Privacy

Privacy Policy

ScannerCam Light is a free, offline, on-device document scanner for iOS and Android. This policy explains what data the app touches, where it stays, and the few cases in which anything ever leaves the device.

Effective date: 2026-09-08

Summary

ScannerCam Light is built to keep documents private. Your scanned documents, the text recognised from them, and everything derived from them stay on your device and are never uploaded. A few optional features do use the network, and some of that happens automatically rather than only when you ask for it: where the optional feedback feature is available, the app checks whether the feedback service is reachable when the library screen opens, and opening the feedback form loads a Cloudflare verification challenge that receives your device's IP address — both before you type or send anything. Where an in-app tip is offered, opening the support screen asks the App Store for the available tip options. The Network access, Feedback and In-app purchases and tips sections below describe every case. There are no user accounts, no analytics, no ads, no tracking, and personal data is never sold.

What is collected

Almost nothing. ScannerCam Light has no user accounts and no analytics or tracking of any kind; no ads are shown, and no data is ever sold. No document, no page image, and no text recognised from a document is ever sent to any server. What does leave the device is limited to the cases described in the Network access, Feedback and In-app purchases and tips sections below: the optional feedback feature — including two requests it makes automatically, before anything is submitted — the App Store query for the available tip options where an in-app tip is offered, and any donation link you tap.

Where your data lives

• Scanned images are stored as files on your device only.
• Document titles and text are kept in a local database on your device.
• Text recognition (OCR) runs entirely on your device — no images or text are sent anywhere.

Network access

Beyond the cases described in this section, the app makes no network requests of its own — but some of these cases are automatic rather than something you trigger. Outbound connections happen when an optional donation link is tapped, opening your browser to a third-party donation page that the developer of ScannerCam Light does not control and receives no data from; where an in-app tip is offered, opening the support screen asks the App Store for the available tip options before any tip is made, and Apple separately handles the network side of an actual purchase, as described in the In-app purchases and tips section below; and, where the optional feedback feature is available, in connection with that feature as described in the Feedback section below — which includes a check of whether the feedback service is reachable when the library screen opens, and a Cloudflare Turnstile challenge loaded when the feedback form opens, neither of which waits for you to submit anything.

On Android, the released app does not request the INTERNET permission at all, so it cannot make any network request; the optional feedback feature therefore cannot reach its service on a released Android build, and is not offered there. On iOS there is no equivalent permission system, and the automatic requests described above are real: the feedback-service check, the Cloudflare Turnstile challenge, and the App Store tip-options query all happen without you triggering them. Apart from those and the links you tap yourself, the app makes no further requests.

Feedback

The app includes an optional Send feedback feature. It is available only in a build that enables it and can reach the network, which excludes released Android builds — those do not request the INTERNET permission, so the feature is not offered on them. Where the feature is available, two things happen before you type anything: when the library screen loads, the app makes a small request to check whether the feedback service is currently reachable; and when you open the feedback form itself, it loads a Cloudflare Turnstile human-verification challenge inside the form, which means Cloudflare receives a request and your device's IP address at that point. Neither of these two steps sends your message, your email, or anything about your documents — they happen automatically and are not gated on Submit.

Your message, and the fields below, are sent only when you tap Submit:

• Your message — the text typed into the feedback form (required).
• Your email address — only if one is chosen to be entered. Providing an email is entirely optional.
• Non-personal diagnostics — app version, OS version, device model, and language/locale. These help reproduce reported issues and contain no information about your documents.

On Submit, this data is sent to a Cloudflare Worker service, which creates a publicly visible issue in the app's GitHub repository. This means your message text will be visible to anyone on the internet, and that if an email address is included, it will also be publicly visible in the GitHub issue.

The app warns about this public visibility before submission. Sensitive information should not be included in a feedback message, and the email field can be left blank if that public visibility is not wanted.

No scanned documents or their contents are ever sent. Feedback submission is strictly limited to the fields listed above.

In-app purchases and tips

Depending on your platform and app version, an optional in-app tip may be offered on iOS; whether any tip options actually appear also depends on Apple's own App Store settings at the time, so the support screen can legitimately show none. Where the tip is offered, opening the support screen asks the App Store for the available tip options as soon as that screen opens, before and independently of any tip being made. Tips themselves are processed entirely by Apple; the developer receives no payment-card details, no billing address, and no other payment data — only Apple's aggregate, anonymous sales reporting. On Android there is no in-app purchase; where a donation option is offered at all, tapping its link opens your browser.

Ko-fi and Bitcoin donation options may also be offered, depending on platform and app version. These are independent of any Apple in-app purchase and, like other donation links, simply open a third-party page in your browser.

Sharing

Your identity is never handed to anyone, because the app does not hold one. There are no accounts, no sign-in, no advertising identifier, and no profile — nothing that says who you are. Personal data is never sold or rented, and nothing is ever shared for advertising or profiling. No scanned document, page image, or recognised text is ever sent to any third party.

Where the app does contact a third party, that party learns only what is described in the Network access, Feedback, and In-app purchases and tips sections above: Cloudflare sees your device's IP address, as any server does when your device reaches it, plus an anti-abuse attestation that certifies a genuine install rather than identifying you; GitHub sees the feedback message you wrote, and an email address only if you chose to type one; Apple sees the payment details you give Apple directly, which the developer never receives. Downloading the app from Apple or Google, and visiting Ko-fi or sending Bitcoin, are between you and them — the app passes them nothing about you.

When a document is exported or shared, the destination is chosen through your device's own share sheet. That action, and where the file goes, is entirely under your control.

Retention

A scanned document and its metadata are kept on your device for as long as you keep them — nothing is deleted automatically, and nothing expires on its own. A document is removed only when you delete it within the app, or when you uninstall the app itself.

Uninstalling ScannerCam Light removes the local database and every image file it created; nothing survives the uninstall. Because no server-side copy of any document is ever made, there is no server-side copy to request the deletion of. Deleting on your device removes the app's own files and database rows straight away; how soon the underlying storage is actually overwritten is decided by your operating system and device, which the app does not control.

Your rights

Privacy laws such as the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) give individuals rights over their personal data, including the right to access, correct, delete, or object to the processing of it.

Because ScannerCam Light collects and stores no personal data on any server, there is normally nothing to export, correct, or erase: the data described in this policy exists only as files and a database on your own device, under your direct control at all times, and it can be removed whenever you like by deleting a document or uninstalling the app.

The main exception is feedback voluntarily submitted through the in-app feedback form. That submission relies on your consent as its lawful basis: your message, email, and diagnostics are sent when you tap Submit. The requests the feedback feature makes before that — described in the Feedback section above — are automatic and are not gated on that consent, and one of them discloses your device's IP address to Cloudflare when the form opens. A submitted feedback issue becomes a public GitHub issue; its removal can be requested by writing to the support email below, though no timeframe is promised, and by then the issue may already have been copied, cached, or indexed elsewhere, which the developer of ScannerCam Light has no way to undo. Where the law that applies to you requires a response within a set period, that requirement applies regardless of anything above.

Children's privacy

The app is not directed at children, has no user accounts, asks no one for their age or any other personal detail, shows no ads, contains no analytics or tracking SDKs, and never sends a scanned document anywhere. It is not, however, silent on the network: where the optional feedback feature is available, the app checks whether the feedback service is reachable when the library screen opens, and opening the feedback form loads a Cloudflare Turnstile challenge that discloses the device's IP address to Cloudflare — both automatically, without anyone choosing to send anything. On iOS, opening the support screen also asks the App Store for the available tip options, again without any deliberate action. All of this applies to users of any age; the Network access section above lists every case.

Changes to this policy

The developer of ScannerCam Light may update this policy from time to time, for example to reflect a new feature or a change in applicable law. The effective date at the top of this document shows when the current version took effect.

No separate notice is sent when this policy changes. The copy bundled inside the app reflects the version that was current when that release of ScannerCam Light was built; the current version is the one published on the ScannerCam Light website, and the effective date above shows which version you are reading.

Contact

Questions can be sent to scannercamlight.line149@passmail.net. See also the Terms of Service for the legal terms governing use of ScannerCam Light.