Privacy Policy
Effective date: 2026-09-10 · Last updated: 2026-09-10
This Privacy Policy describes how ScanVio ("we", "our", or "us") collects, uses, and shares information when you use the ScanVio application on iOS, iPadOS, macOS, or Android (the "App"). It applies to distribution through the Apple App Store and Google Play, and is written to comply with Apple App Store privacy requirements, the Google Play User Data policy, the Data safety section, the EU GDPR, and the California CCPA/CPRA.
By downloading, installing, or using the App, you acknowledge this Privacy Policy. Where consent is required for personalized advertising, we request it separately and you may decline.
1. Summary
ScanVio is designed to be offline-first. All documents you scan, convert, or edit are processed locally on your device. We do not upload, transmit, or store your documents on any server.
The only categories of data that leave your device are:
- Advertising identifiers and related device data, collected by Google AdMob to serve ads on iOS/iPadOS and Android (if you use the free version of the App). The macOS version does not serve AdMob ads.
- Purchase transaction data, handled by Apple In-App Purchase/StoreKit on Apple platforms or Google Play Billing on Android.
- Crash, performance, and limited usage diagnostics, processed by Firebase Crashlytics and Firebase Analytics where enabled.
We do not receive your document contents. Firebase, AdMob, Apple StoreKit, and Google Play process only the data described below for their stated purposes.
2. Data We Collect
2.1 Data processed only on your device
The following are stored locally on your device and never transmitted to us:
| Category | Purpose |
|---|---|
| Camera images | Document scanning, edge detection, filters |
| Files you import (PDF / DOCX / XLSX / PPTX / Markdown / images) | Conversion, editing, OCR |
| OCR text output | Search and export |
| Document metadata (titles, tags, folder structure) | Library organization |
| App preferences (theme, language, accent color) | User experience |
| Signature images you draw | Reuse across signing sessions |
| VIP entitlement state | Unlock premium features |
We do not have access to any of the above.
2.2 Data collected by third-party services
Google AdMob — if you use the free version of the iOS/iPadOS or Android version, AdMob may collect and process:
- Advertising ID (AAID)
- Coarse device information (model, OS version, language, general location derived from IP)
- Ad interaction events (impressions, clicks)
- Approximate IP-based location
AdMob's use of this data is governed by Google's Privacy Policy.
Apple In-App Purchase (StoreKit) — on iOS, iPadOS, and macOS, Apple processes your Apple Account, transaction, subscription, and payment information. We receive transaction identifiers or signed transaction data needed to verify entitlements. We do not receive your payment card details.
Google Play Billing — on Android, Google processes your Google account identifier, purchase token, and payment method. We receive only a purchase token used to unlock features.
Firebase Crashlytics and Analytics — where enabled, these services receive crash reports, app instance identifiers, device and OS details, and limited event data to diagnose failures and improve reliability. Their processing is governed by Google's privacy terms.
Google ML Kit — text recognition (OCR) runs entirely on-device. Some language recognizers may download model files from Google servers on first use. No document contents are transmitted.
2.3 Data we do NOT collect
We do not collect, and Foglio has no code that transmits:
- Names, email addresses, phone numbers, or account credentials
- Contents of scanned documents, converted files, or OCR output
- Contacts, calendar, SMS, or call logs
- Precise GPS location
- Biometric data
- Health, financial, or government-ID data
- Browsing history outside the App
3. Permissions We Request
| Permission | Reason | Required? |
|---|---|---|
| Camera | Capture pages for scanning | Only when you use Scan |
| Photo Library (iOS/iPadOS) | Import photos as sources | Only when you tap Import |
| Camera (macOS) | Capture pages for scanning | Only when you use Scan |
| Internet | Load ads (free tier), download OCR models | Yes |
| Access network state | Detect connectivity for ad loading | Yes |
| Advertising identifier (iOS/Android) | Ad measurement and, if consented, personalized advertising | Only in the free tier |
You may revoke permissions in your device settings. On iOS, camera and photo access are managed in Settings → Privacy & Security; on macOS, they are managed in System Settings → Privacy & Security.
4. How We Use Information
We do not "use" your document data because we never receive it. Data collected by AdMob is used to select and measure advertising on supported mobile platforms; the macOS version does not initialize AdMob. StoreKit and Google Play Billing data is used to fulfill and restore your purchase.
Specifically:
- To process documents: locally on your device, without uploading document contents.
- To serve advertising: through AdMob on iOS/iPadOS and Android (free tier only).
- To process purchases: through Apple StoreKit or Google Play Billing, depending on platform.
- To diagnose failures: through Firebase Crashlytics and Analytics where enabled.
- To improve stability: aggregate crash reports from Firebase Crashlytics where enabled.
We do not sell your personal information. We do not share it with data brokers.
5. Data Sharing
We share data only with the following categories of third parties, and only for the purposes stated above:
| Recipient | Data | Purpose |
|---|---|---|
| Google AdMob | Advertising ID, coarse device info, IP | Advertising |
| Apple StoreKit | Signed transaction data and subscription status | Payments and entitlement restoration |
| Google Play Billing | Purchase token and billing status | Payments |
| Firebase | Crash reports, device and app instance data, limited events | App stability and diagnostics |
We do not share your document data with any other third party. When you make or restore a purchase, the signed transaction value is sent to our Cloudflare Worker only to verify the entitlement with Apple or Google. The worker does not receive or store document contents.
6. Data Retention and Deletion
Documents and other data on your device are retained until you delete them within the App or uninstall the App. Uninstalling removes all local data.
AdMob data is retained by Google according to Google's retention policy.
Purchase records are retained by Apple or Google for legal, accounting, subscription, and refund purposes.
Deletion requests: documents and app data are removed by deleting them in the App or uninstalling it. Purchase-verification requests contain only store transaction data and are not used to store documents. To request deletion of AdMob-collected data, use Google's My Ad Center, or contact us for questions about our processing.
7. Children's Privacy
ScanVio is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will investigate.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data processed about you.
- Correct inaccurate data.
- Delete your data (uninstalling the App achieves this for locally-stored data).
- Object to or restrict processing.
- Withdraw consent for personalized ads (adjust in your device's Ads settings).
- Data portability — export your documents from the App at any time using the built-in Share function.
To exercise these rights against Google (as a joint controller for advertising data), see Google's Privacy & Terms. To exercise any right against us, email the address in Section 12.
California residents (CCPA/CPRA): You have the right to know, to delete, to correct, and to opt out of "sharing" for cross-context behavioral advertising. Foglio does not sell personal information.
EU/UK residents (GDPR/UK GDPR): The legal bases we rely on are consent (advertising) and contract (paid features). You may lodge a complaint with your local data protection authority.
9. Security
Documents are stored in your device's app-private storage, which is sandboxed by the operating system. Encrypted PDFs use industry-standard AES-256 (Android via PDFBox) or AES-128 (iOS via PDFKit).
We do not transmit your documents, so there is no transport-layer risk from Foglio. Third-party SDKs (AdMob, Google Play Billing) use TLS 1.2+ for their own network calls.
No security system is perfect. If you become aware of a vulnerability, report it to the address in Section 12.
10. International Data Transfers
We do not transfer your document contents internationally because we do not receive them. Purchase-verification requests and diagnostics may be processed by our Cloudflare Worker, Apple, Google, or Firebase in the United States and other countries where their infrastructure operates, under the safeguards described in their applicable privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top and, for material changes, present a notice inside the App on next launch. Continued use of the App after a change constitutes acceptance of the revised policy.
12. Contact
If you have questions about this Privacy Policy or your data, contact:
- Email: sxz953781@gmail.com
- Developer: ScanVio (individual developer)
For AdMob-related requests, use Google's My Ad Center. For Apple purchases, contact Apple Support; for Google Play purchases, contact Google Play Support.