Privacy Policy

Owner and Data Controller

In short

• The Owner operates no server that receives the User's documents. They are stored on the User's device and, with iCloud sync on, in the User's own iCloud account, operated by Apple Inc., to which the Owner has no access.
• The text of the documents is recognized on the device. Names, summaries and the data shown as cards are produced by Apple's language models, on the device or through Apple's Private Cloud Compute, as the User chooses.
• No account. No advertising, analytics or tracking software. No cookies.

Types of Data collected

Among the types of Personal Data that this Application processes, by itself or through third parties, there are: the documents the User scans or imports (camera images of the pages, PDF files and images) and anything they contain; the text recognized in them; what is derived from that text (a suggested name and folder, the document's date, a summary, and data such as amounts, deadlines, reference numbers and contacts); the names the User gives to documents and folders; preferences and settings; the names and iCloud identities of the people a folder is shared with, as provided by Apple; device information; application diagnostics; the content of the messages the User sends to the Owner, together with the User's email address; and Usage Data recorded in the website's server logs.

Documents can contain any kind of information, including data of third parties and special categories of data (for example a medical report). The Application treats every document the same way, as described below, and never sends one to the Owner. Users are responsible for the third-party Personal Data contained in the documents they store or share, and confirm that they are entitled to do so.

Unless specified otherwise, the Data described here is needed for the function that uses it; the User can always decide not to scan, import or share a document.

Mode and place of processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data is processed using IT tools, following procedures strictly related to the purposes indicated. Apart from the Owner, the Data may be accessible only to the external parties named in this document, acting where necessary as Data Processors.

Place

The Data is processed on the User's device, in the User's own iCloud account, on Apple's Private Cloud Compute where the User chooses it, and, for the messages the User sends and the website's logs, at the Owner's offices and at the providers named below. Depending on the User's location, this may involve a transfer of Data to a country other than their own, including the United States; the sections below name the safeguards each provider relies on.

Retention time

Documents, their text and their analysis stay on the User's device and in the User's iCloud account until the User deletes them. Backups the User creates are kept according to the retention the User sets in the Application; manual backups are never deleted automatically. Emails sent to the Owner are kept for as long as needed to handle the request and any follow-up. Website logs are deleted once they are no longer needed for security and troubleshooting.

The purposes of processing

• Scanning and importing documents and storing them as PDF files, organized in folders;
• Recognizing the text of the documents, to let the User read and search it;
• Suggesting a name, a folder and a date for a document, writing a short summary and showing its data as cards;
• Syncing the User's documents across the User's devices and sharing a folder with the people the User invites, through the User's iCloud account;
• Creating backups in the User's own storage;
• Answering the User's emails and investigating the problems the User reports;
• Operating the website paginascan.com;
• Complying with applicable laws.

Detailed information on the processing of Personal Data

Camera and imported files

If the User grants access, the Application uses the camera only while the User frames a page, through Apple's document scanner (VisionKit). The User can also import PDF files and images chosen in the Files app; the Application reads only the files the User picks. Each document is saved as one PDF on the device.

Personal Data processed: images of the pages; the imported files; anything visible in them.

Legal basis: performance of the service requested by the User.

Place of processing: User's device.

Text recognition and analysis

The text of each document is recognized on the device with Apple's Vision framework. To suggest a name, a folder and a date, write a summary and find the data shown as cards, the Application gives the recognized text of the first pages, together with the names of the User's folders, to one of Apple's language models (Foundation Models), according to the choice the User makes in the Application's settings:

• On iPhone only: the model runs on the device and nothing leaves it.
• Private connection (where available, from iOS 27): the request is processed by Apple's Private Cloud Compute, which, according to Apple, uses the data only to answer the request, does not store it, and makes it inaccessible to anyone, Apple and the Owner included. When it is not available, or the User's daily allowance is used up, the device's own model is used instead.

The recognized text and the analysis are stored with the document and travel with it like the rest of the document. The Owner never receives them.

Personal Data processed: the text of the documents; the names of the User's folders; the results of the analysis.

Legal basis: performance of the service requested by the User.

Place of processing: User's device; for the private connection, Apple's Private Cloud Compute (see Apple's description and Apple's privacy policy).

Adding a date to the Calendar

From a card showing a date, the User can open the system's event editor, prefilled with the document's name and that date. The editor is operated by iOS: the Application does not ask for access to the Calendar and receives nothing back from it.

Data storage and iCloud sync

Documents, folders, their text and analysis, and the User's preferences are stored on the device. With iCloud sync on (it is on by default, and can be turned off in the Application's settings), they are also stored in the User's private iCloud database, managed by Apple Inc., so that they are available on the User's other devices. The Owner has no access to this content.

Personal Data processed: the documents and everything listed above.

Legal basis: performance of the service requested by the User.

Place of processing: User's device; with iCloud sync on, Apple's data centers.

Folder sharing

The User may share a folder with other people through iCloud. Its documents, with their text and analysis, then become visible to the participants the User invites and, if the User grants editing rights, can be changed or added to by them. Documents in a shared folder are stored in the iCloud account of the person who shared it. The User can stop sharing at any time, and a participant can leave at any time.

Personal Data processed: the shared folder's documents; the names and iCloud identities of the owner and the participants, as provided by Apple.

Legal basis: performance of the service requested by the User.

Place of processing: the iCloud accounts of the owner and the participants, managed by Apple Inc.

Backups

Backups, automatic or manual, are saved as files in the User's own storage: in the User's iCloud Drive where available, otherwise on the device. They contain the documents, their text and analysis, and the User's settings. The Owner has no access to them.

Place of processing: User's device; the User's iCloud Drive, managed by Apple Inc.

Crash reporting and diagnostics

Where Apple's standard crash reporting is used (TestFlight, App Store Connect), crash logs reach the Owner only if the User has chosen to share them with app developers in the device's privacy settings.

The Application also keeps a technical log on the device, limited in size, which records what the Application did. It leaves the device only when the User attaches it to an email to the Owner or exports it from the Application's settings, and each time the User chooses what it contains. Its technical categories, included by default, contain times, counts, sizes, states and errors, the device model, the iOS version and language, and never the text or the names of the User's documents. Two further categories are included only if the User turns them on for that email or export: Document Text (text recognized in the User's documents, such as names, addresses, tax codes, amounts or account numbers) and Document Names (the names of the User's documents and folders).

Personal Data processed: device model; OS version; diagnostic information; the contents of the technical log described above.

Legal basis: legitimate interest of the Owner in finding and fixing errors; for the technical log, the User's choice to send it and, for its two personal categories, the User's consent, given for each email or export.

Place of processing: Apple Inc., United States; for the technical log, the User's device and, if sent, the Owner's email service.

Purchases

Purchases of Pagina Scan Pro are processed by Apple through the App Store. The Owner receives no payment details and no Personal Data of the buyer, only aggregate sales reports from Apple. The Application checks with Apple, on the device, which purchases the User's Apple Account holds.

Place of processing: Apple Inc.

Contacting the Owner by email

The User can write to the Owner by email, also from the Application (Settings, Support, Help & Feedback, or by shaking the device), which prepares a message in the User's own email app. Nothing is sent until the User sends it. The message includes the Application version, the iOS version and the device model, and the User may choose to attach the technical log described above.

Personal Data processed: email address; the name set in the User's email account; the content of the message and of any attachment; Application version, iOS version and device model.

Legal basis: performance of the service requested by the User and legitimate interest of the Owner in answering the messages it receives.

Place of processing: Italy and the locations of the Owner's email provider, Google (Gmail), which may include the United States on the basis of the EU-U.S. Data Privacy Framework.

Website

The website paginascan.com is a static site. It sets no cookies, runs no analytics and loads no resource from third parties: while a page is read, nothing is sent to anyone but the site's own server.

Like any web server, the server records each request in a log (IP address, date and time, page requested, response code, browser user agent), used only for security and troubleshooting. The site is hosted on a server rented from DigitalOcean, LLC, which acts as a Data Processor, and its domain is registered with Cloudflare, Inc.

Personal Data processed: Usage Data (IP address, date and time, page requested, browser user agent).

Legal basis: legitimate interest of the Owner in operating a secure website.

Place of processing: the data center of the hosting provider; where data is transferred to the United States, on the basis of the safeguards in DigitalOcean's data processing terms (EU-U.S. Data Privacy Framework or Standard Contractual Clauses, as applicable).

Cookie Policy

This Application is a native mobile application and does not use HTTP cookies. Local storage on the device (such as the on-device database, the keychain and the application's preferences) is used only for what the Service needs to work. The website sets no cookies.

The Application includes no third-party software development kit for analytics, advertising or tracking, and does not ask for permission to track under Apple's App Tracking Transparency framework because it does not track.

The rights of Users under the GDPR

Users may exercise certain rights regarding their Data processed by the Owner. In particular, to the extent permitted by law, Users have the right to:

• Withdraw their consent at any time, where they have given it.
• Object to the processing of their Data, where it is carried out on a legal basis other than consent.
• Access their Data and obtain a copy of it.
• Verify and seek rectification of their Data.
• Restrict the processing of their Data.
• Have their Data deleted.
• Receive their Data and have it transferred to another controller, in a structured, commonly used and machine-readable format.
• Lodge a complaint with their competent data protection authority (in Italy, the Garante per la protezione dei dati personali).

Most of the User's Data never reaches the Owner: the User controls it directly, and deleting a document, a folder or the Application's iCloud data deletes it. For anything the Owner does hold, such as an email, requests can be sent to the contact details above and are answered as soon as possible, and within one month.

Children

The Application is not directed at children under 14, and the Owner does not knowingly collect their Data.

Changes to this privacy policy

The Owner may update this privacy policy at any time. The date of the last update is shown below; where changes are significant, the Owner will also say so in the Application.