MyScan Privacy Policy
1. Who we are
Effective date: October 15, 2026
This Privacy Policy explains how Sophimaks Limited, a company registered in Cyprus (“Sophimaks”, “we”, “us”) collects, uses and shares information when you use the MyScan document scanner app (the “App”). We are the data controller for the personal data described here.
In short: Your scans stay on your device. All scanning and text recognition happen on your phone. Your documents only leave it if you share them, for example to your Google Drive, or back them up. No one at Sophimaks looks at your documents, and they are never used to train AI. If you connect your Google account, we receive your name, email and profile picture. We collect limited device and usage data to run the App, fix crashes, show ads and process purchases. We never sell your documents.
By using the App, you acknowledge this Policy. If you do not agree, please do not use the App.
2. Information we collect
We collect only what we need to run the App. You can use the App without signing in. If you choose to connect your Google account, we receive the details listed below.
| What | Examples | Where it goes |
|---|---|---|
| Your scans and files | Photos you take or import, PDFs, extracted text, file names, folders, signatures | Stored on your device. We do not receive them unless you send them to us with a support request. |
| Google account (optional) | Name, email address, profile picture, Google user ID, and permission to save files to your Google Drive | Received from Google when you connect. Used only to save the documents you choose to share into your own Google Drive. We never see your Google password. |
| Device and app data | Device model, OS version, language, time zone, app version, IP address, an app instance ID | Sent to our analytics and crash-reporting providers. |
| Usage data | Features used, screens viewed, session length, scan count, errors | Sent to our analytics provider in a form that does not include your document content. |
| Advertising data | Advertising ID (GAID / IDFA), ad views and clicks, coarse location derived from IP | Collected by Google AdMob, only where allowed by your consent and device settings. |
| Purchase data | Subscription status, product purchased, purchase token, country | Processed by the app store’s in-app purchase system. We never see your card details. |
| Support data | Your email address and anything you include in a message to us | Kept by us to answer you. |
Device permissions. The App asks for these permissions only when you use the related feature. You can turn them off at any time in your device settings.
- Camera to capture documents.
- Photos / media / files to import images and save or export PDFs.
- Notifications (optional) for reminders and app updates.
The App does not access your contacts, microphone, SMS or precise GPS location.
3. How we use information
We use information only for the purposes below. If you are in the EEA, UK or another place with similar laws, each purpose relies on the legal basis shown.
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide scanning, editing, OCR and export | Scans, permissions | Performance of contract |
| Save the documents you choose to your Google Drive | Google account data, the selected files | Performance of contract |
| Process and restore purchases | Purchase data | Performance of contract |
| Fix crashes and keep the App stable and secure | Device data, crash logs | Legitimate interests |
| Understand which features people use and improve them | Usage data, device data | Legitimate interests (or consent where required) |
| Show ads in the free version and measure them | Advertising data | Consent (EEA/UK); legitimate interests elsewhere where permitted |
| Personalized ads | Advertising ID, usage data | Consent |
| Answer support requests | Support data | Legitimate interests / your request |
| Comply with law and enforce our terms | Any of the above, as needed | Legal obligation / legitimate interests |
We do not use the content of your scans for advertising, profiling or training AI models.
4. Your documents and how they are processed
Scanning, edge detection, image enhancement, PDF creation and text recognition (OCR) all run on your device. For OCR we use Google ML Kit Text Recognition and Tesseract OCR, which both work offline on your phone. Your images and text are not sent to us or to Google. ML Kit may send Google limited technical data, such as device model and how the feature performs, to maintain and improve it. Your documents are saved locally in the App and are not uploaded to our servers.
Your documents leave your device only when you choose to:
- share them to your Google Drive, if you connected your Google account. Files you share there are governed by Google’s terms and stay in your Drive until you delete them;
- share or export them to another app, email or cloud service. That service’s privacy policy then applies;
- include them in your device’s own backup (for example, Google or iCloud backup), which is controlled by your device settings;
- send them to us with a support request.
If we add cloud features in the future, such as AI-based text recognition, we will explain them in the App, ask for your consent where required, and update this Policy before they go live.
Deleting a document in the App deletes it from the App’s storage. Deleting the App deletes all documents stored inside it. Copies you exported elsewhere are not affected.
5. Who we share information with
We do not sell your personal information, and we never share the content of your scans. We share limited data only with the service providers below, who process it to provide their service to us.
| Provider | Purpose | Data shared | Their policy |
|---|---|---|---|
| Google Firebase Analytics | Usage analytics | App instance ID, device data, usage events | Google Privacy Policy |
| Firebase Crashlytics | Crash reporting | Device data, crash logs | Google Privacy Policy |
| Google ML Kit Text Recognition | On-device OCR | No images or text. Limited technical data (device model, feature performance) | ML Kit terms and privacy |
| Google Sign-In and Google Drive | Saving the documents you choose to your own Drive | Name, email, profile picture, Google user ID, and the files you choose to save | Google Privacy Policy |
| Google AdMob | Ads in the free version | Advertising ID, device data, ad interactions, IP | How Google uses data from partner apps |
| App store in-app purchases (Apple App Store / Google Play) | Payments and subscriptions | Purchase data | Apple / Google privacy policies |
Tesseract OCR is open-source software that runs entirely inside the App and does not send data anywhere.
We may also share information:
- if required by law, court order or a government request;
- to protect the rights, safety or property of our users, us or others;
- with a buyer or successor if we are involved in a merger, acquisition or sale of assets. This Policy will continue to apply to your information.
6. Ads and your choices
The free version of the App shows ads served by Google AdMob, a service of Google LLC. Premium subscribers do not see ads.
To select, deliver, measure and secure ads, the Google Mobile Ads SDK in the App may collect:
- your device’s advertising ID and similar device identifiers;
- your IP address, from which an approximate (city-level) location may be inferred;
- ad interaction data, such as which ads were shown, viewed or tapped.
Google processes this data under its own Privacy Policy and partner data policy. Your scans are never shared with Google or any advertiser.
Your choices:
- EEA, UK and Switzerland: we ask for your consent before showing personalized ads, using Google’s consent form (User Messaging Platform), shown on first launch. You can change your choice at any time through Privacy options in the App menu.
- iOS: we ask for permission through Apple’s App Tracking Transparency prompt before accessing your IDFA.
- Android: you can reset or delete your advertising ID in Settings > Google > Ads (or Settings > Privacy > Ads).
- US residents: you can opt out of targeted advertising as described in Section 8.
If you decline personalized ads, you may still see non-personalized ads based on context, such as the app you are using. You can also manage how Google personalizes ads in My Ad Center.
7. Retention, security and international transfers
How long we keep data
| Data | Kept for |
|---|---|
| Scans and files | On your device until you delete them or uninstall the App. We hold no copy. |
| Google account data | Until you disconnect your Google account. Files saved to your Drive stay there until you delete them. |
| Analytics data | Up to 14 months (Firebase retention setting) |
| Crash logs | Up to 90 days |
| Purchase records | As long as needed for your subscription, then as required by tax and accounting law |
| Support emails | Up to 2 years after the conversation ends |
Security. We use industry-standard measures, including encryption in transit (TLS), access controls and providers with recognized security certifications. No system is 100% secure, so we cannot guarantee absolute security. Protect your device with a screen lock, since your documents live there.
International transfers. We are based in Cyprus, in the EU. Our team and service providers may process data outside the EEA, including in Israel and the United States. Israel has an adequacy decision from the European Commission. For transfers to the US, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing, including processing based on legitimate interests;
- withdraw consent at any time, without affecting earlier processing;
- receive your data in a portable format;
- opt out of targeted advertising and the “sale” or “sharing” of personal information (California and other US states). We do not sell personal information for money;
- not be discriminated against for using these rights;
- complain to your data protection authority. Our lead authority is the Cyprus Commissioner for Personal Data Protection; you can also contact the authority where you live.
How to use your rights. Email us at privacy@sophimaks.com with the subject line “Privacy request”. If you connected a Google account, write from that email address. Otherwise, tell us your device model and roughly when you installed the App. Because the App has no user accounts, we may not be able to match some device data to you. Uninstalling the App and resetting your advertising ID breaks that link. We respond within 30 days, or within the time your local law requires.
Quick ways to delete data yourself: delete documents in the App, disconnect your Google account in the App (or at myaccount.google.com/connections), uninstall the App, reset your advertising ID, and cancel subscriptions in Google Play or the App Store.
9. Children
The App is not directed at children under 13 (or under 16 in the EEA and UK). We do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this Policy
We may update this Policy as the App changes. We will post the new version here with a new effective date. If the changes are significant, we will also tell you in the App before they take effect.
11. Contact us
Sophimaks Limited
Kyriakou Matsi, 10, Liliana Court, 4th floor
1082 Nicosia, Cyprus
Email: privacy@sophimaks.com
Website: sophimaks.com