Privacy Policy

ScanMe — PDF Scanner App · Last updated: 24 September 2026

This policy explains which personal data the ScanMe apps for iOS and Android and the website appscanme.com process, for what purposes, and which rights you have.

1. Who is responsible

Have a nice day e.U. is the controller within the meaning of the EU General Data Protection Regulation (GDPR) for the processing described here.

2. In short

• Your documents stay on your device. We do not receive, store or read your scans. They leave your device only when you export or share them, or back them up to a cloud service you choose.
• No account needed. ScanMe does not ask for your name, email address or phone number.
• To run the app, we process a small amount of technical data: a random app ID, app and system version, device model, language, country, which app features are used, subscription status, push token and crash reports.
• We do not sell personal data and do not use it to track you across other companies' apps or websites. Current versions of ScanMe show no ads.

3. Your documents, camera and photos

Scanning, edge detection, cropping, filters and PDF creation happen on your device. The app asks for camera access to scan and for access to your photos to import images or save scans. You can change these permissions at any time in your device settings.

Your documents are stored inside the app on your device. If you use a cloud feature — iCloud, Google Drive, Dropbox, Microsoft OneDrive, Box or Evernote, depending on your platform and app version — or share a file with another app, the file is transferred directly from your device to that service under your own account there, and that provider's privacy policy applies. We do not receive these files.

Deleting the app deletes the documents stored in it, unless you have backed them up elsewhere.

4. Data processed when you use the app

4.1 App settings and server logs

When the app starts and when it shows the subscription screen, it loads current settings (texts, plans, limits) from our server appscanme.com and sends your language, platform and app version. Like any web server, ours logs technical data of each request: IP address, time, requested address, and the app and system version from the request header. We use these logs only to operate, secure and troubleshoot the service and delete them after 14 days.

4.2 App ID and usage events

On first launch the app creates a random identifier. It is not derived from your device and is not linked to your name, email address, Apple ID or Google account. With this ID, the app sends our server the platform, the app version and short events about which features are used, with their time — for example “app opened”, “onboarding finished”, “document scanned”, “document exported”, “subscription screen shown” or “purchase started / completed”. Our server adds the country derived from your IP address; the IP address itself is not stored with these records. We use this to understand how ScanMe is used, to find problems (for example a step where many users get stuck) and to improve the app and its offers.

4.3 Push notifications

If you allow notifications, your device receives a push token from Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android). The app sends this token to our server together with the app ID, language, app and system version, device model, whether notifications are allowed, and the country derived from your IP address. We use it to send you notifications about ScanMe, such as tips and offers. You can turn notifications off at any time in your device settings; tokens that stop working are deactivated.

Older versions of the app registered for notifications through OneSignal, Inc. (USA). For users of those versions, OneSignal holds the push token and we transfer it to our own server.

4.4 Purchases

Subscriptions and one-time purchases are sold and processed by Apple (App Store) or Google (Google Play). We never receive your payment details, your Apple ID or your Google account. Apple and Google notify our server about purchases: transaction identifiers, product, price and currency, store country, dates (purchase, renewal, expiry, refund) and status. The app links a purchase to its random app ID so that Premium works on your device and we can help you with questions about your purchase.

4.5 Crash reports

The apps use Firebase Crashlytics (Google). If the app crashes, a report with the technical cause of the crash, device model, system and app version and a random Crashlytics installation ID is sent to Google. We use it only to fix errors. Google keeps crash data for 90 days.

4.6 Usage statistics

The apps include Google Analytics for Firebase, which collects usage statistics (for example sessions, app version, device model, system version and country) with a random app-instance ID. We do not use it for advertising: on Android, collection of the advertising ID is switched off, and the iOS app never asks for tracking permission, so the advertising identifier (IDFA) is not available to it. Google keeps event-level data for 2 months and user-level data for up to 14 months.

4.7 Older Android versions

Android app versions before 1.1 showed ads from Google AdMob, which may use your device's advertising ID. Current versions contain no ads — please update the app.

5. Website appscanme.com

The website is hosted in Germany and delivered through Cloudflare (content delivery and protection against attacks), which processes your IP address and request data in order to deliver the pages. Our web server keeps technical logs for 14 days (see 4.1). The website does not use analytics or advertising cookies and sets no cookies of its own; Cloudflare may set a strictly necessary security cookie if it has to check that a visitor is not a bot. The video on the home page is embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com) and loads only when you start it.

If you use the contact form, we receive your name, email address, phone number (optional) and message by email. If you subscribe to our newsletter, we receive your email address. We use this only to answer you or to send you the newsletter, which you can cancel at any time.

6. Legal bases

• Providing the app, its settings, Premium features and purchases: performance of a contract (Art. 6(1)(b) GDPR).
• Server logs and security, crash reports, usage events and statistics, and linking purchases to the app ID for support: our legitimate interest in running, securing and improving ScanMe (Art. 6(1)(f) GDPR). You can object at any time (see section 9).
• Push notifications and the newsletter: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time — in your device settings or by unsubscribing.
• Answering your messages: steps at your request and our legitimate interest in communicating with you (Art. 6(1)(b) and (f) GDPR).

7. Service providers and transfers outside the EU

We use the following providers, who process data on our behalf or as independent controllers:

• Hetzner Online GmbH, Germany — our servers and backups.
• Cloudflare, Inc., USA — delivery and protection of appscanme.com.
• Apple Inc. / Apple Distribution International Ltd. — App Store, push notifications, iCloud.
• Google LLC / Google Ireland Ltd. — Google Play, Firebase Cloud Messaging, Crashlytics, Google Analytics for Firebase, Google Drive (if you use it), YouTube, and our Gmail mailbox that receives contact-form messages.
• OneSignal, Inc., USA — push registration of older app versions.
• Dropbox, Microsoft, Box and Evernote — only if you choose to use them.

Some of these providers are located in the USA. Transfers are based on the EU adequacy decision for the EU-U.S. Data Privacy Framework where the provider is certified, or on the EU Standard Contractual Clauses.

We do not sell personal data.

8. How long we keep data

• Server logs: 14 days.
• App ID, usage events, device and push-token records: only as long as needed for the purposes above; tokens that stop working are deactivated, and you can ask us to delete your records at any time.
• Purchase notifications: for the duration of your subscription and afterwards as long as needed for support, refunds and legal claims.
• Crash reports: 90 days (Google). Usage statistics: event-level data 2 months, user-level data up to 14 months (Google).
• Emails: until your request is handled; newsletter address: until you unsubscribe.
• Deleted data may remain in our server backups for up to about four weeks, until those backups are rotated out.

9. Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time. To exercise these rights, email us at [email protected]. Because ScanMe has no user accounts, please include information that helps us find your records — for example your device model and the approximate date you installed the app, or the Apple or Google order number of a purchase.

You also have the right to lodge a complaint with a supervisory authority, in Austria the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

10. Children

ScanMe is a general-purpose document scanner and is not directed at children under 16. We do not knowingly collect personal data from children.

11. Security

Data is transmitted over encrypted connections (HTTPS). Our servers and backups are located in Germany, and access is limited to the people who operate ScanMe.

12. Changes to this policy

We update this policy when our apps or services change. The date at the top shows the latest version. Our Terms of Use apply as well.