Privacy Policy

App: AI Smart Scanner · Provider: MAFCoders
Effective date: 14 July 2026 · Last updated: 17 July 2026 · Contact: maafcoders@gmail.com

1. Who We Are

AI Smart Scanner is a document scanner and PDF/AI toolkit provided by MAFCoders ("we", "us", "our"). For any privacy question or request, contact maafcoders@gmail.com.

2. Information We Collect

We collect only what is necessary to provide the App's features:

• Account information (only if you sign in). Sign-in is optional and is used mainly to link and restore your subscription. If you sign in with Google or Apple, we receive — through Google Firebase Authentication — your name and email address and a unique account identifier (Firebase User ID). You can use the App without signing in.
• Subscription & purchase information. When you purchase a subscription, our billing provider RevenueCat, together with the Apple App Store or Google Play, processes the purchase and provides us with your subscription status and an app-user identifier. We do not receive or store your payment card details.
• Advertising data (free version). If you use the free, ad-supported version, Google AdMob collects and processes your device's advertising identifier and related device and ad-interaction data to serve, cap, and measure ads. Personalized ads are shown only where permitted and, in the EEA/UK/Switzerland, only with your consent. You can opt out of personalized ads, and Pro subscribers see no ads at all (see Section 4).
• Promotional (redeem) codes. If you redeem a promotional code, the code and your Firebase User ID are sent to our secure Cloud Function, and a redemption record is stored in Google Firebase Firestore so we can grant and track your promotional Pro access. This applies only if you redeem a code.
• Announcements & device-integrity tokens. Product announcements are delivered via Firebase Cloud Messaging using a broadcast topic; we do not store a per-device push token. Firebase App Check generates a device-integrity token so our backend can verify that requests come from a genuine installation of the App.
• Documents & content you create. Documents you scan, import, create, or edit — including extracted text, titles, folders, categories, signatures, and annotations — are stored on your device. This content leaves your device only when you actively use an AI feature or a cloud-backup feature (see Sections 6 and 8).

3. Information We Do NOT Collect

• No third-party analytics or usage-tracking SDKs (usage counters stay on your device).
• No crash-reporting SDKs.
• We do not sell or rent your personal information.
• Advertising is limited to Google AdMob and is described in Section 4; you can opt out of personalized ads or remove ads entirely with Pro.

4. Advertising (Google AdMob)

The free version of the App shows ads through Google AdMob (banner, native, interstitial, rewarded, and app-open formats). To serve, limit, and measure ads, AdMob and Google process your device's advertising identifier and related technical and ad-interaction data under Google's privacy policy.

• Consent (EEA/UK/Switzerland). Before serving personalized ads, we present a Google-certified consent message (Google User Messaging Platform). You may choose non-personalized ads.
• Your controls. You can reset or delete your advertising identifier and limit ad personalization in your device settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy & Security → Tracking / Apple Advertising).
• Rewarded ads are optional. You choose whether to watch a rewarded ad to unlock extra usage; you are never required to.
• Pro removes ads. A paid Pro subscription disables all ads across the App.

More on how Google uses data from apps that use its services: policies.google.com/technologies/partner-sites.

5. Device Permissions

• Camera — to scan documents and capture images (processed on your device).
• Photo library / media (images) — to import images and, when you choose, save exported files.
• Notifications — to show subscription and reminder notifications and product announcements. You can disable them in your device settings.
• Biometrics / Face ID / fingerprint — to lock and unlock the Secure Folder locally. Biometric data never leaves your device and is handled by the operating system.
• Run at startup (receive boot completed) — to reschedule your reminder notifications after a device restart.
• Vibrate — for notification feedback.
• Internet / network state — required for ads, AI features, sign-in, purchases, announcements, and optional cloud backup.
• Microphone (iOS) — a microphone usage description is declared by the underlying camera component; the App captures still images only and does not record or transmit audio.

6. AI Processing (Google Gemini)

When you use an AI feature (for example, summarize, chat about a document, smart rename, extract data, classify, translate, or "more accurate" text extraction), the relevant document text and/or images are sent — through our Firebase Cloud Function — to Google's Gemini (Generative Language) API for processing, and a result is returned to the App. This happens only when you invoke an AI feature. Google processes this data under Google's terms and privacy policy. We do not use AI output to build advertising or user profiles. AI features are optional.

7. On-Device Processing (OCR, Signatures, PDF, Images)

The following run locally on your device and do not transmit your content to us: text recognition (OCR) via on-device machine learning (Google ML Kit); electronic signatures you draw or type (stored in a local vault); PDF operations (create, merge, compress, split, annotate, view); image enhancement filters; document (.docx) viewing; and encryption of the Secure Folder.

8. Cloud Backup (Optional — Your Own Account)

You may optionally back up your documents to your own Google Drive or your own Dropbox account. If you connect an account, you authorize the App via OAuth to upload files and a backup manifest to a dedicated folder in your cloud storage. We do not store your documents on our servers or receive a copy of your backups. Google Drive access is limited to files the App creates (the drive.file scope); Dropbox access is limited to the App's scoped folder. You can disconnect at any time.

9. Local Storage & Security

Documents, extracted text, folders, and metadata are stored in a local database and your device's app storage; settings and usage counters are stored in local preferences. The Secure Folder encrypts files at rest with AES-256; the encryption key and related security settings are stored in the platform's secure keystore (Android Keystore / iOS Keychain). Network connections use HTTPS, and App Check verifies request integrity. No method of storage or transmission is completely secure.

10. Third-Party Services

The App relies on the following third-party services, each governed by its own privacy policy:

• Google / Firebase — Authentication, App Check, Cloud Messaging, Cloud Functions, Firestore, and the Gemini AI API (policies.google.com/privacy).
• Google AdMob — advertising in the free version (policies.google.com/technologies/ads).
• RevenueCat — subscription management (revenuecat.com/privacy).
• Apple App Store / Google Play — purchase processing and in-app review.
• Dropbox (only if you connect it) — cloud backup (dropbox.com/privacy).

11. Data Retention

Content you create is retained on your device until you delete it or uninstall the App. Account information tied to sign-in is retained by Firebase for as long as your account exists (you may request deletion). Promotional-code redemption records are retained in Firestore while your promotional access is active and for a reasonable period thereafter. Subscription records are retained by RevenueCat and the app stores as required for billing and legal purposes. Cloud backups remain in your own cloud account until you delete them.

12. Children's Privacy

The App is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. International Data Transfers

Some providers (including Google/Firebase, Google AdMob, RevenueCat, and — if you connect it — Dropbox) may process data in the United States and other countries. Where personal data of users in the EEA/UK is transferred internationally, such providers rely on appropriate safeguards (such as Standard Contractual Clauses).

14. Your Rights and Choices

Account & data deletion. You can sign out at any time. To delete your account, open the App and go to Profile → Delete account — this permanently removes your sign-in account (identifier, email, name), any promotional-code redemption records, and your subscription customer record. During deletion you may also choose to delete all documents on that device; if you don't, your scans stay on your device (we never hold a copy) and you can delete them in the App or by uninstalling it. If you no longer have the App installed, email maafcoders@gmail.com from your sign-in address and we will delete the account, normally within 30 days. Full instructions: Delete Your Account. Note: deleting your account does not cancel an active subscription — cancel that in Google Play — and Google Play / our billing provider retain transaction records for as long as the law requires. Cloud backups live in your own Drive/Dropbox account; disconnect and delete them there.

Advertising choices. You may decline personalized ads (via the in-app consent message where shown), reset or limit your advertising identifier in device settings, or subscribe to Pro to remove ads entirely.

GDPR (EEA/UK). Our legal bases are your consent (optional sign-in, AI features, cloud backup, and personalized advertising), performance of a contract (subscriptions you purchase), and our legitimate interests (securing and operating the App and showing non-personalized ads in the free version). You have the right to access, rectify, erase, restrict, or object to processing, the right to data portability, and the right to withdraw consent at any time, and to lodge a complaint with your local data protection authority.

CCPA/CPRA (California). We do not "sell" your personal information for money. If you use the free, ad-supported version with personalized ads enabled, the use of your advertising identifier for personalized advertising may be considered "sharing" for cross-context behavioral advertising under the CPRA. You can opt out at any time by declining personalized ads, limiting or resetting your advertising identifier in device settings, or subscribing to Pro (which removes ads). California residents have the right to know, delete, and correct personal information, and to non-discrimination for exercising these rights.

To exercise any right, contact maafcoders@gmail.com.

15. Changes to This Policy

We may update this Policy from time to time. We will indicate changes by updating the "Last updated" date above and, where appropriate, by an in-app notice.

16. Contact Us

MAFCoders — maafcoders@gmail.com