CamScan
CamScan

Privacy Policy: CamScan

Last updated: 30 September 2026

In short: CamScan has no accounts and does not ask for your name or email. Everything you create in the App stays on your device. The App is free thanks to ads shown by Google AdMob, and uses Google Firebase to understand usage and fix crashes. You decide whether ads may be personalised and whether usage analytics may use identifiers, and you can change your mind at any time in the App under Settings → Privacy choices.

1. Who is responsible for your data

The controller of your personal data is Damian Szejnoch (“we”, “us”). You can reach us at [email protected].

2. Data that stays on your device

The following is stored only on your device: your scanned documents (page images, titles, recognized text), your signature and settings. We do not receive this data and cannot see it. It is included in your device backups (iCloud, Google or computer) according to your own settings, and it is removed when you delete the App.

3. Data processed when you use the App

Advertising: Google AdMob

Data
Device and app information (model, OS version, language), IP address (used to estimate approximate location), ad views and taps. The advertising identifier (IDFA) only if you allow tracking in the iOS prompt. On Android: the Google advertising ID (AAID), which you can delete or reset in the system settings.
Legal basis (GDPR)
Your consent (Art. 6(1)(a)) for personalised ads and for storing or reading information on your device. Without consent, Google shows non-personalised or limited ads, using only limited data for frequency capping, fraud prevention and aggregate reporting, based on our legitimate interest in funding a free app (Art. 6(1)(f)).
Retention
As set out in Google’s policies.

Usage analytics: Google Analytics for Firebase

Data
App events (e.g. screens opened, features used, whether a purchase screen was shown), app instance identifier, device model, OS and app version, language, approximate location (country/region).
Legal basis (GDPR)
Your consent (Art. 6(1)(a)). If you do not consent, Google Consent Mode sends only limited signals without identifiers.
Retention
Up to 14 months.

Crash reports: Firebase Crashlytics

Data
Technical details of a crash (stack trace, device model, OS and app version, free memory and disk space), installation identifier.
Legal basis (GDPR)
Our legitimate interest in keeping the App working (Art. 6(1)(f)).
Retention
90 days.

App configuration: Firebase Remote Config

Data
Installation identifier, app version, device language and country, used to deliver settings such as how often ads are shown.
Legal basis (GDPR)
Our legitimate interest in operating the App (Art. 6(1)(f)).
Retention
While the App is installed.

Purchases: Apple App Store and Google Play

Data
Payments are handled entirely by Apple (iPhone, iPad) or Google (Android). We only receive the status of your purchase (e.g. that ads are removed) and a transaction identifier: never your payment details.
Legal basis (GDPR)
Performance of a contract (Art. 6(1)(b)).
Retention
As long as needed to provide the purchase.

Support: email

Data
Your email address, name (if you provide it) and the content of your message.
Legal basis (GDPR)
Our legitimate interest in answering you (Art. 6(1)(f)).
Retention
Up to 2 years after the conversation ends.

Scanning documents with the camera

Data
When you tap Scan, the app uses the camera through the system document scanner. Scans are processed and saved only on your device. Nothing is uploaded to us.
Legal basis (GDPR)
Providing the feature you use (Art. 6(1)(b) GDPR); you can withdraw camera access in iOS Settings at any time.
Retention
Documents stay on your device until you delete them or remove the app.

Reading text from your documents (OCR) and signature

Data
Text recognition runs on your device with the system Vision framework, in many languages. The recognized text is stored with the document so you can search it. Your drawn signature is stored as an image on your device. None of it is sent to us.
Legal basis (GDPR)
Providing the feature you use (Art. 6(1)(b) GDPR).
Retention
Kept on your device until you delete the document or the signature.

Importing pictures and PDFs, exporting documents

Data
Import uses the system pickers for Photos and Files: the app only receives the items you choose. Export creates a PDF, images or text and hands it to the system share sheet, so you decide where it goes.
Legal basis (GDPR)
Providing the feature you use (Art. 6(1)(b) GDPR).
Retention
Exported files are temporary copies handled by the system and the app you share them with.

Providing this data is not required to use the App. If you decline consent, the App works the same way: you will just see non-personalised ads.

4. Who receives the data

We do not sell your personal data.

5. Transfers outside the EU

Google may process data in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework, under which Google LLC is certified, and on Standard Contractual Clauses approved by the European Commission.

6. Your choices

  • On first launch, the App asks for your consent. You can change it at any time in the App: Settings → Privacy choices.
  • You can allow or deny tracking in iOS: Settings → Privacy & Security → Tracking.
  • On Android you can delete the advertising ID: Settings → Privacy → Ads (on some phones: Settings → Google → All services → Ads).
  • You can remove ads entirely with an in-app purchase.
  • Deleting the App stops all data collection and resets the App’s identifiers.

7. Your rights

Under the GDPR you have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format, and object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before the withdrawal.

Because the App has no accounts, we usually cannot link data to you personally. To exercise your rights, write to [email protected] and we will help as far as we can.

You also have the right to lodge a complaint with a data protection authority, in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl: or with the authority in your country.

8. Profiling

If you consent to personalised ads, Google may use your data to build an interest profile to choose ads. We do not make any decisions about you based solely on automated processing that have legal or similarly significant effects.

9. Children

The App is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy, for example when the App or the services it uses change. The date at the top shows the latest version. We will announce significant changes in the App or on this page.

11. Contact

Questions about privacy: [email protected]