Privacy Policy

Last updated: 20 May 2026

This Privacy Policy applies to the Scan iOS app published by Zhang Jiahao ("we", "us", "Scan"). It explains what data Scan handles and what it does not.

1. Data Scan does not collect

Scan is an offline-first iPhone app. We do not run a server. We do not require an account. We do not have analytics. The following categories are not collected in Apple's App Privacy framework:

Contact information (name, email, phone, address)
Health and fitness data
Financial information
Precise location
Coarse location
Sensitive information
Contacts
User content (your photos, OCR text, and documents stay on this iPhone unless you opt in to iCloud sync)
Browsing history
Search history
Identifiers (we do not use IDFA, IDFV, or any advertising identifier)
Purchases (StoreKit purchase identifiers are handled by Apple)
Usage data
Diagnostics (no crash reporting SDK)

2. Where Scan stores data

Scanned documents (original images, OCR text, fields, tags) are stored on this iPhone in your app's private container with iOS-standard file protection (NSFileProtectionComplete). Sensitive numbers (driver license / passport digits) are stored in the iOS Keychain. Face ID is used optionally to unlock the app and to reveal masked numbers.

3. iCloud sync (optional, Pro feature)

Pro and Pro+ users may turn on iCloud sync in Settings. When enabled, Scan writes your data to your own private CloudKit database using Apple's end-to-end framework — we have no visibility into it. Disable sync any time and Scan reverts to local-only storage.

4. iPhone Spotlight (optional, Pro feature)

When you enable "Include in iPhone Spotlight" in Settings, Scan submits document titles and OCR text to Apple's on-device Core Spotlight index. This index is local to your iPhone and not transmitted off-device.

5. Permissions Scan asks for

Camera — to scan papers with the VisionKit document camera.
Photo Library (read) — to import an existing photo as a document.
Photo Library (add) — to save a scanned page back to Photos if you choose.
Face ID — only if you turn on the app lock or reveal a masked number.
Local notifications — only for expiration reminders if you set an expiration date.

Scan does not ask for any permission until the related feature is used.

6. Third parties

Scan does not include any third-party SDK. It uses only Apple's first-party frameworks (SwiftUI, SwiftData, StoreKit 2, VisionKit, Vision, Core Spotlight, PDFKit, UserNotifications, CloudKit, LocalAuthentication, AppIntents).

7. Children

Scan is rated 4+. We do not knowingly collect any information from children. Because Scan does not collect any data, this is by construction.

8. Your choices

Delete the Scan app from your iPhone to remove all local data. If iCloud sync was enabled, the CloudKit copy is governed by Apple's iCloud account controls; you may delete it from Settings → Apple ID → iCloud → Manage Storage → Scan.

9. Changes

If we materially change this Policy, we will update this page and the "Last updated" date. Scan does not have an account system, so we cannot email you about changes — please re-visit this URL.

10. Contact

Questions? Email jasperabundant@gmail.com.