Privacy Policy

Effective 2026-08-28

Your scans never leave this phone

Every capture, filter, OCR pass, and PDF write happens on-device using Apple's Vision and PDFKit frameworks. Nothing is uploaded to Honest Scanner or any third party. The only time a file leaves the device is when you tap Share — and it goes wherever you send it.

No account

There is no sign-up, no email, no phone number, and no anonymous identifier we assign you. Delete the app and every trace is gone.

Purchases go through Apple

Pro is billed by the App Store. To keep your Pro entitlement in sync across restarts, reinstalls, and Family Sharing, we use RevenueCat — a receipt-validation service used by many iOS apps. RevenueCat receives your Apple StoreKit receipt (which contains no card, name, email, or Apple ID) and returns an entitlement flag we mirror locally. RevenueCat assigns an anonymous session identifier to associate purchases across app launches; this identifier is not tied to your Apple ID or to any personal information.

Over-the-air updates

We use Expo Updates to ship bug fixes without requiring you to reinstall the app. When the app launches, it asks our update server which JavaScript bundle to fetch. The request contains only your device platform (iOS), the app's runtime version, and the update channel — never any identifier or personal information.

No tracking SDKs

• No analytics that upload page contents.
• No crash reporter that attaches your documents.
• No advertising identifiers.
• No third-party telemetry of any kind.

Permissions we ask for

• Camera — to scan documents.
• Photo library — only when the built-in document camera is unavailable on your device (for example on iOS simulators during development), so you can pick an image to import instead.

Contact

Questions or concerns: email support@honestscanner.com.