1. What stays on your device
AI Scan is built offline-first. The following never leave your phone or tablet unless you personally export, share or sync them:
- photos and page images captured by the scanner;
- generated PDFs and any edits, signatures or watermarks;
- text extracted by OCR — recognition runs entirely in an on-device model;
- audio produced by audiobook mode — the speech model runs locally and the text being read is never transmitted;
- QR and barcode scan history;
- folder structure, tags, and document metadata.
2. Permissions and why they are requested
Android and iOS permissions
- Camera
- Capturing document, ID card, business card and QR scans. Frames are processed on-device and are not streamed anywhere.
- Photos / storage
- Importing existing images and PDFs, and saving what you export. Access is limited to files you pick or files the app created.
- Contacts
- Only used when you scan a business card or a contact QR code and choose to save it. Requested at that moment; declining keeps the rest of the app working. We never read or upload your contact list.
- Location and nearby Wi-Fi
- Required by Android for Wi-Fi QR codes — reading network details so a scanned Wi-Fi code can join a network. We do not collect, store or transmit your location.
- Biometrics
- Unlocking the app lock. The check is performed by the operating system; we never receive your fingerprint or face data.
- Notifications
- Playback controls for audiobook mode, export progress and sync status.
- Background media playback
- Keeping audiobook playback running with lock-screen controls when the screen is off.
3. Audiobook mode and neural voices
Audiobook mode converts a document to speech using a neural text-to-speech model that runs on your device.
- Your text is not sent anywhere. Synthesis happens locally, which is also why playback works in airplane mode.
- Voice packs are downloaded on request. When you add a voice from the in-app voice store, the model file is fetched from a public open-source model repository hosted on GitHub. As with any web request, the host sees your IP address and the file requested; it does not see your documents, your account or what you are listening to.
- No microphone access. AI Scan does not request or use the microphone, and it does not record audio.
- Playback position and cached audioare stored locally so you can resume, and are cleared when you delete the document or the app's cache.
- If you choose a voice provided by your operating system instead of a downloaded neural voice, that voice is governed by your device manufacturer's own privacy terms.
4. Accounts and cloud sync
You can use AI Scan as a guest. If you sign in — by email link, email and password, or a Google or Apple account — we create an account record holding your email address and, optionally, a display name. Authentication is handled by Firebase Authentication.
Cloud sync and cloud export are off by default. When you turn one on, the documents you select are uploaded to the destination you chose — for example your own Google Drive — using credentials you grant at that moment. You can disconnect at any time from Settings, and disconnecting stops all further uploads.
To remove your account and its server-side data, use samalaitech.com/delete-account or Settings → Account → Delete account. Files already saved to your own cloud drive stay there — delete them from that service.
5. Diagnostics and analytics
AI Scan reports crashes through Firebase Crashlytics and aggregate feature usage through Firebase Analytics — for example "a PDF was merged" or "audiobook playback started". These events never include document content, extracted text, file names, or the text being read aloud. Crash collection is disabled in debug builds.
6. Advertising and purchases
The free tier of AI Scan displays ads through Google AdMob. In regions that require it, the app asks for your consent before any personalised ads or non-essential analytics, and that choice can be changed later in Settings. Premium removes advertising entirely.
Purchases and subscriptions are processed by Google Play Billing (or the App Store on iOS). We receive confirmation that an entitlement is active; we never receive your payment card details.
7. Store data-safety summary
What the app collects, in store terms
- Documents and photos
- Not collected. Processed on-device only.
- Extracted text and audio
- Not collected. Generated and stored on-device.
- Email address
- Collected only if you create an account. Used for authentication and account recovery.
- Crash logs and diagnostics
- Collected. Used for app functionality and stability.
- App interactions
- Collected in aggregate. Used for analytics.
- Advertising ID
- Collected in the ad-supported tier, subject to your consent choice.
- Data sharing
- No personal data is sold or shared for cross-app tracking.
- Deletion
- Account and associated data can be deleted in-app or via the web page.
8. Questions
Anything in this annex that isn't clear, or a rights request: email privacy@samalaitech.com. The core policy covers retention periods, international transfers and your legal rights in full.