Last updated: September 24, 2026
ScannerPro (Chinese: 扫描大师) is a privacy-respecting iPhone app. This document explains what data the app handles, how it handles it, and what you control.
| Item | Status |
|---|---|
| Account required | None — not required |
| Data sold to third parties | Never |
| Tracking across other apps | None |
| OCR text processing | 100% on-device |
| AI category classification | 100% on-device |
| Optional cloud sync (iCloud) | User opt-in (paid tier) |
| Optional self-hosted report endpoint | User opt-in, blank by default |
| Anonymous usage analytics | User opt-in, OFF by default |
None by default. The App Store build of ScannerPro does not collect any personal data without your explicit action.
The following data is stored only on your iPhone in the app's local container. Nothing is uploaded to any server unless you explicitly opt in.
| Permission | Why we need it | When we ask |
|---|---|---|
Camera (NSCameraUsageDescription) |
To capture documents. We do not use the camera for any other purpose. | The first time you tap the scan button. |
Photo Library — Read (NSPhotoLibraryUsageDescription) |
To import existing photos as documents. | When you tap "Choose from album". |
Photo Library — Write (NSPhotoLibraryAddUsageDescription) |
To save exported documents. | When you tap "Save to Photos". |
iCloud (com.apple.developer.icloud-container-identifiers) |
For the optional iCloud Sync feature (paid tier). | Only if you enable iCloud Sync. |
We do not request: microphone, location, contacts, calendars, motion, Bluetooth, FaceID, Advertising Identifier (IDFA), or any tracking-related permission.
ScannerPro offers the following in-app purchases processed by Apple App Store:
flysoon.top.ScannerPro.Standard. Permanent for the buying Apple ID. Unlocks: unlimited exports, no watermark, all OCR languages, all filters.Apple processes the transaction and shares your purchase record with us through StoreKit. We do not collect your billing details, payment card numbers, or any financial information beyond the fact that you own the Standard entitlement.
ScannerPro has a "Server Settings" screen that lets you point the app at a REST endpoint of your choice to receive anonymous "document.created" events. This is for power users who want to track their own scan history on their own server.
doc_id, title, page_count, tags, filter mode, app version, build number. No original images. No OCR text. No device identifier. No IP address beyond what the request itself contains.If you enable iCloud Sync, your document metadata and OCR text are stored in a CloudKit private database linked to your Apple ID. Original image files are not uploaded.
You can disable iCloud Sync at any time: Settings → iCloud → toggle off. After disabling, future changes stay local. Existing iCloud data is deleted within 30 days of your Apple ID losing the iCloud Sync entitlement, per Apple's CloudKit retention policy.
ScannerPro can send a single small anonymous event to the self-hosted endpoint you configured in section A above each time you save a document. The feature is off by default; you must opt in.
What is sent (only if you turned the toggle ON):
en_US, zh_CN)contract / receipt / note / businessCard / other — derived locally, never from OCR text)enhanced, bw, original)What is NEVER sent: document title, OCR text, the scanned image, your identifierForVendor, IDFA, Apple ID, or any cross-app identifier.
Who receives it: only the server you configured in section A. We (the developer) do not run that server.
How to disable: Settings → Anonymous Analytics → turn off. When you turn it off, any events still queued on disk are deleted on the next app launch — nothing stale is sent.
Data retention: the receiving server is yours. We do not set a retention policy for a server we don't operate. The on-device queue is capped at 100 events with a 7-day TTL (oldest events are dropped first if you go offline).
Legal basis (EU / UK GDPR): explicit opt-in consent under Article 7. The toggle is off by default, the disclosure footer lists every field that would be sent, and you can revoke at any time.
ScannerPro is not directed at children under 13. We do not knowingly collect data from children. Because the app collects no data by default, no specific children's data policy is needed.
App data is stored locally on your device. For users in the EU / EEA / UK / California / other jurisdictions with data-protection laws, this means your data controller is you — you decide what to do with your documents. We are not a data controller for any data you store on your device.
If we change this policy, we will:
For privacy questions or to exercise any data-related rights, contact us at:
We aim to respond within 7 business days.
ScannerPro uses the following Apple frameworks, all of which are governed by Apple's own privacy policy (https://www.apple.com/legal/privacy/):
None of these frameworks are used to send your data anywhere unless you explicitly opt in (iCloud Sync, self-hosted report endpoint, or a purchase through App Store IAP).