Privacy Policy for Cam & Scan

1. Our Commitment to You

At VisionLab AI, we believe your documents belong to you. We built Cam & Scan to make your life easier, not to monetize your personal data. Since version 2.0 ("Edge AI"), all document processing, including reading the text on your pages, happens on your device. This policy explains, in plain language, what little data we do handle and why.

2. What Data We Collect (And What We Don't)

We collect only the data needed to run the app, manage free scan credits and subscriptions, and keep the service reliable.

• Document Images (Not Collected): Edge detection, cropping, perspective correction, filters and PDF creation all run locally on your device. Version 2.0 and later do not upload, transmit or store your images, documents or camera feed on our servers. Earlier versions of the app (before 2.0) uploaded scan images to our server for processing; see Section 6 to have any such images deleted.
• Text From Your Documents (Not Collected): When you use the Text feature, the text is read on your device. The text itself is never uploaded, transmitted or stored on our servers. It stays on your phone unless you choose to copy or share it.
• Device Identifier: We use your device's Android ID (SSAID), a random identifier set by Android for this app, to keep track of your free scan credits and to link your subscription status, without requiring an account. The app also signs in anonymously with Firebase, which creates a random user ID that is not tied to your name or email.
• Scan Telemetry: For each scanned page we record technical details:
  • your device model, Android version, the app version, the processor type and a memory size range (for example "4-6GB", not the exact amount);
  • when the page was scanned, the image size, which on-device models ran, their confidence scores and the corner positions they found and that were finally used, and whether you moved the corners (numbers only, never the image);
  • two numbers describing the photo's sharpness and brightness, calculated on your device (not the photo itself);
  • the time each processing step took, the filter used, your remaining credits and whether a watermark was applied;
  • what happened to the scan (saved, exported as PDF or image, shared or discarded) and the number of pages;
  • if you use the Text feature: the language you chose, how long reading took, how many lines and characters were found, the average recognition confidence, whether your phone used its faster processing mode, and whether you copied or shared the text. Never the text itself.
  This data is linked to your device identifier (it is pseudonymous), but it never contains your images, the text or content of your documents, your name or your email.
• Network Data: When the app contacts our server, your IP address is processed to protect the service from abuse (rate limiting) and may appear briefly in our hosting provider's server logs.
• Purchase Information: If you subscribe, Google Play processes the payment. We and RevenueCat receive the subscription status, product and purchase history needed to unlock Pro. We never see or store your card or payment details.
• Voluntary Feedback: Any information you choose to include if you email our support team.

We do not collect your name, email address, contacts, location (GPS) or advertising ID.

3. How We Use Data (Why We Need It)

• To Provide the Service: To keep track of your scan credits, apply the free-tier watermark rules, unlock Pro features and restore your subscription.
• To Manage Usage Limits & Prevent Fraud: Because there is no account, the device identifier lets us keep your credit balance consistent and stops the free tier from being reset by reinstalling the app. Firebase App Check helps confirm that requests come from the genuine app.
• To Improve Reliability: Scan telemetry helps us find devices where page detection or text reading is slow or inaccurate, see which features are used, and improve the on-device models.
• Model Training (No User Documents): We train our computer vision models on synthetic data and public datasets. We never use your documents to train our models.

4. Permissions

• Camera and photos: The app uses Android's own camera and photo picker. You choose each photo, and the app only receives the images you capture or select. It does not request access to your whole gallery.
• Storage (Android 9 and older only): Used only to save the PDFs and images you export.
• Internet: Used to sync scan credits, subscription status and telemetry.

5. Third-Party Services

We use the following service providers, each only for the purpose described:

• Google Cloud (Cloud Run): Hosts our server, which manages scan credits, subscription updates and data deletion.
• Google Firebase: Anonymous Authentication (random user ID), App Check (verifies the genuine app) and Cloud Firestore (stores your credit balance and subscription status, keyed to your device identifier).
• Supabase: Stores scan telemetry. It also holds images uploaded by app versions before 2.0, which can be deleted as described in Section 6.
• RevenueCat: Validates subscriptions, records purchase history and restores Pro access.
• Google Play: Processes payments and app updates under Google's own privacy policy.

Advertising: Cam & Scan does not currently show ads. If we introduce ads in the future, we will update this policy before doing so.

6. Your Rights and Data Deletion

Cam & Scan has no email or password login. Your credits and subscription status are tied to your device identifier and your Google Play account.

• Delete your data in the app: Open My Scans → menu → "Delete Account & Data" (also available as "Delete my data" on the subscription screen). After you confirm, the app deletes, from our servers, your scan telemetry, any images uploaded by earlier app versions, your credit and subscription record, your RevenueCat customer record and your anonymous sign-in, and then clears the app's data on your device.
• Delete by email: You can also email visionlab.apps@gmail.com with the subject "Data deletion request".
• Subscriptions: Deleting your data does not cancel a subscription. You can manage or cancel it at any time in Google Play → Payments & subscriptions → Subscriptions, or from the app via the PRO badge → "Manage or cancel subscription".
• Scans on your device: Your scans stay in the app's private storage on your phone. They are removed when you delete them in the app or uninstall it. PDFs or images you export to other folders remain until you delete them.

7. Data Retention

• Credit and subscription record: Kept while you use the app, until you delete your data.
• Scan telemetry: Kept for up to 12 months, then deleted, or earlier if you delete your data.
• Server logs: Kept by our hosting provider for a limited period (typically 30 days) for security and troubleshooting.

8. Data Security

• Local Processing: Your documents are processed in your device's memory and are not sent to us.
• Encryption in Transit: All data between the app, our server and our providers is sent over HTTPS.
• Access Control: Our server only accepts requests from the genuine app (Firebase App Check), and secret keys are kept in a managed secret store, not in the app.
• No Selling: We do not sell, rent or share your data with advertisers or data brokers.

9. Age Requirement and Children's Privacy

Cam & Scan is intended for users aged 18 and older and is not directed to children. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has used the app, contact us and we will delete the related data.

10. Changes to this Policy

We may update this policy to reflect changes in the app or legal requirements. We will notify you of significant changes via an in-app notice or by updating the "Effective Date" at the top of this page.

Contact Us

If you have any questions about your data or this policy, please contact us at: visionlab.apps@gmail.com