Privacy Policy – PDF Scanner | Photo to PDF
Privacy Policy – PDF Scanner | Photo to PDF
Effective date: 30 October 2026
PDF Scanner | Photo to PDF keeps your scans on your device: it has no account, no cloud, no ads and no text recognition, and your documents are never uploaded to us. What it does collect and share is set out below.
The PDF Scanner | Photo to PDF app (package name com.documentscanner.pdf.sign, the “App”) is published by Calify LTD, a company registered in Israel (“Calify”, “we”, “us”). This policy applies to the Android version of the App distributed through Google Play.
It explains what information the App collects, how we use it, which third parties receive it, how long it is kept and the choices and rights you have. Questions about this policy can be sent to support@calify-ai.com.
Your scans and documents. Everything you scan, import, edit, sign, merge, compress or export is processed on your device. Edge detection, cropping and filters run locally, and the App contains no text recognition (OCR) and no AI: we never read the content of your documents, and nothing is uploaded to us or to any processing service. A document leaves your device only when you share it, print it, or turn on the optional setting that saves a copy to your photo gallery.
Camera. With your permission, the App uses the camera to scan documents, ID cards, books, whiteboards and slides. Images are saved in the App’s private storage on your device. The camera is optional; you can import photos and PDFs instead.
Photos and files you pick. Photos are imported through Android’s photo picker and PDFs through Android’s file picker. The App receives only the items you select and has no other access to your photos or files.
App lock and biometrics. If you set a passcode for the App or a folder, only a salted cryptographic hash of it is stored on your device, never the passcode itself. Fingerprint or face unlock is handled by Android; the App never receives your biometric data.
PDF passwords and signatures. A password you set on an exported PDF is used on your device to encrypt that file and is never sent to us. Signatures you draw are stored on your device for reuse.
Device and usage data. Through Google Firebase (Analytics, Crashlytics and Remote Config) we receive a Firebase installation ID, your device’s advertising ID (unless you have deleted it in Android settings), device model and Android version, app version, language, country derived from your IP address, which link or campaign led to the install, and usage events such as a scan saved (with its page count), a file exported, a PDF tool used, a subscription screen viewed or a setting changed. These events carry only fixed codes and counts: they never include document names, file names, folder names, tags or passcodes. Crash reports contain the error, a stack trace and the device details above.
Purchases. If you buy Pro, Google Play processes the payment. We receive only the purchase status and product identifier needed to unlock Pro on your device, never your payment details.
Library and settings kept on your device. Your documents, folders, tags, signatures, preferences and cached Pro status are stored locally and never uploaded.
Contact us. Tapping Contact us opens your own email app with a message to support@calify-ai.com that includes the app version, Android version and device model, so we can help faster. Nothing is sent unless you send it.
We use the information described above only to:
Provide the App’s features: scanning, editing, signing, PDF tools, sharing and printing
Protect your documents with the app lock, folder lock and PDF passwords you set
Unlock and maintain Pro after a purchase
Understand how the App is used and fix crashes and bugs
Configure and improve the App remotely (for example how the subscription screen is shown) through Firebase Remote Config
Measure which channels and ad campaigns, including our Google Ads campaigns, bring new installs and purchases
Answer your support requests
Comply with legal obligations and enforce our Terms of Use
We do not sell personal information, do not show ads in the App and do not build profiles of individual users. We use the advertising ID only to measure and improve our own ad campaigns.
We have no servers of our own. Data leaves your device only to the recipients below, each under its own privacy terms.
Recipient
What it receives
Why
Google Firebase (Analytics, Crashlytics, Remote Config)
Firebase installation ID, advertising ID, device and app details, usage events, crash reports, install source, IP address
Usage statistics, crash fixing, remote configuration, measuring our Google Ads campaigns (Firebase privacy)
Google Play (Billing)
Purchase status, IP address
Subscriptions (Google privacy policy)
Android print service and your printer
The document you choose to print
Printing. Android’s print service, or the print plugin you have installed, delivers the job to your printer under its own privacy policy
Apps you share or save to
The file you share, or the gallery copy you turn on
Sharing through the Android share sheet, and the optional copy in your photo gallery; that app’s privacy policy then applies
Your email app
The support message you choose to send
Contact us
No document ever goes to Google or to us through any of these: Firebase and Google Play receive only the usage, crash and purchase data described in section 2.
No reading of your documents: the App has no text recognition and no AI, so neither we nor any service sees what your scans contain
No copies of your scans, photos or PDFs on any server; no cloud, no sync and no share links
No in-app ads: the App contains no ad networks, and the advertising ID is used only to measure our own ad campaigns
No account, login, name, email or other contact details
No access to photos or files beyond the items you pick
No location, contacts or microphone
No push notifications
No biometric data and no passcodes: Android handles fingerprint and face unlock, and only a hash of your passcode is kept
We do not operate servers for the App, so no personal data is stored by Calify. Your documents, folders, signatures and settings stay in the App’s private storage on your device until you delete them in the App, clear the App’s data or uninstall it. Files prepared for sharing are kept as a temporary copy in the App’s cache.
The App does not back up your data: it opts out of Android cloud backup, and there is no account or cloud copy. Uninstalling the App or losing your device permanently removes your scans, so export or share the documents you want to keep. If you turn on the gallery copy setting, the JPEG copies live in your photo gallery and remain there after you uninstall the App.
Analytics and crash data is held by Google on our behalf. Firebase keeps analytics event data for up to 14 months and crash reports for 90 days, after which it is deleted or aggregated. Google Play keeps purchase records under its own terms.
Google operates servers in the United States, the European Union and other countries, so data sent to Google may be processed outside your country. Where required, these transfers rely on Google’s standard contractual safeguards.
Camera is optional and asked for only when you scan. You can deny or withdraw it at any time in Android Settings > Apps > PDF Scanner | Photo to PDF > Permissions; importing photos and PDFs keeps working.
Delete documents, folders and signatures inside the App at any time. A deleted document can be restored for a short time, after which it is removed for good.
Gallery copies are off by default. Turn the setting off in Settings to stop new copies; existing copies are deleted from your photo gallery app.
App lock, folder lock and biometric unlock can be turned on or off in Settings.
Clear all locally stored data through Android Settings > Apps > PDF Scanner | Photo to PDF > Storage > Clear data, or by uninstalling the App.
Manage or cancel Pro through your Google Play subscriptions page.
Reset or delete your advertising ID at any time in your device settings (usually Settings > Privacy > Ads, or Settings > Google > Ads). Once it’s deleted, the App receives only zeros.
Depending on where you live (for example the European Economic Area, the United Kingdom, California or Israel), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, and to lodge a complaint with your data protection authority. Because the App holds no account, we identify your data by your Firebase installation ID, which you can find and reset by clearing the App’s data. To exercise a right, email support@calify-ai.com; we respond within 30 days.
We do not sell or share personal information for cross-context behavioural advertising as defined by California law.
Children. The App is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
Security. Your documents are kept in the App’s private storage, which other apps cannot read, and can be protected further with the app lock, folder lock and biometric unlock. Password-protected PDFs are encrypted with AES on your device; if you forget the password, neither you nor we can recover the file. Traffic between the App and Google is encrypted in transit (HTTPS). No method of storage is completely secure, so we cannot guarantee absolute security.
Changes. We may update this policy when the App or the law changes. The current version is always available at https://www.calify-ai.com/privacy-policy-pdf-scanner, with its effective date at the top. Material changes will be announced in the App or on the store listing.
Contact. Calify LTD, Israel — support@calify-ai.com.