Effective date: October 13, 2026
DocScan ("the app", "we", "us") is published by Rehman Ullah. This policy explains what information the app handles, why, and the choices you have. You can reach us at rehman.ullah.1179@gmail.com.
Your scans and documents are stored on your device. There is no account to create.
Scanning, text recognition (OCR) and most PDF tools run on your device.
When you use an AI feature or an Office conversion, the content you chose is sent to our servers to do that one task.
We show no ads, we do not sell your data, and we do not track you across other companies' apps or websites.
Optional usage statistics are anonymous and never include your documents. You can turn them off in the app.
Your documents and scans, folders, and settings (including your app-lock PIN, which is stored only as a salted hash). We do not receive these.
Camera and photos: the app asks for camera access to scan, and photo-library access only for photos you choose to import. Face ID or Touch ID, if you turn on app lock, is handled by iOS; we never receive your biometric data.
AI features (summarize, ask questions about a PDF, translate, extract tables, read scripts the device can't, solve a math problem from a photo): the extracted text, or the photo for text recognition and math, is sent to our server, which passes it to our AI provider (OpenAI) to produce the result.
Office conversions (for example PDF to Word, or Word to PDF): the file you choose is uploaded to our conversion service, converted, and returned to you.
This content is used only to carry out your request. We do not use it to train AI models and we do not build profiles from it.
An anonymous identifier (created automatically by Firebase Authentication, not linked to your name or email) and a device attestation (Firebase App Check), used to enforce daily usage limits and to prevent abuse of our servers.
Subscription information: if you subscribe, Apple processes the payment. We never receive your payment card or Apple ID details. Our subscription provider, RevenueCat, receives your anonymous identifier and purchase status to unlock Pro.
Usage statistics (optional): the app uses Google Analytics for Firebase to count things like "paywall viewed" or "export limit reached" so we can improve the app. These events contain no document names or content, and the app does not use the advertising identifier. In the EU, the UK and Switzerland this is off until you turn it on; elsewhere it is on by default. You can change it any time in Settings → Security & Privacy → Share usage data.
To provide the features you ask for (scanning, AI, conversions).
To enforce fair-use limits, prevent abuse, and keep the service secure.
To provide, restore and manage your Pro subscription.
To understand which features are used so we can improve the app (only if analytics is on).
To meet legal obligations.
Provider
Why
Data
Google (Firebase: Cloud Functions, Authentication, App Check, Remote Config, Analytics)
Runs our servers, anonymous sign-in, abuse protection, settings, optional statistics
Anonymous ID, device/app information, IP address, usage events
OpenAI
Produces AI results
Text or photos you submit to an AI feature
Document conversion service
Converts Office files and PDFs
Files you submit for conversion
RevenueCat
Manages subscription status
Anonymous ID, purchase status
Apple
App Store, payments, subscriptions
Handled under Apple's own terms and privacy policy
These providers act on our instructions and are bound by their own privacy and security terms. We do not sell personal information and do not share it for advertising.
Documents and scans: on your device until you delete them (deleting the app removes them).
Content sent for AI features: processed in real time to return a result; our servers do not store it. Our AI provider may keep API requests for a limited period for abuse monitoring under its own policy.
Files sent for conversion: uploaded to our conversion service, which makes the converted file available to the app through a temporary download link.
Usage counters and subscription status: kept against your anonymous identifier while the app is in use, and deleted or anonymized when no longer needed.
Analytics data: retained for the period configured in Google Analytics (we set the shortest practical period).
Turn off usage statistics at any time in the app.
Delete the app to remove all locally stored documents and settings.
Depending on where you live (for example the EU, UK, or California), you may have the right to ask us to access, correct, delete, or export information we hold, to object to or restrict processing, and to withdraw consent. Because the app has no accounts, we identify your data by your anonymous identifier; contact us at rehman.ullah.1179@gmail.com and we will help.
You can also complain to your local data-protection authority.
DocScan is not directed to children under 13 (or under 16 where required by local law), and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us and we will delete it.
The app connects to our servers over encrypted connections (HTTPS), and requests are authenticated. Access to our servers is limited. No method of transmission or storage is perfectly secure, so please avoid sending documents you aren't comfortable processing through cloud-based AI or conversion features. You can use the on-device features instead.
Our servers and service providers may be located in the United States and other countries. Where required, we rely on appropriate safeguards for transfers of personal data.
We may update this policy. We will change the effective date above and, for material changes, tell you in the app or on this page.
Rehman Ullah — rehman.ullah.1179@gmail.com