This Privacy Policy explains how ScanLeaf ("the app", "we", "us") handles information. ScanLeaf is provided by Ata Doğmaz. Your document content is designed to stay on your device. We use limited services for anonymous product analytics and subscriptions, as explained below.
ScanLeaf has no user accounts and no document-storage servers. Your scans, images, extracted text (OCR), and PDFs are created and stored on your device. We do not upload, inspect, sell, or use them for advertising. We use limited anonymous analytics to understand basic app usage and RevenueCat to provide Pro subscriptions. We do not use cross-app tracking or data brokers.
We do not require you to create an account and we do not ask for your name, email address, or contacts. Your documents and the text recognized from them never leave your device through ScanLeaf, except when you deliberately export or share them using the system share sheet or save them to a location you choose.
With your permission, ScanLeaf uses the camera to capture documents. Camera images are processed on your device to detect edges and enhance pages. They are stored locally and are not transmitted to us.
If you choose to save an exported page image, ScanLeaf writes it to your photo library with your permission. If you import an image, it is read only to create a document on your device. We do not browse or upload your photo library.
Document detection, image enhancement, text recognition (OCR), PDF creation, compression, and search all run locally using Apple frameworks on your device. This content is not sent to us or to any third party for processing.
We use PostHog Cloud EU to understand whether ScanLeaf's core features and subscription screens are working. PostHog receives a randomly generated anonymous identifier and limited events such as app installed, updated, opened, or backgrounded; paywall reached or viewed; and the type of plan selected.
These events may include basic technical details such as the app version and build, operating system and device type, locale, screen size, network type, and whether the app is running through TestFlight or a simulator. We configure PostHog not to store IP addresses or derive location from them.
Analytics events never include your scans, photos, PDFs, OCR text, filenames, or other document content. We do not record screens or sessions, create heatmaps, automatically capture taps, use analytics for advertising, or track you across apps or websites.
Purchases of ScanLeaf Pro are processed by Apple through the App Store. We never receive or store your payment card details. To validate purchases and keep your Pro access in sync across your devices, we use RevenueCat, Inc. as our in-app purchase infrastructure provider. RevenueCat uses a randomly generated anonymous app user identifier to check your Pro access. If a purchase exists, RevenueCat receives purchase, receipt, and subscription-status information from Apple. We do not give RevenueCat your name or email. Apple's and RevenueCat's handling of this information is also governed by their own privacy policies.
ScanLeaf can export a backup archive (ZIP) of your documents when you ask it to. You control where that file is saved (for example, Files, iCloud Drive, or another app). We do not receive a copy. Protecting exported backups is your responsibility once they leave the app.
ScanLeaf is a general-purpose productivity tool and is not directed to children. We do not knowingly collect personal information from children.
Because your content stays on your device, you remain in control of it. Deleting a document removes it from the app, and deleting the app removes its on-device data. Anonymous analytics is currently retained for up to 12 months to understand feature usage and reliability. Purchase records held by Apple and RevenueCat are governed by their respective policies. Deleting the app does not automatically delete anonymous analytics or purchase records already received by these providers. You may contact us to object to analytics processing or request deletion where applicable.
Depending on where you live, you may have rights over your personal data under laws such as the GDPR or CCPA. Since we do not maintain servers that hold your documents or a profile about you, most data stays under your direct control on your device. For requests involving anonymous analytics, we may need to give you simple steps to locate the app's anonymous identifier. For questions about purchase data, you can also contact Apple or RevenueCat.
If you are in the European Economic Area or the United Kingdom, the following applies. The data controller for the limited processing described here is Ata Doğmaz, contact [email protected].
We do not receive, store, or have access to your documents or the text recognized from them — that content stays on your device. The limited data processed off-device consists of anonymous identifiers, product-interaction and technical analytics, and purchase or subscription status.
Legal bases (Art. 6 GDPR): we rely on performance of a contract to provide and validate subscriptions, and on our legitimate interests in understanding basic feature usage, maintaining reliability, preventing fraud, and keeping Pro access in sync. We do not use this data for advertising or cross-app tracking. You may object to analytics processing by contacting us.
Service providers and transfers: PostHog processes analytics in its EU cloud region. Apple and RevenueCat may process subscription-related data in other countries. Where required, these providers use recognized transfer safeguards such as Standard Contractual Clauses.
Your rights: you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability, subject to legal limits. You can delete on-device data at any time by removing documents or the app. For anonymous analytics or purchase data, you can contact us; purchase requests may also be directed to Apple or RevenueCat. You also have the right to lodge a complaint with your local data protection supervisory authority.
We may update this Privacy Policy as the app evolves. Material changes will be reflected by updating the effective date above and, where appropriate, within the app.
If you have questions about this Privacy Policy, contact Ata Doğmaz at [email protected].