Privacy Policy

SamalaiTech ("we," "us," or "our") develops and publishes the mobile applications listed below and operates the website at samalaitech.com. For the purposes of the EU/UK GDPR we are the data controller for the processing described here.

• AI Scan (com.samalaitech.aiscan) — AI document scanner with offline OCR, a full PDF toolkit, and neural voices that turn any document into an audiobook. Read the annex
• Game Bytes (com.gamebytes.game_bytes) — 18 games in one app — Ludo, Carrom, Sudoku and puzzles, all offline, with live online multiplayer. Read the annex

If you do not agree with this policy, please do not use our apps or this website.

• Our apps are built to do their work on your device. Documents you scan, text extracted from them, audio generated from them, and game progress are processed locally and are not uploaded to us.
• We collect a small amount of diagnostic and usage data so we can fix crashes and understand which features are used.
• We collect account data only if you choose to create an account, and support data only if you contact us.
• We never sell your personal information, and we do not share your documents or files with anyone.

a. Information you provide

• Account information. If you create an account, we collect your email address and, where you supply it, a display name and profile image. Accounts are optional in apps that offer a guest mode.
• Your content. Documents, images, files and game saves stay on your device. We do not access, store or transmit them unless you explicitly turn on a cloud feature or share a file yourself. See the relevant annex for what a given app offers.
• Support communications. If you email us, we receive your address, your message, and anything you attach — often including device details you choose to send.
• Newsletter and waitlist sign-ups. If you submit your email on this website, we store it with our email provider so we can send release notes or a launch notice.

b. Information collected automatically

• Device information. Device model, operating system version, app version, language, and coarse region.
• Usage data. Which features are opened, session length, and non-identifying interaction events.
• Crash and performance data. Stack traces, memory state at the time of a crash, and performance timings.
• Advertising identifiers. Where an app shows ads, the advertising SDK may access your device advertising ID, subject to the consent choices described in section 7.

Analytics and crash data are aggregated and are not used to build a profile of you as an individual.

c. Permissions

Permissions are requested at the moment a feature needs them, and a declined permission only disables that feature. Every permission an app requests, and the exact reason for it, is listed in that app's annex.

We use the information described above to:

• provide, maintain and improve the apps and this website;
• authenticate you, keep your account secure, and sync data you have explicitly asked us to sync;
• diagnose crashes, regressions and performance problems;
• understand which features are used so we can prioritise work;
• respond to your support requests;
• display and measure advertising in apps and tiers that include ads;
• detect, prevent and address fraud, abuse and security incidents; and
• comply with legal obligations.

Legal bases (EEA / UK)

• Contract — providing the app and its account features.
• Legitimate interests — keeping the apps stable and secure, and understanding aggregate usage.
• Consent — personalised advertising, optional analytics where local law requires opt-in, and marketing email. You can withdraw consent at any time.
• Legal obligation — tax, accounting and lawful requests.

We do not sell personal information and we do not share your documents or files. We do use a small number of service providers who process data on our behalf:

• Google Firebase (authentication, Crashlytics, analytics, and cloud services where an app uses them) — Firebase privacy.
• Google AdMob (advertising in ad-supported tiers) — Google privacy.
• Google Play Billing / Apple App Store (purchases and subscriptions). We receive a purchase confirmation; we never receive your card details.
• EmailOctopus (website newsletter and waitlist emails).
• Vercel (hosting for this website, including standard server logs).
• Cloud storage providers you connect yourself — for example Google Drive. Their own policies apply to whatever you send them.

We may also disclose information where we are legally required to, or to protect our rights, users or the public. If SamalaiTech is ever involved in a merger or acquisition, we will tell you before your information becomes subject to a different policy.

• On your device. Content you create stays on the device until you delete it, from within the app or your file manager. Uninstalling removes app-managed local data.
• Account data. Retained while your account is active. Delete your account and it is removed — see Delete your account.
• Diagnostics and analytics.Retained on our providers' standard schedules, generally up to 14 months, then deleted or further aggregated.
• Support email. Retained up to 24 months so we can follow up on recurring issues.
• Marketing email. Retained until you unsubscribe.

We use encryption in transit (TLS), platform-provided storage protections, and access controls limited to the people who need them. No system is perfectly secure, so we cannot guarantee absolute security — but we will notify you and the relevant regulator of a breach where the law requires it.

Some apps show advertising in their free tier. Where an app does, its annex says so explicitly.

• In the EEA, the UK and other regions with equivalent rules, we show a consent prompt before any personalised advertising or non-essential analytics. You can change or withdraw that choice later from the app's settings.
• Elsewhere, you can limit ad personalisation with your device controls: Android — Settings → Google → Ads; iOS— Settings → Privacy & Security → Tracking.
• Paid tiers, where offered, do not display advertising.

Our apps are not directed to children under 13 (or the equivalent minimum age in your country) unless an app's annex and store listing say otherwise. We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us at privacy@samalaitech.com and we will delete it promptly.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal information, to receive a portable copy, and to withdraw consent. If you are in California you also have the right not to receive discriminatory treatment for exercising these rights; we do not sell or share personal information as those terms are defined by the CCPA. If you are in India, the DPDP Act gives you comparable access, correction, grievance and nomination rights.

To exercise any of these, email privacy@samalaitech.com. We will respond within 30 days. You can delete your account yourself at any time from samalaitech.com/delete-account or from inside the app. If you believe we have not handled your request properly, you may complain to your local supervisory authority.

Our service providers may process data in countries other than yours, including the United States. Where the law requires it, those transfers rely on Standard Contractual Clauses or another approved safeguard.

We may update this policy or any annex. The effective date at the top of each document tells you when it last changed. Material changes will be announced in-app or by email before they take effect. This policy replaces the single-app privacy policy published on April 19, 2026.

Privacy questions and rights requests: privacy@samalaitech.com

General support: support@samalaitech.com

Website: www.samalaitech.com

Each annex lists that app's permissions, on-device processing, third-party SDKs and store data-safety summary.

• AI Scan privacy annex
• Game Bytes privacy annex