Privacy Policy for Scanie

1. Summary

• Scanned documents, edits, and OCR text are processed primarily on your device. Scanie does not upload document content to a server operated by us.
• A document leaves your device only when you choose an action such as sharing it, downloading it to a user-accessible location, or uploading it to Google Drive or Microsoft OneDrive.
• Firebase Authentication processes account and security information needed for passwordless email-link or Google sign-in.
• Google ML Kit processes scanning and OCR features on-device, but its SDK may collect limited device, app, performance, configuration, and event data for diagnostics and usage analytics.
• Scanie does not contain advertising, behavioral-tracking, or third-party crash-reporting SDKs as of this policy's effective date. We do not sell personal information or use it for cross-context behavioral advertising.

2. Information handled by Scanie

2.1 Account and authentication information

Depending on the sign-in method you choose, Scanie and its authentication providers may process:

• your email address;
• a Firebase user identifier;
• your sign-in provider and provider-specific account identifier;
• profile information made available by the provider, such as a display name or profile photo;
• authentication credentials and tokens; and
• security and technical data such as IP address, user-agent information, and sign-in activity.

Scanie uses this information to create and authenticate your account, send and complete passwordless sign-in links, maintain your session, prevent abuse, and connect an account when you explicitly request a cloud-drive feature.

While passwordless sign-in is pending, the email address entered in the App is temporarily stored in local app preferences so the sign-in link can be completed. It is removed after successful completion, but may remain until it is replaced or you clear the App's data if sign-in is never completed.

2.2 Scanned documents and user content

The App processes content you choose to capture or create, including:

• document, receipt, photo, and ID-card images;
• multi-page scans and merged pages;
• filenames and document names;
• crop, rotation, filter, brightness, compression, and ordering choices;
• PDF, JPG, and PNG exports; and
• text recognized from document images through OCR.

Documents may contain personal, financial, identity, health, employment, or other sensitive information. You decide what to scan and where to send it. We do not operate a server that receives or reviews your scanned-document content in the current version of the App.

OCR is performed on-device. Recognized text is displayed in the App and is copied to the system clipboard only when you select Copy. Other apps or system services may be able to read clipboard content according to your device settings and operating- system rules.

2.3 Cloud-drive information

Cloud features are optional and are requested in context when you link an account or choose a cloud-save action.

Google Drive. Scanie requests your Google email address and the drive.file OAuth scope. This scope permits the App to create Drive files and access files created or explicitly used with the App; it does not grant broad access to every file in your Drive. When you choose Save to Google Drive, the selected file and its filename are transmitted to Google Drive.

Scanie's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Google API data is used only to provide the sign-in and user-facing Drive features you request. It is not used for advertising, credit decisions, surveillance, or sale to data brokers.

Microsoft OneDrive. Scanie requests the delegated Microsoft Graph Files.ReadWrite permission. Microsoft describes this permission as allowing an app to read, create, update, and delete the signed-in user's files. Scanie's implemented use is limited to authenticating your account and writing the file you choose to upload to the Scanie folder in your OneDrive. The file, filename, Microsoft account authorization, and related request metadata are processed by Microsoft when you use this feature.

The Microsoft access token is held in application memory for the running session and cleared by Scanie when you sign out. Google and Microsoft may separately retain authorization information under their own account and privacy policies.

2.4 Device, app, and diagnostic information

Google ML Kit SDK components used for document scanning and OCR may collect:

• device manufacturer, model, operating-system version, and available ML hardware;
• App package name and version;
• device or per-installation identifiers used for diagnostics and usage analytics;
• performance measurements such as latency;
• API configuration such as image format and resolution;
• feature input and output sizes;
• feature versions and events such as initialization, model downloads, detections, and resource releases; and
• error codes.

Google states that this SDK diagnostic data is encrypted in transit and is not transferred by ML Kit to third parties. Scanie does not add an independent analytics profile to this information.

2.5 Preferences, entitlements, and usage limits

The App stores the following information locally on your device:

• light or dark theme preference;
• high-definition capture preference;
• local save-location preference;
• Free, Premium, promotional, lifetime, restored-purchase, or organization entitlement status and promotional-expiry information; and
• the calendar month and number of source files counted toward the Free merge allowance.

The current version does not process payment-card details. If store billing or organization licensing is introduced, the store, payment provider, or license service may process purchase identifiers, receipts, subscription state, and related account information. This policy will be updated before we use such information in a materially different way.

2.6 Information you send to support

If you contact us, we may receive your email address, message, attachments, and other information you choose to provide. Do not send scanned documents or sensitive information unless it is necessary for your request.

3. How information is used

We and our service providers use information only as reasonably necessary to:

• authenticate users and maintain account security;
• capture, edit, recognize text from, organize, save, download, merge, delete, and share documents;
• perform a user-requested Google Drive or OneDrive upload;
• remember settings, feature access, and Free-tier usage limits;
• diagnose errors, maintain compatibility, prevent fraud or abuse, and improve reliability;
• respond to support, privacy, or legal requests; and
• comply with applicable law and enforce our rights.

We do not use scanned-document content to train our own machine- learning models and do not use Google user data to train generalized artificial-intelligence or machine-learning models.

4. Local storage and document control

Saved-document library files are stored in Scanie's app-specific storage. Files downloaded through the App may also be copied to the public Downloads/Scanie folder. Files in public storage may be visible to you, file managers, backup services, connected computers, and other apps as permitted by the operating system.

Temporary scan, crop, merge, render, and export files may be created while the App performs an operation. Some temporary files are removed after use; others may remain until Scanie or the operating system clears temporary/app data, or until the App is uninstalled.

Deleting a document from Scanie removes the selected local saved- library file. It does not automatically remove copies that you downloaded, shared, backed up, or uploaded to a cloud provider.

5. When information is shared

We disclose information only in the following circumstances:

1. At your direction. When you use the system share sheet, download a file, copy OCR text, or upload to a cloud drive, the selected content is disclosed to the destination you choose.
2. Service providers. Firebase/Google processes authentication and ML Kit diagnostic data; Google processes Google Sign-In and Drive data; Microsoft processes Microsoft identity and OneDrive data. These providers process information under their applicable terms and privacy policies.
3. Legal and safety reasons. We may disclose information if required by law or when reasonably necessary to protect users, the public, our rights, or the security and integrity of the App.
4. Business transfer. If the App or its operator is involved in a merger, acquisition, financing, reorganization, or sale of assets, relevant account or business records may be transferred subject to applicable law and this policy.

The receiving app or service selected through the system share sheet controls its own processing. Review that recipient's privacy practices before sharing a document.

6. App permissions

Scanie may request or use:

• Camera: to preview and capture scans and photos. Camera access is used only while you use scanning features.
• Photos/files or storage: on Android versions where required, to read or write selected document files and to place downloads in user-accessible storage.
• Internet: for authentication, sign-in links, cloud authorization, cloud uploads, and SDK/module delivery or diagnostics.

You can deny or revoke device permissions in system settings. Some features will not work without the permissions required for that feature.

7. Legal bases for EEA and UK users

Where the GDPR or UK GDPR applies, we process personal data under one or more of these legal bases:

• Performance of a contract: to provide authentication and the scanning, editing, storage, export, and cloud features you request.
• Consent: when you grant device permission, authorize a cloud account, or direct us to share or upload a document. You may withdraw consent through device/provider settings, although this does not affect earlier processing.
• Legitimate interests: to secure, diagnose, maintain, and improve the App, prevent abuse, and respond to support requests, balanced against your rights.
• Legal obligation: when processing is necessary to comply with law.

8. Retention and deletion

• Local documents: retained until you delete them, clear App data, or uninstall the App. Public Downloads and external backups may remain after uninstalling and must be deleted separately.
• Temporary files: retained until removed by an App workflow, operating-system cleanup, App-data clearing, or uninstalling.
• Authentication data: retained by Firebase while the account exists and for provider backup/security periods. Firebase states that authentication data is removed from live and backup systems within its stated period after the Firebase customer initiates deletion; logged IP addresses may be kept for several weeks.
• Local preferences and quota records: retained until overwritten, reset, cleared with App data, or removed by uninstalling.
• Microsoft token: held in memory for the session and cleared by Scanie on sign-out.
• Cloud copies: retained under your Google or Microsoft account until you delete them there, subject to the provider's retention rules.
• Support correspondence: retained only as long as reasonably necessary to resolve the request, maintain appropriate records, and meet legal duties.

Logging out does not delete your Firebase account or local/cloud files. To request deletion of your Scanie account and associated authentication data, contact support.northark@gmail.com. We may need to verify that the request comes from the account holder. You should separately delete local, downloaded, shared, and cloud copies that remain under your control.

9. Your rights and choices

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection regarding personal data, and to appeal or complain to a data-protection authority. To exercise a right, contact us using Section 15.

You can also:

• delete saved documents in the App;
• clear public downloads with your file manager;
• deny camera or storage permission in device settings;
• sign out of Scanie;
• revoke Scanie's Google access in your Google Account permissions;
• revoke Scanie's Microsoft access in your Microsoft Account or organization consent settings; and
• delete uploaded documents directly from Google Drive or OneDrive.

We do not sell personal information and do not share it for cross- context behavioral advertising. If applicable law gives you a right to opt out of such activities, there is no opt-out control because Scanie does not perform them.

10. Security

We use platform storage controls and provider-supported HTTPS connections to protect information in transit. Firebase states that Authentication data is encrypted in transit and at rest. Cloud providers apply their own security controls to accounts and uploaded files.

No storage or transmission method is completely secure. Protect your device with a screen lock, keep the operating system updated, review cloud-sharing settings, and avoid scanning or sharing information you do not need.

11. International processing

Third-party providers may process information outside your country. Firebase states that Firebase Authentication is operated from data centers in the United States. Google and Microsoft may process information in other locations where they or their service providers operate, subject to their terms and applicable transfer safeguards.

12. Children's privacy

Scanie is a general-audience productivity application and is not directed to children under 13 or any higher minimum age required in their jurisdiction. We do not knowingly seek personal information from children. If you believe a child has provided account information without appropriate authorization, contact us so we can review and delete it where required.

13. Third-party privacy information

• Google Privacy Policy
• Privacy and Security in Firebase
• Google API Services User Data Policy
• Google Drive API authorization scopes
• ML Kit Android data disclosures
• Microsoft Privacy Statement
• Microsoft Graph permissions reference

14. Changes to this policy

We may update this Privacy Policy when Scanie's features, service providers, or legal obligations change. We will update the effective or last-updated date and provide additional notice when required. Review the current policy before using new features that materially change how information is handled.

15. Contact us

For EEA or UK users, also provide the representative or data- protection contact where legally required: reach out at support email - support.northark@gmail.com.