider may temporarily retain request metadata for the period required by their service and security policies, after which it is deleted.

No other documents are ever sent to a server. Conversion is the only feature that uses cloud processing, and it only runs when you explicitly request it.

f) Account and Profile Data

In connection with your account, we may store on Supabase:

Your preferred app language (for example, English or Spanish).
Your theme preference (system, light or dark).
Your subscription status (free, trial, or active).
Basic device metadata (iOS version, app version) used for technical support and compatibility.

Your scanned documents and their content are never uploaded to Supabase or any account-related backend. Only metadata about your account and preferences is stored server-side.

g) Subscription Information

Your subscription is managed entirely through Apple's In-App Purchase system using Apple's StoreKit framework. We do not process, store, or have access to your payment card details, billing address, or financial account information. We may receive and store only the minimum subscription status information needed to determine whether premium features should be available to your account (such as whether your subscription is active, in trial, or expired).

2. Information We Do NOT Collect

Precise or coarse location data.
Contacts, calendar, or unrelated personal device data.
Browsing history or cross-app tracking data.
Advertising identifiers (IDFA). Scanner PDF does not display ads.
Health, fitness, or biometric data from Apple Health or any health framework.
Payment card details, banking information, or financial account data.
The content of your scanned documents. We do not see, read, analyze, or store what you scan.
Microphone, audio recordings, or video.
Data from other apps installed on your device.

3. How We Use Your Information

To create and manage your account securely using Supabase and Apple authentication systems.
To authenticate your identity and maintain your session across app launches.
To sync your preferences (language, theme) across devices when you log in with the same account.
To determine your subscription status and unlock premium features accordingly.
To process PDF-to-document conversions when you actively initiate them.
To maintain, secure, and improve app functionality.
To respond to your support inquiries and provide technical assistance.
To comply with applicable legal obligations.

4. Third-Party Service Providers

We use the following third-party services to operate Scanner PDF:

Supabase: Provides authentication and database infrastructure for securely storing user account, profile, and preference data. Supabase is GDPR-compliant and stores data on EU-based servers when applicable. See Supabase Privacy Policy.
Apple: Manages Sign in with Apple authentication and subscription billing through In-App Purchases (StoreKit). Apple's privacy practices apply to those services. See Apple Privacy Policy.
Conversion Provider (CloudConvert or equivalent): Used only when you actively request a PDF-to-document conversion. The provider receives the specific PDF you selected, performs the conversion, and returns the result. The provider may temporarily retain request metadata for security and abuse prevention according to their privacy practices.

We do not sell, rent, or trade your personal data to any third party. We share information with service providers only as strictly needed to operate the app and deliver its features.

5. Data Storage and Retention

Local data: All your scanned documents, edits, signatures, and document metadata are stored locally on your iPhone in the app's private storage directory. They remain on your device until you delete them or uninstall the app.
Server-side account data: Account credentials, preferences, and subscription status are securely stored on Supabase infrastructure. This data is retained as long as your account remains active. You can request deletion at any time (see Section 7).
Conversion requests: PDFs sent for conversion pass through our conversion provider's infrastructure and are not intentionally retained beyond what is necessary to deliver the result.
Third-party retention: Supabase, Apple, and our conversion provider may retain certain data according to their own service, security, abuse-prevention, and legal compliance policies. We do not control those retention periods, but we select providers that follow industry-standard data protection practices and GDPR requirements where applicable.

6. Data Security

We implement reasonable technical and organizational measures to protect your information:

All data transmitted between the app and our servers uses HTTPS encryption (TLS 1.2 or higher).
Authentication relies on secure infrastructure provided by Supabase and Apple, including industry-standard password hashing and salting.
Payment processing is handled entirely by Apple's secure In-App Purchase system. We never receive or store payment data.
Account data stored through Supabase is protected using secure database and authentication systems, including row-level security and access controls.
Local data on your device is protected by your device's built-in security features (passcode, Face ID, Touch ID, and iOS sandboxing).
Your scanned documents never leave your device unless you explicitly choose to share or export them.

Despite our efforts, no method of electronic transmission or storage is 100% secure. While we strive to protect your information using industry best practices, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your country of residence (including the EU/EEA under GDPR and California under CCPA), you may have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): Request deletion of your account and associated data. You can do this from within the app (Settings → Account → Delete Account) or by emailing us.
Right to data portability: Request a copy of your data in a structured, machine-readable format.
Right to object: Object to certain types of processing of your data.
Right to withdraw consent: Where processing is based on consent, withdraw consent at any time.

Additional practical options:

Revoke camera or photo access: You can revoke these permissions at any time in iOS Settings → Scanner PDF.
Revoke Sign in with Apple: Manage or revoke through Apple ID settings → Sign in with Apple.
Reset password: Use the password recovery flow inside the app if you use email/password authentication.
Cancel subscription: Cancel at any time through iOS Settings → Apple ID → Subscriptions.
Delete local documents: Delete any scanned document from inside the app at any time. Documents are permanently removed from your device.

To exercise any of these rights, contact us at the email address below. We will respond within 30 days, as required by applicable law.

8. Children

Scanner PDF is not directed at or intended for use by children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe a child has provided us with personal data, please contact us and we will take steps to delete the information promptly.

9. International Data Transfers

Scanner PDF is operated from Spain (EU). If you access the app from outside the EU, your data may be transferred to, stored, and processed in countries where our service providers operate, including the United States. We rely on appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) to ensure your data receives an adequate level of protection during such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, app functionality, service providers, or applicable laws. The updated policy will be made available within the app and on our website, and the "Last updated" date at the top will be revised. Material changes will be communicated through the app or via email when reasonably possible. Your continued use of Scanner PDF after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us. We aim to respond within 5 business days.

For privacy-related inquiries:

contact@scannerpdf-app.com

You may also exercise your data protection rights by contacting your local data protection authority. In the EU/EEA, you can find your authority at edpb.europa.eu.