Privacy Policy

Local-first by default

You can scan, recognize text, organize, sign, and export documents without creating an account or uploading those documents to Scanily. By default, scans, recognized text, signatures, and stamps stay on your device.

If you create an account, Scanily processes the account and session information needed to sign you in, secure the service, and provide account features. If you choose Google or Apple sign-in, that authentication provider also processes the information required for the sign-in flow.

Cloud Sync (optional)

If you enable Cloud Sync, protected copies of the documents you choose to sync are uploaded to Scanily’s service infrastructure in Algeria so your library can be backed up and restored across your devices. Operational account, device, object, version, size, synchronization, and deletion information is also processed to run the service.

Cloud Sync is not a zero-knowledge service. Scanily can access service-side copies when reasonably necessary to operate or secure the service, respond to a support request, or comply with law.

Turning Cloud Sync off stops future synchronization on that device but does not automatically remove cloud copies that already exist. Recognized OCR text is not uploaded as part of Cloud Sync.

How we use your data

We use data to authenticate you, secure the service, manage Premium access, synchronize documents when you enable Cloud Sync, process account deletion, prevent abuse, provide support, and diagnose failures. We do not sell or rent personal data, do not use scanned document contents for advertising, and the mobile app does not show ads or use advertising trackers.

Diagnostics

Scanily receives limited technical crash and error diagnostics such as stack traces, app version, operating-system or device information, timestamps, and operation-level technical context. Diagnostics are configured not to intentionally include scanned document contents, document images, recognized or corrected text, signatures or stamps, document titles, tags, search queries, authentication tokens, synchronization keys, request bodies, or document files.

Product analytics and feature flags (optional)

Only after you explicitly allow analytics, Scanily sends limited feature-use events to PostHog EU Cloud to understand activation, returning use, and Premium conversion. Events use fixed screen and operation names, outcomes, counts, app/SDK version, operating-system name, timestamps, and a generated guest identifier or your account identifier after sign-in. Consenting sign-in joins guest activity to the account. Documents, OCR or corrected text, signatures, stamps, filenames, document IDs, file URLs, searches, tags, names, and emails are excluded. Session replay, touch autocapture, and analytics error reporting are disabled. We do not use advertising identifiers or GeoIP enrichment; the receiving HTTPS service sees the connection IP address.

You can decline or withdraw in the app’s Settings or on the authenticated checkout page without losing core functionality. Signed-in choices apply to your signed-in devices and checkout; guest choices stay local. Withdrawal stops new optional collection when a device or service next checks consent, removes queued data on the withdrawing device, and does not automatically erase historical records or recall in-flight requests. Feature flags use the same consent policy and local defaults when collection is disabled.

Checkout interaction events use the existing Scanily session without analytics cookies. Purchase conversion is reported only after verified payment confirmation and only for consenting accounts.

Cookies

Signing in sets a single session cookie so that we can keep you signed in. We do not use advertising or analytics cookies.

Hosting and international processing

Scanily’s service infrastructure used for accounts and optional Cloud Sync is hosted in Algeria. Supporting services such as authentication, diagnostics, product analytics, transactional email, or payment processing may process limited information in other countries according to their role and applicable safeguards.

Payment data

Where Premium purchasing is available through an external purchasing channel, the payment provider processes the information required to complete the payment. Scanily does not receive or store complete payment-card details. We may retain transaction and entitlement information needed to activate Premium, prevent duplicate processing, provide support, and meet legal obligations.

Data retention

Optional analytics follows the configured PostHog project retention policy. Pending backend event delivery expires after seven days. Account deletion requests removal of associated PostHog person and event data through a durable retry process; third-party processing is asynchronous. Pseudonymous guest records never joined to an account cannot be found through account deletion.

Local data remains on your device until you delete it, clear app data, or uninstall the app. Account and cloud data are retained while needed to provide the service and according to applicable retention requirements. Turning Cloud Sync off does not automatically delete existing cloud copies. You can delete your account from Settings in the app or from the account deletion page on this site; the deletion process removes the Scanily account and associated server-side data, including Cloud Sync data associated with that account.

Contact

For privacy enquiries, contact us at [email protected].