Scanify

Scanify Privacy Policy

This Privacy Policy explains what personal data the Scanify mobile application ("Scanify", "the App") processes, why, who receives it and what rights you have. It is written to meet the EU/UK General Data Protection Regulation (GDPR), Türkiye's Personal Data Protection Law No. 6698 (KVKK) and Google Play's User Data policy. A Turkish version (KVKK Aydınlatma Metni) is also available; for users in Türkiye the Turkish version prevails.

1. Who is responsible for your data

Data controller: Nurullah Turgut, an independent developer publishing apps under the name "Glad Studio"
Country: Türkiye
Email: [email protected]

2. Summary

• Your scans, PDFs, signatures and watermarks stay on your device. We never upload them, and we have no servers that store them.
• These files are excluded from Android cloud backup and device-to-device transfer. If you uninstall the App or lose your device, they are gone unless you have exported them.
• We do not create accounts. We do not collect your name, email address (unless you write to us), contacts, location or advertising ID.
• We do not show ads, sell your data or use it for targeted advertising.
• The App sends a limited set of technical and subscription data to Adapty, which manages subscriptions, and diagnostic data to Google ML Kit. Payments are handled by Google Play.
• Our website is hosted on Cloudflare (Section 3.6).

3. What data we process

3.1 Content that stays on your device

The App processes the following content only locally on your device, so that its features work:

• document images captured with the camera;
• QR and barcode results;
• PDFs you create, import, edit, merge, split, protect or convert;
• images imported from your gallery or files;
• signatures and watermarks you create or save;
• file names, folders, recent files, settings and usage counters, such as the daily free-signature count.

We cannot access this content. It leaves your device only when you choose to share, export or open it in another app. That transfer is then governed by the receiving app.

PDF passwords you enter are used only to open or protect the file. They are kept in memory while the App runs and are never stored or sent anywhere.

3.2 Subscription data (Adapty)

To sell and validate Premium subscriptions, the Adapty SDK in the App sends the following to Adapty:

• a random Adapty profile ID created at first launch (not linked to your name or email);
• subscription status, access level, product and plan identifiers, Google Play purchase token and order ID, purchase, renewal, cancellation and refund events;
• paywall events, such as which paywall was shown and whether a purchase started, completed or was cancelled;
• device and app information: device model, operating system version, app version, language and store country/region;
• install source information from Google Play (install referrer).

We have configured the Adapty SDK not to collect your IP address and not to collect your advertising ID.

3.3 Diagnostic data (Google ML Kit)

Text recognition (OCR) and barcode scanning run on your device. Your images and the recognised text are not sent to Google. However, the ML Kit libraries send Google limited diagnostic and usage data:

• device model, operating system version and available hardware accelerators;
• app package name and version;
• a per-installation identifier;
• performance metrics such as speed, error codes and feature version.

Google uses this data for diagnostics and to improve ML Kit, and sends it encrypted (HTTPS).

3.4 Payments (Google Play)

Purchases are made through Google Play. Google processes your payment details and Google account as an independent controller under the Google Privacy Policy. We never receive your card details.

3.5 Support requests

If you email us, we process your email address, the content of your message and any details you include, such as a Google Play order ID, to answer you.

3.6 Website (gladstudio.bid)

Our website is hosted by Cloudflare, Inc. When you visit it, Cloudflare processes technical logs such as your IP address, browser and device information, the page requested and the time, to deliver the page to you and protect the site against abuse. We do not use analytics, advertising or tracking cookies or tools on the site. Fonts and images are loaded from the site itself; no requests are sent to third-party servers.

4. Purposes and legal bases

We do not use automated decision-making that produces legal or similarly significant effects on you.

How data is collected: automatically, by electronic means, through the SDKs in the App (Sections 3.2, 3.3 and 3.6), and directly from you when you contact us (Section 3.5).

5. Who receives your data

We do not sell personal data. We do not share it for cross-context behavioural advertising.

6. International transfers

Adapty, Google and Cloudflare process data outside Türkiye and outside the EEA/UK, mainly in the USA. Transfers from the EEA/UK rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) included in the providers' data processing terms. Transfers from Türkiye are subject to KVKK Article 9 and the Regulation on the Transfer of Personal Data Abroad; we are requesting that our providers sign the standard contract published by the Turkish Personal Data Protection Board, and signed contracts are notified to the Board. You may request information about these safeguards using the contact details above.

7. How long we keep data

• On-device content: until you delete it in the App, use "Delete All Data", or uninstall the App.
• Adapty subscription data: while your subscription relationship exists. After it ends, kept only as long as needed for legal, tax and dispute purposes, after which it is deleted or anonymised. You can ask us to delete your Adapty profile at any time (see Section 9).
• ML Kit diagnostic data: under Google's retention schedule.
• Support emails: up to 2 years after your request is closed, unless the law requires longer.

8. Security

Your files are kept in the App's private storage, protected by Android's app sandbox. They are excluded from cloud backup. PDFs you protect with a password use AES-256 encryption. Data sent to Adapty and Google travels over encrypted connections (HTTPS). No system is perfectly secure, so we recommend using a screen lock on your device.

9. Your rights

Depending on where you live, you have the right to:

• access your personal data and get a copy (GDPR Art. 15);
• rectification (Art. 16);
• erasure (Art. 17);
• restriction (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw any consent at any time, where processing is based on consent.

Users in Türkiye have the rights in KVKK Article 11. You may:

• learn whether your personal data is processed;
• request information about the processing;
• learn the purpose of processing and whether data is used for that purpose;
• know the third parties in Türkiye or abroad to whom data is transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction under KVKK Article 7;
• request that correction or deletion be notified to the third parties who received the data;
• object to a result against you that arises exclusively from automated analysis;
• claim compensation for damage caused by unlawful processing.

How to exercise your rights:

• Send your request to [email protected]. If you prefer to apply in writing by post, email us first and we will send you a correspondence address.
• Because the App has no accounts, include your Google Play order ID (starts with "GPA.") so we can find your Adapty profile.
• We answer free of charge within 30 days.
• To delete local data yourself, use Settings → Delete All Data, or uninstall the App.

Complaints: You may lodge a complaint with your local data protection authority. In Türkiye this is the Personal Data Protection Board (KVKK Kurulu), kvkk.gov.tr.

US state privacy laws: We do not sell or "share" personal information as defined by the California Consumer Privacy Act and similar laws.

10. Children

Scanify is a general-audience productivity app and is not directed to children under 13 (under 16 in the EEA where local law requires). We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

11. Device permissions

You can revoke permissions at any time in Android settings. Features that need them will then stop working.

12. Changes to this policy

We may update this policy when the App or the law changes. We change the effective date at the top. For material changes, we notify users in the App or in the Google Play listing before they take effect. Previous versions are available on request.

13. Contact

Nurullah Turgut (Glad Studio) · [email protected] · gladstudio.bid