Privacy Policy

Last updated: August 12, 2026

Overview

ScanFile is designed as a local-first document scanner. Scanned documents, imported images, thumbnails, edits, and exported PDFs are stored on your device unless you choose to share, export, or back them up using your device or cloud services.

Information ScanFile stores on your device

The app stores scan images, page thumbnails, document titles, page counts, timestamps, filter choices, drawing edits, PDF export paths, and scan usage counters locally on your device. This information is used to show your library, reopen documents, edit pages, and manage the free scan limit.

Document content

ScanFile does not upload your document images or PDFs to a ScanFile server. If you use system sharing, save a file to another app, upload to cloud storage, or send a document through another service, that action is controlled by the app or service you choose.

Camera, Photos, and Files access

ScanFile requests camera access to scan documents. It requests photo library or file picker access when you choose to import images. The app only uses the media you select for scan creation, editing, and export.

Purchases and subscriptions

ScanFile uses App Store purchase systems and RevenueCat to present subscription offers, process subscriptions, check subscription status, restore purchases, and manage access to paid features. Purchase processing is handled by Apple. RevenueCat may receive subscription and entitlement information needed to provide these purchase features. Document content is not sent to ScanFile, Apple, or RevenueCat for subscription processing.

Diagnostics and analytics

ScanFile may receive basic app diagnostics through platform services such as Apple crash reporting or App Store analytics. These reports help identify reliability issues and do not require uploading your scanned document content to ScanFile.

ScanFile also uses PostHog for product analytics and session replay. This may include a pseudonymous analytics identifier, device and app technical information, app lifecycle events, screen names, purchase and restore events, upgrade taps, onboarding completion, scan and export counts, page counts, whether an export was watermarked, and whether a Pro entitlement is active. Session replay is configured to mask text inputs, images, and sandboxed views, and to avoid collecting logs or network telemetry. ScanFile does not intentionally send scanned document images, document text, document titles, PDFs, file paths, or the contents of your library to PostHog.

Advertising measurement

ScanFile uses the Meta SDK and RevenueCat to measure whether advertising leads to app installs, trials, and subscriptions. Meta and RevenueCat may receive device or app identifiers, a Meta-generated anonymous identifier, IP address, app install or activation activity, and subscription event information for attribution and campaign measurement. ScanFile disables client-side purchase logging in the Meta SDK so RevenueCat remains the single source for subscription events. Scanned documents, document text, titles, images, and PDFs are not shared with Meta for advertising measurement.

On iOS, ScanFile asks for permission before enabling access to Apple's advertising identifier (IDFA). If you do not grant tracking permission, ScanFile does not enable IDFA access, although Meta may still receive limited install or activation information and RevenueCat may send subscription events using other permitted identifiers, depending on the integration settings. You can change tracking permission at any time in iOS Settings under Privacy & Security > Tracking.

Notifications

If you opt in to notifications, ScanFile may send useful status updates, such as when file processing or an export is complete, as well as device-local reminders, occasional app news, or ScanFile Pro offers. A reminder may be scheduled after you leave a subscription screen without purchasing. Opening a notification can take you to the relevant file, app screen, or subscription offer configured for that notification.

For remote notifications, Apple or Google and Expo may process a device push token needed to deliver the notification. ScanFile may associate that token, your notification preference, device platform, and subscription-offer eligibility with your anonymous RevenueCat customer identifier or a ScanFile notification service. Push tokens are not used to upload or identify the contents of your scanned documents. You can opt out in ScanFile Settings or disable notifications in your device settings.

Data retention

Local documents remain on your device until you delete them or uninstall the app. Exported PDFs remain wherever you save or share them. App Store purchase records are retained by Apple according to Apple's policies.

RevenueCat, Meta, PostHog, Expo, and push-delivery providers may retain the identifiers, analytics, subscription, attribution, and notification-delivery information described above according to their service requirements and privacy policies. ScanFile retains information under its control only for as long as reasonably needed to provide the service, measure and improve the app, meet legal obligations, and resolve security or support issues.

Your choices

You can decline or disable tracking and notifications through iOS Settings, turn off notifications in ScanFile Settings, and delete locally stored scans from the app or by uninstalling ScanFile. You may contact ScanFile using the address below to ask a privacy question or request deletion of information under ScanFile's control. Some purchase records and information controlled directly by Apple or another provider may need to be managed with that provider.

Children

ScanFile is not directed to children and does not knowingly collect personal information from children.

Contact

For privacy questions, email chenglin@growlabsllc.com or visit the support page.