Summary
DocuScanner is a document scanner that runs entirely on your device. Your scans, the text read from them (OCR), titles, and folders are kept in the app's private storage on your own phone.
We do not run servers for your documents. There are no uploads, no account to create, no password, and no place for us to look at what you scanned — because that place was never built.
Documents leave your phone only when you tap Export and then Share or Save, and you choose the destination.
The only data that leaves the device without you choosing a destination is the ad request sent to Google AdMob. The app is free and ad-supported; details are in section 5.
Data Processed
DocuScanner processes the following, all of it inside your device:
| Type | Where it comes from | What it is for |
|---|---|---|
| Page images | Android's own scanner screen, PDF files you import, or images you pick through the system file picker | The contents of the documents you save |
| OCR text | Read from the page images by ML Kit running on the device | Searching inside documents, and the text layer in exported PDFs |
| Titles, folders, document types | Typed by you, or suggested by the app from keywords in the OCR text | Organising the document list |
| Settings | Your choices on the Settings screen (language, paper size, file size, layout) | Remembering your preferences between sessions |
| Device advertising ID | Android, read by the Google Mobile Ads SDK | Serving ads (see section 5) |
What DocuScanner does not process
- No account. No sign-up, password, email address, or phone number.
- No location. The app never reads GPS, in use or in the background.
- No contacts, microphone, photo gallery, or other apps' history.
- No analytics and no crash reporting. No Firebase Analytics, no Crashlytics.
- No user profile. The app builds no history of who you are, what you scanned, or what you searched for.
How Data Is Used
- Building pages — images are cropped, straightened, rotated, and filtered as you choose. The original image is never overwritten, so every edit can be undone.
- Reading the text (OCR) — the text on each page is read by ML Kit on the device and stored so documents can be found by their contents.
- Recognising document types — keywords in the OCR text are matched against simple rules inside the app (not an AI model, and not an online service) to suggest a title such as "Receipt 27 Sep 2026".
- Producing exports — PDF, JPEG, or plain text files are built on the device, including when you ask for a specific file size limit.
- Serving ads — the Google Mobile Ads SDK requests ads from Google's servers.
Storage & Sharing
Everything is stored in two places, both private to this app and unreadable by other apps:
- Image files — originals, edited versions, and thumbnails, in the app's private internal storage.
- A local database — titles, folders, page order, document types, and OCR text, in an SQLite database on the same device, along with its search index.
When data leaves the device
Only when you do one of these:
- Tap Export → Share and pick a destination app (WhatsApp, Gmail, and so on). From the moment that app receives the file, its own privacy policy applies.
- Tap Export → Save and pick a folder through Android's file picker. The app writes only to the folder you point it at.
This app contains no automatic cloud backup. If Android's own backup (Google One / Backup by Google) is enabled on your phone, that copying is done by Android into your own Google account, outside this app's control, and is governed by Google's privacy policy.
How long data is kept
- Documents stay until you delete them.
- Deleted documents go to the Trash for 30 days, after which the app removes them permanently.
- Uninstalling the app permanently deletes all of the above from the device. Files you already exported or shared are not affected, because those files now belong to the folder or app you sent them to.
Third-Party Services
DocuScanner uses the following Google components. Each one is governed by Google's privacy policy.
| Service | Used for | Data that flows |
|---|---|---|
| Google AdMob (Google Mobile Ads SDK) |
One native ad in the document list, and a banner at the bottom of the Search, Trash, and Settings screens | Device advertising ID, general device information, and IP address are sent to Google's ad servers. Your document contents are never included. |
| Google User Messaging Platform | Showing the ad consent form in regions that require one (e.g. Europe) | Your consent choice, stored on the device by Google's SDK |
| ML Kit Document Scanner (part of Google Play services) |
The scanning screen: opening the camera, detecting page edges, cropping and straightening | Images are processed on the device by the Google Play services component and then handed to DocuScanner. Google Play services may download the scanner module the first time it is used. |
| ML Kit Text Recognition (Latin script model, bundled in the app) |
Reading the text on each page | None. The model ships inside the app and runs without an internet connection. |
DocuScanner does not use Firebase Analytics, Crashlytics, Google Sign-In, Google Drive, Play Billing, or any third-party analytics service. If one is ever added, this policy is updated first — not afterwards.
App Permissions
DocuScanner requests no camera, storage, location, contacts, or microphone permission. Scanning uses Google Play services' own scanner screen — that component opens the camera under its own permission and hands the photos to this app only once you are done. Saving an export uses Android's file picker, which grants access to nothing but the folder you point at.
The permissions actually declared in the app package, all of them coming from the Google libraries it uses:
INTERNETandACCESS_NETWORK_STATE— used to load ads.ACCESS_ADSERVICES_AD_ID,ACCESS_ADSERVICES_ATTRIBUTION,ACCESS_ADSERVICES_TOPICS— Android's Privacy Sandbox, brought in by the Google ads SDK.WAKE_LOCK,FOREGROUND_SERVICE,BIND_JOB_SERVICE,DUMP— brought in by the Google Play services libraries.
Data Security
Because documents live in the app's private storage rather than shared storage, Android prevents
other apps from reading them. When you share a file, DocuScanner uses Android's official
FileProvider mechanism, so only the file you picked is granted temporary access.
It should be said plainly: the safety of your documents also depends on the phone itself. A phone with no screen lock, or a rooted one, opens the way for other apps to read any app's private storage, including this one's.
Your Controls
- Delete individual items — pages and documents can be deleted inside the app, and deleted documents can be restored from the Trash for 30 days.
- Delete permanently — empty the Trash, or wait 30 days.
- Delete everything — uninstalling the app removes all documents, OCR text, and settings from the device.
- Clear temporary files — available on the Settings screen.
- Ad controls — the advertising ID can be reset or deleted in Android Settings → Google → Ads. In regions that require ad consent, you are asked for your choice the first time the app opens.
Because there is no account and no server, none of your data is held by us — so a request to "export my data" or "delete my data" from us is not needed: every copy of it is already in your own hands.
Children's Policy
DocuScanner is made for adult document work — job applications, coursework, receipts, invoices, and letters. It is not designed or marketed for children, and it does not knowingly collect personal data from anyone.
Changes to This Policy
This policy may be updated as DocuScanner gains features. The "Effective" date at the top is updated whenever something meaningful changes. Changes that concern new data — a new third-party service, a new kind of data, or a new path off the device — are written here before the feature ships, not after.
Contact
Questions about this privacy policy can be sent to:
sandy.pradana886@gmail.com