Privacy Policy

The short version

• Your scans never leave your phone unless you share them or turn on sync. Documents, the text recognized in them, signatures, IDs and barcode cards are stored and processed on your device. If you turn on sync to iCloud Drive or Google Drive, PDF copies go to your own account there. We never receive your scans.
• No account. You don't sign up, and we don't ask for your name, email or phone number in the App.
• Limited data for subscriptions. To show ScanMojo Pro offers and know whether you've subscribed, the App uses Superwall, which receives device, usage and purchase information described below. It never receives your documents.
• Usage counts and crash reports, which you can turn off. To see which features are used and fix crashes, the App uses Google's Firebase. It records things like “a scan was saved”, never what's in a scan. You control it in Settings › Privacy › Share Usage Data.
• No selling, no ad tracking. We don't sell personal information, show ads, or track you across other companies' apps and websites.

Information that stays on your device

Everything you create in the App is saved in the App's private storage on your phone: scanned pages and the original photos, text recognized from them, titles and folders, markups and signatures, IDs and passports, and barcode cards. Pages are saved with iOS data protection, so they're encrypted whenever your phone is locked. Text recognition, edge detection and clean-up run on the device, and IDs can be locked behind Face ID.

We have no access to this content. It leaves your phone only when you choose to share, export, print, copy or save it somewhere else, for example to Files, Photos, Mail or another app, or when you turn on sync. If you back up your iPhone to iCloud or a computer, Apple includes the App's data in that backup under Apple's own terms.

Sync is a ScanMojo Pro option, off until you turn it on: Sync to iCloud Drive on iPhone, or Sync to Google Drive on Android. While it's on, the App saves a PDF of each scan to a ScanMojo folder in your own iCloud Drive or Google Drive and keeps it up to date, where Apple or Google store it under their own terms. IDs and passports are included only if you turn that on as well. On Android the App can reach only the files it creates in your Google Drive. The copies go straight from your phone to your account; we never receive them. Turning sync off stops the copying, and the copies already made stay in your drive until you delete them.

You can delete a scan in the App (it moves to Recently Deleted, where you can delete it for good), and deleting the App removes everything it stored.

Permissions the App asks for

• Camera, to scan documents and barcodes. Camera images are processed on the device.
• Photos: importing uses Apple's photo picker, which gives the App only the photos you select. If you save a scan to Photos, iOS asks for permission to add to your library.
• Files: importing uses Apple's document picker, which gives the App only the files you choose.
• Face ID on iPhone, or face or fingerprint unlock on Android, to lock IDs and passports. Your phone handles the match; the App only learns whether it succeeded and never receives biometric data.

You can change these at any time in your phone's Settings.

Subscriptions and payments

ScanMojo Pro is sold through Apple's App Store. Apple processes your payment; we never see your payment card or Apple Account details. Apple shares with us transaction information such as the plan, purchase and renewal dates, and whether a subscription is active, trial or refunded, together with sales reports. Offer codes are redeemed through Apple in the same way.

Superwall

The App uses Superwall (Superwall, Inc.) to show ScanMojo Pro offers, test different versions of them, and check whether you have access to Pro. When the App runs, Superwall may receive:

• device and app details, such as device model, iOS version, app version, language, region, time zone and App Store country;
• identifiers generated for the App, such as a random user ID and Apple's identifier for vendor (IDFV), but not the advertising identifier (IDFA);
• your IP address, which may be used to estimate your approximate location (country, region or city);
• usage of the offers, such as when an offer is shown, closed, or leads to a trial, purchase or restore, and your subscription status and purchase history;
• the number of documents in your library, so offers can be timed, never their titles or contents.

We use this to run and improve the Pro offers and to unlock Pro for subscribers. Superwall processes it on our behalf; see Superwall's privacy policy.

Usage data and crash reports (Firebase)

The App uses Firebase (Google LLC) for three things: Google Analytics for Firebase, to count how features are used; Firebase Crashlytics, to tell us when the App crashes; and Firebase Remote Config, to switch a feature on for some people before everyone, so we can compare versions. When Share Usage Data is on, Firebase may receive:

• which features are used and when, such as a scan being saved (whether it was a document, ID or passport, and how many pages), an import, an export and its format, text being extracted, a search result being opened, a widget or shortcut being used, an offer for ScanMojo Pro being shown or accepted, and that something failed;
• crash reports: what the App was doing when it crashed, with device model, iOS version, app version, free memory and storage, and orientation;
• device and app details, such as device model, iOS version, app version, language and country, and your IP address, from which Google estimates an approximate location (country or city) and which it does not store with the events;
• identifiers generated for the App: an app-instance ID, a Firebase installation ID and a Crashlytics installation ID. The App does not use the advertising identifier (IDFA), and we have turned off Google's advertising features.

Firebase never receives your documents, their titles, the text recognized in them, or what you search for. We use this information only to understand and improve the App. Google processes it on our behalf; see Privacy and Security in Firebase.

Your choice. Share Usage Data, in the App under Settings › Privacy, turns all of this on or off at any time. It starts off if your phone's region is in the European Economic Area, the United Kingdom or Switzerland, and stays off unless you turn it on, which is your consent; elsewhere it starts on. Where we rely on a legal basis other than consent, it is our legitimate interest in keeping the App working and improving it.

The website

The Site is hosted by Railway, whose servers log technical information such as IP address, browser and requested pages to deliver the Site and keep it secure. We use Google Analytics to count visits and see which pages are useful. It sets cookies and receives your IP address, browser and device details, and the pages you view; we don't use it for advertising. You can block these cookies in your browser or opt out with Google's opt-out add-on, and Google describes its practices in its privacy policy. The App doesn't use Google Analytics. If you email us, we receive your email address and whatever you write, and use them only to reply.

How and why we use information

We use the information above only to:

• provide the App and ScanMojo Pro, including unlocking Pro and restoring purchases (performance of a contract);
• understand and improve the Pro offers and the Site, and keep them secure (our legitimate interests);
• answer your messages (our legitimate interests, or steps you ask us to take);
• comply with the law.

We don't sell or rent personal information, share it for cross-context behavioral advertising, or use it to make decisions that have legal or similar effects on you.

Who we share information with

Only service providers acting for us (Apple for purchases, Superwall for offers and subscription status, Google (Firebase) for usage counts and crash reports in the App, Railway for hosting the Site, and Google Analytics for Site visits), and authorities where the law requires it. If our business is ever transferred, this policy would continue to apply to the information transferred.

How long we keep it

Content on your device stays until you delete it or the App. Superwall keeps offer and subscription data for as long as needed to provide its service to us. Firebase keeps usage events for up to 14 months and crash reports for 90 days. Emails are kept as long as needed to help you and then deleted.

Your choices and rights

Depending on where you live (for example in the EU, UK or California), you may have the right to access, correct, delete or receive a copy of your personal information, object to or restrict how it's used, and not be discriminated against for using these rights. Because the App has no account, the easiest way to delete what's stored on your phone is to delete the App. To stop usage data and crash reports, turn off Share Usage Data in the App's Settings. For anything held by us, Superwall or Google, email [email protected] and we'll respond within 30 days. You may also complain to your local data protection authority.

Children

The App and Site are not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we'll delete it.

Security and international transfers

We rely on iOS data protection for content on your device and on our providers' safeguards for the rest. Our providers may process information in the United States and other countries, using appropriate safeguards such as standard contractual clauses where required.

Changes to this policy

If we change this policy, we'll update the date above, and for significant changes we'll give notice in the App or on the Site.

Contact

ScanMojo
Email: [email protected]