1. Introduction and who we are
The controller of your personal data is Tarfion Ltd, Griva Digeni, 59, Kaimakliotis Building, 5th Floor, 6043 Larnaca, Cyprus
Contacts: support@scanguin.app
This Privacy Policy explains how Tarfion Ltd ("We," "Us") collects, uses, and protects personal data when you use Scanguin (the "App").
Scanguin is a document-scanning and productivity app that allows users to scan, edit, organize, search, redact, summarize and otherwise work with documents.
Please note: the App is designed so that the contents of your scanned documents and the information derived from them are processed primarily on your device. Unless you choose a feature that requires another system service, such as sharing/exporting information or using Apple Intelligence, we do not need to receive or store your document content on our servers.
This Policy should be read together with our Terms of Use.
2. What we collect, what for, and our legal basis
Device permissions are requested only when needed for the relevant feature and can be changed at any time in your device settings.
| What data we process | What for | Legal basis |
|---|---|---|
| User ID, Email | To provide service and its features; to communicate with you and improve app’s performance | Performance of the Terms of Use; Legitimate Interest or your consent where consent is the only appropriate legal basis |
| Scanned documents and imported files — document images, OCR text, annotations and document metadata. Note: these data are processed locally on your device. | Scanning, editing, OCR, Deep Search, document organization, Read Aloud, Stamp Studio, QR Studio and other core document functions | Performance of the Terms of Use |
| Information detected in documents — e.g. names, dates, amounts, payment-card numbers, IBANs, email addresses, phone numbers, document numbers and dates of birth. Note: these data are processed locally on your device. | Smart Redact, Doc Brief, Deadline Radar, Expense Ledger, Smart Auto-Name, Auto-Folder and Smart Suggestions | Performance of the Terms of Use |
| Document summaries and extracted information — summaries, key facts, parties, dates, deadlines, amounts, categories and suggested document types or names | Providing Doc Brief, Deadline Radar, Expense Ledger and document organization features | Performance of the Terms of Use |
| Contacts data you choose to save — name, company, title, phone number, email, website and address extracted from a business card | Card → Contact and vCard export | Consent / device permission; Performance of the Terms of Use |
| Checklist, reminder and notification information | Paper → Checklist, Deadline Radar and reminders | Consent / device permission; Performance of the Terms of Use |
| Face ID authentication status. Face ID itself is handled by Apple; we do not receive or store your facial image or biometric template. | Securing Face ID Vault | Performance of the Terms of Use |
| Device and usage data — device type and device ID, OS version, language, App version and feature-usage information | Operating, maintaining and improving the App, for product analytics | Legitimate interests |
| Diagnostics — crash logs, error reports and technical performance information | Bug fixing, security and App stability | Legitimate interests and legal obligations where we are responsible for security of your data |
| Advertising and attribution data — IDFA and advertising/attribution events, where you allow tracking | Measuring advertising effectiveness, attribution and retargeting | Consent (see ATT below) |
| Support correspondence — your contact details, messages and any files or screenshots you choose to provide | Responding to support and privacy requests | Performance of contract / Legitimate interests |
On-Device Processing
Scanguin operates entirely on your device
- Smart Redact: OCR, document classification, search indexing, Expense Ledger, deadline detection, checklists, Scan Coach, Measure, and Paper Footprint process data strictly locally. Smart Redact automatically masks sensitive information by creating a new copy, i.e. your original file remains unchanged.
- Face ID Vault: Uses Apple’s native LocalAuthentication framework. Scanguin receives only the verification result. PLEASE NOTE: Scanguin does not store and does not process biometric data.
Apple Intelligence
We use Apple Intelligence for some App’s features. Where Apple determines that a request requires additional processing, information necessary to complete the request may be processed through Apple's Private Cloud Compute.
Tarfion does not receive document content through this Apple Intelligence processing path.
iOS App Tracking Transparency
On iOS 14.5 and later, Scanguin may use Apple's App Tracking Transparency ("ATT") framework. Where tracking is used, you will see Apple's system prompt asking whether you allow the App to track your activity across other companies' apps and websites.
- If you allow tracking: we may access your Identifier for Advertisers ("IDFA") and share advertising or attribution events with advertising and measurement partners for ad attribution, measurement and retargeting.
- If you decline tracking: we will not access your IDFA for tracking. Core Scanguin functionality remains available, but advertising measurement and personalization may be more limited.
You can change your tracking permission at any time in your iOS settings.
The App may also use SDKs and similar mobile technologies for analytics, attribution, performance measurement and advertising. Where applicable law or Apple policy requires consent, these technologies are used for tracking only after the required permission has been obtained.
Please note: Payments are processed by the relevant app store; we receive only status and transactional data. Herewith, we rely on legal obligation where processing transactional data is necessary for tax and accounting records, responding to legally valid requests, handling regulatory matters or complying with applicable law.
4. How long we keep data
We keep personal data only for as long as reasonably necessary for the purposes described in this Policy.
- Documents, OCR text, search indexes, extracted information, deadlines, expense data, checklists and Vault content stored locally — until you delete them, remove the App or otherwise erase the relevant local App data.
- Technical logs and diagnostics — typically up to 90 days, unless longer retention is necessary for security or troubleshooting.
- Advertising and attribution data — typically up to 180 days, subject to the settings and retention periods of the relevant provider.
- Support correspondence — up to 3 years.
We may retain information longer where necessary to comply with law, resolve disputes, prevent fraud or abuse, investigate security incidents, or establish, exercise or defend legal claims.
We may also retain aggregated or anonymized information that no longer identifies you.
5. Your rights and choices
5.1 Local documents and App data
Most document content is stored locally on your device. You can delete individual documents or other locally stored App data using the available App controls.
Deleting locally stored information does not necessarily cancel an active subscription. App Store subscriptions must be managed through your Apple account settings.
5.2 EU/EEA rights
If the GDPR applies to you, you may have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your personal data, subject to legal exceptions |
| Restriction | Request restriction of processing in certain circumstances |
| Portability | Receive certain data in a structured, commonly used and machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw consent at any time where processing is based on consent |
| Complaint | Lodge a complaint with a competent supervisory authority |
Because much of Scanguin's document processing occurs only on your device, we may not possess a server-side copy of document content to access, correct or delete on your behalf.
5.3 US rights
If you are a resident of California or another US state with applicable privacy legislation, you may have rights including:
- Right to Know / Access;
- Right to Delete;
- Right to Correct;
- Right to Data Portability; and
- Right to Opt Out of Sale, Sharing or Targeted Advertising, where applicable.
Where Scanguin shares advertising identifiers or advertising events with third parties for cross-context behavioral advertising or targeted advertising, such activity may constitute "sharing" or targeted advertising under applicable state law.
You may exercise applicable rights through the privacy contact listed below. We will not discriminate against you for exercising your privacy rights.
6. How we secure and transfer data
6.1 Security
We use reasonable technical and organizational measures designed to protect personal data that we receive, including access controls, encryption in transit and data-minimization practices.
The on-device processing model reduces the amount of document content transmitted to us. Face ID Vault provides an additional local access-control mechanism for documents you choose to protect.
No storage or transmission method is completely secure. You are responsible for maintaining the security of your device, Apple account and any copies of documents you export or share.
6.2 International transfers
Tarfion Ltd is established in Cyprus. Some service providers may process limited personal data outside the EEA or UK.
Where required, we rely on lawful transfer mechanisms such as the European Commission Standard Contractual Clauses, the UK International Data Transfer Addendum, an applicable adequacy decision, or another legally recognized safeguard.
Document content processed only on your device is not included in data routing.
7. Age
The Service is intended solely for users aged 18 and over.
We do not knowingly collect personal data directly from persons under 18 through Tarfion-operated services.
8. Marketing communications
We may contact you by email using the address linked to your Account. You may opt out of receiving marketing communications at any time by following the unsubscribe instructions included in the relevant email or by contacting our Support Team at support@scanguin.app.
Please note that opting out of marketing emails will not prevent us from sending non-promotional communications that are necessary to provide or administer the Service, including messages concerning payments and billing, security matters, Account management, legal or regulatory notices, or services you have requested.
9. Changes to this Policy
We may update this Privacy Policy to reflect changes to Scanguin, our data practices or applicable law.
Where changes are material, we will provide appropriate notice through the App or another suitable channel where required.