Privacy policy

Release configuration

Scanner Bro is distributed through Google Play. Test builds can use official Google test ads; store builds include AdMob and Google Play Billing. Availability of the app, subscriptions and advertisements depends on the release track, country, store and advertising review, and applicable privacy choices.

Your documents stay in your app storage

The app processes captured or selected document images on your device. It stores scan pages and names, recognized text and edits, OCR unlock state, and QR value/domain/date history in private local storage. We do not operate a server to receive or store these items and do not use their contents to train AI.

Document scanning and QR capture use Google Play services components. Components may be downloaded on first use. Russian/English photo-to-text is performed locally with bundled Tesseract models. Android photo selection grants access only to items you choose; selecting an item from a cloud provider may involve that provider.

The OCR camera temporarily creates a private image and removes it after processing where possible. When you save or share a PDF, the file goes to the destination or app you select. That destination’s own privacy and retention rules apply. The app cannot delete copies you have sent elsewhere.

Scanner and QR diagnostics

Google Play services can contact Google for component updates and send technical usage and performance metrics for the document and code-scanner APIs. These may include device and app versions, identifiers, API configuration, input/output sizes, timing, events and error codes. Google uses them to operate, maintain and improve the APIs and detect abuse. This is distinct from uploading your document images, recognized text or QR history to a SUPERNOVA server. Google describes this processing in its ML Kit privacy information and data disclosure.

Local preferences and retention

We store local app preferences, folder assignments, document edits, free OCR allowances, and page/document or recognized-text unlock state. Test builds can also store test-ad and Premium-simulation preferences locally. Ordinary deleted documents remain in the local trash for up to 30 days unless permanently deleted earlier. Clearing app storage or uninstalling also removes the trash.

You can delete documents, recognized texts and QR entries in the app where the relevant action is provided. Uninstalling the app or clearing its storage removes private scans, OCR/QR history and preferences. Automatic app-data backup is disabled. Temporary exports are held in cache; files older than 24 hours are cleaned when another export is made, and Android may clear cache separately. This is not a guaranteed 24-hour deletion schedule. Save important outputs outside the app before removing it.

Advertising and Google services

The app includes the Google Mobile Ads SDK (AdMob). When an ad is requested, Google may collect and share IP addresses (including approximate location inferred from them), app/ad interactions, diagnostic and performance information, and device or account identifiers such as the advertising ID. These are used for advertising, measurement, analytics and fraud prevention. Our app does not supply your scans, recognized text, QR history or document names to the advertising SDK.

We do not request device GPS location, contacts, microphone access or broad file access. This does not prevent Google from inferring an approximate area from an IP address.

Ad availability and personalization depend on region, consent and device settings. Before requesting ads, the app updates consent information through Google UMP and displays the applicable message when required. Settings provide an advertising privacy entry when Google requires it. Non-personalized advertising can still process technical data; it is not the same as no data collection.

Google’s privacy policy and advertising controls explain Google’s processing and retention. Versions before 0.20 do not include Firebase Analytics. Version 0.20 and later can include optional usage analytics as explained below. Crashlytics is not integrated.

Optional usage analytics

Starting with version 0.20, Google Analytics for Firebase can measure app sessions, completed scans and PDF imports, signature placement, successful PDF saves, opening the PDF sharing menu, and subscription-screen or checkout activity. It is disabled until you choose to allow it. You can refuse without losing features and change your choice in Settings. Actions performed while analytics is disabled are not replayed after consent.

With your consent, Google processes app-instance identifiers, app and device information, usage events and approximate region for analytics. Our custom events use fixed categories; they do not contain document names, files, images, document text, signatures, QR values, email addresses or purchase tokens. Advertising-ID collection and advertising consent are disabled for this analytics integration; AdMob has its own separate privacy flow. The SDK may also record supported Google Play purchase events. An access-granted event alone is not proof of a paid transaction.

Disabling analytics stops further collection and resets the local analytics data and identifier. It does not automatically delete previously uploaded information. For questions about prior data, contact support. Google’s privacy policy explains its processing. Aggregate analytics does not give us a named list of people who installed the app.

Subscriptions

The optional subscription uses Google Play Billing, not a card form inside our app. We do not receive your full card details. The client checks signed Google Play purchase data, acknowledges purchases and restores active access for the same Play account. No separate SUPERNOVA subscription-verification server or cloud account operates at the date above. Availability and purchase terms are shown by Google Play.

Support and this website

If you email us, we receive your email address, message and any attachments you choose to send. We use these to respond to and resolve your request, and retain them only as needed for support, security and applicable legal requirements. Please avoid including sensitive documents. You can ask us about access or deletion using the support address.

This website has no account, upload form, advertising, analytics script or optional tracking cookie added by us. The hosting service necessarily processes network requests and technical information, such as IP address, to deliver and protect the pages. The provider is Google Firebase Hosting. We do not intentionally build advertising profiles from website visits.

Your choices and rights

You control scanning, image selection, file sharing and deletion of local items. Device settings offer additional advertising and permission controls. The app provides applicable advertising privacy choices through Google UMP when required.

Depending on your location, you may have rights to access, correct, delete or restrict personal data, object to processing, withdraw consent, obtain a copy, or complain to your local data-protection authority. Contact us using the address above. We cannot retrieve a scan that exists only in your device storage.

Local processing is used to provide the functions you request. Where consent is legally required for advertising, it must be obtained; support and security processing may rely on providing the requested service, legitimate interests or applicable legal obligations, depending on the circumstances. Withdrawing consent does not affect processing lawfully performed before withdrawal.

Providers, international processing and security

Google and your chosen file-sharing or email providers may process data in countries other than your own under their applicable terms and safeguards. Consult their privacy notices for details. Data retention by these providers is governed by their own policies and any applicable agreements.

The app uses Android’s private storage for scans and temporary permissions to share exported PDFs and JPG images. Protected folders use the phone’s system authentication; this feature does not encrypt exported copies or create a cloud backup. Exported copies and a device with compromised security are outside the protection of private storage. No system can promise absolute security.

Adults and policy updates

The app is intended for adults aged 18 and older and is not designed for children. If you believe a child has sent us personal information through support, please contact us.

We will update this policy when the app’s actual data practices change. The revision date is shown on this page. Important changes may also be communicated in the app.