mScanner Privacy Policy

Last updated: 23 October 2026 · App version 2.31 and later

mScanner (“the app”) is a document scanner developed by MY İŞLETME DANIŞMANLIK SANAYİ VE TİCARET LİMİTED ŞİRKETİ. This policy explains what information the app processes and how.

Data controller: MY İŞLETME DANIŞMANLIK SANAYİ VE TİCARET LİMİTED ŞİRKETİ · ATATÜRK MAH. FEVZİ PAŞA CADDESİ, BÜYÜK ÇARŞI NO 35, KAT 3, NO:316, MERKEZ, ERZİNCAN 24050, TÜRKİYE · info@mscanner.com.tr

In short

• Your documents are processed and stored on your device. We run no server; your documents are never sent to us.
• No account is needed. There are no ads, ad tracking or analytics tools.
• The app itself never sends your documents to any AI server. For AI prompts you can, if you wish, hand the text to an AI app installed on your phone yourself.
• If you buy a subscription, payment is handled by Apple or Google and subscription status by RevenueCat.

1. Documents and scanning

Pages you capture or import, crop/filter results, PDFs, notes, text recognition (OCR) results, signatures and watermarks are stored in the app's private folder on your device. Edge detection, filters and text recognition run on the device.

• Android: text recognition and the “Device AI scanner” use Google ML Kit / Google Play services. To operate these, Google may collect technical information such as device model, OS version, app package name, a per-installation identifier and performance/error metrics (Google ML Kit data disclosure). Your document images and text are not part of these metrics.
• iOS: text recognition and the document scanner use Apple's on-device Vision/VisionKit frameworks.
• The app does not add its own encryption to documents; your device's encryption and lock screen apply. If device backup (iCloud / Google) is on, app data including documents may be included in the operating system's backup; the PIN digest (secure key store) is not backed up.
• When you share, print or save a document to Photos or a folder, it goes to the destination you choose.

2. Permissions

• Camera: to scan documents and QR/barcodes. Images stay on the device.
• Photos: to pick images to scan and, when you ask, to save pages to Photos. On Android the system photo picker is used: the app sees only the images you pick and never asks for access to all your photos.
• Internet: subscriptions (RevenueCat and the store), opening links, and on Android downloading the ML Kit text recognition/scanner components and the on-device AI model through Google Play services, plus the technical metrics Google collects for those components (below). The content of your documents is not sent.
• Face ID / fingerprint / device lock: only to confirm it's you when resetting the hidden folder's PIN; no biometric data reaches the app.

3. PIN-protected hidden folder

Your PIN is never stored in plain text: a salted, iterated SHA-256 digest is kept in the device's secure key store (iOS Keychain, Android Keystore), bound to this device. Repeated wrong attempts trigger a waiting period. The hidden folder locks again when the app goes to the background, and while hidden content is on screen Android blocks screenshots and the recent-apps preview. If you forget the PIN or its record cannot be read (e.g. after restoring a backup), a new PIN can only be set after you confirm it's you with your phone's own lock (face, fingerprint or device passcode). The PIN hides documents inside the app; it is not an encrypted vault. Because documents are included in device backups, someone who restores the backup and can unlock that phone can reset the PIN and see hidden documents; “hidden” is not protection against backups.

4. AI prompts (with the app on your phone)

On the “OCR & Mobile AI” screen the document text and a prompt prepared for the task you choose are copied to the clipboard, and the AI app installed on your phone that you pick (e.g. ChatGPT, Gemini, Claude) is opened. Pasting, sending and bringing the answer back is up to you; that app's own terms and privacy policy apply. mScanner itself sends no data to any AI server and asks for no API key. Any API key or permission stored by an older version is deleted from the device at launch.

The phone's own AI: If your phone has an on-device language model (Apple Intelligence on iOS 26 and later; Gemini Nano through Google's AICore service on some Android phones), the prompt runs on that model on the phone and the text does not leave it. On iOS only the on-device model is used, never Apple's server side (Private Cloud Compute). On Android the model may be downloaded by the system on first use, and Google may collect technical metrics to operate the service (Google ML Kit data disclosure).

5. Subscriptions and purchases

If you buy mScanner Pro, payment is processed by the Apple App Store or Google Play; your card details never reach us. We use RevenueCat, Inc. to verify subscription status. RevenueCat processes an automatically generated anonymous app user ID and purchase history (product, transaction, date, store) (RevenueCat privacy policy). We do not ask for your name or email.

6. What we do not share

We do not sell your personal data or use it for advertising or profiling. We do not share it with third parties other than the service providers named above, except where the law requires (and since no documents are on our servers, we hold no document content to disclose).

7. Retention and deletion

• Delete a document in the app, or uninstall the app to remove all app data from the device.
• Subscription: manage or cancel in your store account settings. You can ask for RevenueCat's purchase record to be deleted at info@mscanner.com.tr.
• Detailed deletion steps, records that are not deleted and why: https://mscanner.com.tr/data-deletion.html

8. Children

The app is not directed at children under 13 and does not knowingly collect personal data from children.

9. Your rights

Depending on where you live (e.g. GDPR), you have rights to access, correct, delete and object. Because your documents are only on your device, you can exercise most of these directly in the app; for anything else contact info@mscanner.com.tr.

10. Changes and contact

If this policy changes we publish the current version at this address and update the “Last updated” date. Questions: info@mscanner.com.tr, MY İŞLETME DANIŞMANLIK SANAYİ VE TİCARET LİMİTED ŞİRKETİ, ATATÜRK MAH. FEVZİ PAŞA CADDESİ, BÜYÜK ÇARŞI NO 35, KAT 3, NO:316, MERKEZ, ERZİNCAN 24050, TÜRKİYE.