CamScanner

Developer and contact

CamScanner (com.medielsoft.camscanner) is provided by Martin Erdt — MedielSoft. For privacy questions and requests concerning data handled by the developer, use the contact below. Basic local scanning does not require a MedielSoft account.

Camera and local processing

Camera access captures documents and detects edges. Original photos, processed scans, thumbnails, document names, page order, crop settings and timestamps are stored locally. Scanning, perspective correction, enhancement and export run on the device. We do not send document content to an advertising network, Crashlytics or a MedielSoft scanning server.

Export and sharing

Saving, opening in another app or using the system share sheet sends the selected export to a destination you choose. The receiving app or storage provider handles that copy under its own terms. Exporting selected pages is separate from cloud backup.

Optional Google Drive backup

Google handles sign-in and authorization. The app requests drive.file access to files used by this app, not unrestricted access to your entire Drive. Backup uploads selected originals, processed images, thumbnails and document/page metadata, including names, order, timestamps and file hashes, for restoration and editing. Necessary connected-account and authorization information supports this connection. You may exclude documents/pages, choose Wi-Fi-only backup, disconnect or revoke access in your Google account. Disconnecting or deleting locally does not automatically delete existing Drive copies; delete those in Drive.

Advertising and consent

The free version may show Google AdMob banners and full-screen ads. When active, Google Mobile Ads may collect/share IP addresses (which can indicate approximate location), device/advertising identifiers, app/ad interactions and diagnostics for advertising, measurement and fraud prevention. We update consent information using Google User Messaging Platform before ad requests and display required choices. Required privacy options can be revisited in settings. Declining personalization does not necessarily remove all ads. Local upgrade banners need no advertising-network request. Only a local counter, random interval and last-ad timestamp control frequency, not document contents.

One-time purchase

Where available, ad removal uses Google Play Billing. Google processes payment; we do not receive payment-card details. Product identifiers, purchase tokens and signed purchase data support verification, acknowledgment and restoration. Verified signed data is cached locally for ad-free use offline. The upgrade suppresses ad requests and local promotional banners; it does not itself disable crash reporting or erase data already held by Google.

Crash reports

When enabled in the distributed version, Firebase Crashlytics sends Google technical reports about crashes and errors, including stack traces, app/OS versions, device models, installation identifiers and diagnostic/session information. We do not intentionally add scan images, document names/text, export paths, sign-in credentials or purchase tokens to reports. Crashlytics may communicate without cloud backup. Google applies its own diagnostic-data retention rules.

Usage statistics

Optional Google Analytics for Firebase helps us understand app reliability and feature usage. When enabled, it can process installation/app-instance identifiers, device/OS information, screen and event interactions and session statistics. We do not attach scan content, document names or purchase/sign-in tokens to analytics events. Statistics can be disabled in the app's privacy settings; disabling stops future collection, not data already processed by Google. Diagnostic and statistical collection are separate from advertising and cloud backup.

Permissions and security

Camera permission supports scanning; notification permission is for the optional quick-scan panel. Network access supports online services. Scanning does not require precise location, contacts or microphone access. App-private storage and OS protections help protect local files; communication with Google APIs uses HTTPS. We do not promise additional end-to-end encryption or app-private protection for exported files.

Retention and deletion

Local documents remain until you delete them or clear app data. Uninstalling normally removes app-private data, but exports, cloud copies and Android/system backups may remain. Manage those at the relevant destination/provider. Technical logs, signed purchase data and ad-frequency state are retained as needed for their functions. Google retains its own service data under its policies. Do not send confidential scans to support.

Purposes, choices and rights

Processing supports requested features, security and reliability; advertising consent is requested where required. Optional online features are not needed for basic offline scanning. Depending on applicable law, you may have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent and a complaint to a supervisory authority. Contact us about data we handle and use Google/provider account tools for their data. We cannot retrieve documents held only on your device.

Children and updates

This is a general document-scanning utility, not a service designed specifically for children. Contact us if you believe a child provided personal data to the developer. This notice is updated when relevant features or data practices change; the date below identifies this revision.