OnScanner Privacy Policy

1. Your documents

• The documents, pages, signatures and stamps you create are stored on your device, and the App has no account or cloud sync.
• If you use signing or file conversion, the file and the signature image are processed on our servers (Google Cloud, United States) and normally deleted within 2 days.
• If you use Extract Text, the pages you choose are sent to our AI provider, Google Vertex AI (United States), to read the text. They are sent without your name, email or any account details (the App has no accounts), and they are normally deleted within 2 days.
• Apart from these tools, a document leaves your device only when you share or save it yourself (for example to Files, Mail or another app). What happens to it after that is governed by the service you choose.
• You can delete all your documents and folders at any time in the App's Settings, under Delete Scan History.
• Deleting the App deletes your documents. We cannot recover them.

2. Information we collect and why

We do not ask for your name, email address or phone number, and you do not need an account.

A. Device and technical data. Device model, operating system, app version, language, region, time zone and a device identifier (IDFV on iOS, Android ID on Android). The device identifier is also used as your user ID, because the App has no accounts. Purpose: run the App, keep settings, measure performance.

B. Usage data. Which screens you open and which actions you take (for example "scan saved", "document shared", "paywall viewed"). These events do not contain the content, text or images of your documents. Purpose: understand how the App is used and improve it.

C. Purchase data. Your subscription status, the product you bought, trial status and purchase dates, provided by the App Store or Google Play. We do not receive your payment card details. Purpose: unlock premium features and restore purchases.

D. Advertising identifiers and attribution. On iOS, the advertising identifier (IDFA) is read only if you allow tracking in the App Tracking Transparency prompt. On Android, the advertising ID (GAID) is read unless you have turned it off in your device settings. We also receive which campaign brought you to the App. Purpose: measure our marketing campaigns. The App does not show ads.

E. Crash and diagnostic data. Crash reports, error messages and the state of the App at the time of a crash. Purpose: find and fix errors.

F. Push notification token. A token that lets us send you notifications if you allow them. Purpose: send reminders and updates.

G. Session recordings. For a sample of sessions we record how the App's screens are used (taps, scrolls, screen changes) to find usability problems. Text and images on the screen are masked in these recordings, so your documents, signatures and stamps are not visible in them.

3. Legal bases (users in the EEA, UK and Turkey)

• Contract: to provide the App and your subscription (A, C).
• Legitimate interest: to keep the App working, fix crashes and improve it (A, B, E).
• Consent: advertising identifiers on iOS (D), push notifications (F) and, where required, analytics and session recordings (B, G).
• Legal obligation: to comply with applicable law.

4. Service providers we share data with

We do not sell your personal data. We share the data above only with providers that help us run the App:

We may also disclose information if the law requires it, or to protect our rights, our users or the public.

5. Tracking and your choices

• iOS: you can allow or deny tracking in the prompt, and change it any time in Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID in Settings → Privacy → Ads.
• Notifications: you can turn them off any time in your device settings.

6. Device permissions

• Camera: to scan documents. Photos are processed on your device.
• Photo library: to import photos into documents and to save scans when you choose to.
• Notifications: only if you allow them.

7. Data retention

• Your documents stay on your device until you delete them or the App.
• Files sent for signing, file conversion or Extract Text are normally deleted from our servers within 2 days.
• Usage, diagnostic and attribution data are kept for up to 12 months and then deleted or anonymised.
• Purchase data is kept as long as needed for your subscription and for legal and tax obligations.

8. Security

We use encrypted connections (HTTPS/TLS) when the App talks to our service providers, and we work only with reputable providers. No system is completely secure, so please protect your device with a passcode.

9. International transfers

Our service providers may process data outside your country, including in the United States. Where required, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.

10. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, Turkey's KVKK or California's CCPA), you may have the right to access, correct, delete or move your personal data, to object to or restrict its processing, and to withdraw consent. To use these rights, email us at [email protected] and include your user ID, which you can find in the App's Settings screen, under Copy Account ID.

11. Children

The App is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has used the App, contact us and we will delete the related data.

12. Changes to this Policy

We may update this Policy. We will change the "Last updated" date and, for significant changes, tell you in the App. Using the App after an update means you accept the new Policy.

13. Contact

Tera One Yazılım Hizmetleri Anonim Şirketi, Hacı İsa Mah. 75. Yıl Cumhuriyet Cad. No: 5 İç Kapı No: 2, Urla / İzmir, Türkiye
Email: [email protected]
Website: https://aipdfscanner.app