Scanleaf Privacy Policy

1. Who we are (the data controller)

The controller of any personal data described here is Navritto Solutions Private Limited, a company registered in Haryana, India (our CIN and registered office are shown at the foot of this page). You can reach us about privacy at privacy@navritto.com. This policy covers the Scanleaf app only; the navritto.com website has its own separate policy.

This policy took effect on 22 September 2026. The date it was last updated is shown above, and the material changes since are listed under “Changes to this policy”.

2. Your documents stay on your phone

Everything you scan stays on your device. Scanning, straightening, filtering, reading text (OCR), building PDFs and searching all run on your phone. Your documents are never uploaded to us or to anyone else — we operate no server that receives them, and there is no account to sign in to.

Scans are stored in Scanleaf's private storage, which other apps cannot read, and the app's cloud backup is switched off so they are not copied to your Google account. Uninstalling Scanleaf deletes them — use Settings → Export all documents to keep a copy somewhere you choose first. When you export or share a file, your phone's own file picker or share sheet asks where it should go; Scanleaf has no broad access to your storage. Exported PDFs contain no identifying metadata: no device name, no location, no producer string.

3. What Scanleaf collects

Scanleaf itself collects nothing about you. Navritto runs no analytics and no crash-reporting service, keeps no server that receives your data, and gets no statistics about how you use the app. We never see your documents or the text in them.

Three things do involve data leaving your device, each described in its own section below, and none of them includes your documents or the text recognised in them: the ads (section 4), the operational data Google's text recogniser sends about itself (section 6), and — if you buy the ad-free subscription — the purchase, which Google Play handles (section 5).

4. Advertising

Scanleaf is free and shows ads supplied by Google AdMob in two places, and only these two: one banner at the bottom of the library screen, and one full-screen advert after an export or share has finished. The full-screen advert is never shown before you do something, never while you are scanning or editing, not on your first few exports after you install the app, and at most once a day. The ad-free subscription (section 5) removes both.

To show ads, the app connects to Google's ad servers, and AdMob may access your device's advertising ID (the Android Advertising ID) and technical information such as your device type, an approximate location derived from your IP address, and how you interact with the ad. AdMob never receives your documents, their contents, their names, or the text recognised in them.

Google's handling of this data is described at https://business.safety.google/privacy, and Google's partner policies are at https://policies.google.com/technologies/partner-sites.

5. The ad-free subscription

Scanleaf's only purchase is an optional ad-free subscription, sold through Google Play, which removes both ads and changes nothing else — there is no watermark, no page limit and no trial, with or without it. The commercial terms (the price, how it renews and how to cancel) are in the Terms of Use.

What matters for your privacy is that Google Play handles the purchase and ties the subscription to your Google account, so Google receives the purchase data. This is the one point at which an account is involved, and it is Google's, not ours. Navritto runs no account system and receives no personal data from the purchase; the app only reads back from Google Play whether your copy is entitled to be ad-free.

6. On-device text recognition

Scanleaf reads the text on your pages (OCR) on your own device, using Google's ML Kit text-recognition components, with the recognition models held inside the app. Your pages and the recognised text are not sent anywhere for this.

Those components do send Google a small amount of operational data about the text-recognition feature itself — how its functions perform and are used — so that Google can keep them working. This never includes your documents, the images you scan, or the text recognised in them, and there is no way to switch it off while using the feature. Google lists the categories of data involved at https://developers.google.com/ml-kit/android-data-disclosure.

7. The legal basis for using your data

Under the GDPR we rely on these legal bases, each limited to what the purpose needs:

8. Who processes your data

Google is involved in three narrow ways: AdMob serves the ads; Google's ML Kit components provide the on-device text recognition and send Google operational data about that feature; and Google Play sells and manages the optional ad-free subscription. We use no analytics platform, no crash-reporting service, and no advertising network other than AdMob. We never sell your data, and we have no access to your documents to share in the first place.

9. International data transfers

Google may process the advertising data, the text-recognition operational data and the subscription data on servers outside your country, including outside the EEA. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses together with the additional safeguards described in Google's own privacy documentation, so the data keeps an equivalent level of protection.

10. Retention and deletion

We hold no personal data about you on any server, so there is nothing for us to retain or delete. Your scans stay on your phone and are deleted when you delete them or uninstall the app.

The advertising data, the text-recognition operational data and the subscription record are held by Google, not by us, under Google's own retention rules, and we keep no copy. You cannot request deletion of the ad data through Scanleaf; instead, reset or delete your advertising ID in your phone's settings (Privacy → Ads), withdraw consent under Settings → Manage ad privacy, and use Google's own controls at https://myadcenter.google.com.

11. Your rights

If you are in the EEA or the UK, the GDPR gives you the rights to access, correct, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent to personalised advertising at any time (Settings → Manage ad privacy). Because the only personal data involved is held and processed by Google, some of these rights are exercised through Google's own controls; we will help where we can — write to privacy@navritto.com.

You also have the right to lodge a complaint with a data-protection supervisory authority — in your own EEA country, or in the UK with the Information Commissioner's Office (ico.org.uk).

12. California privacy rights

If you are a California resident, the CCPA (as amended by the CPRA) gives you rights over your personal information. Navritto does not sell your personal information for money, and the app collects none of it for us. The one thing that may count as a “sale” or “sharing” under California law is the use of your advertising ID to show personalised ads through AdMob.

You can opt out of that: where the consent form applies it lets you decline; Settings → Manage ad privacy reopens it; and you can reset or delete your advertising ID in your phone's settings under Privacy → Ads. We do not knowingly sell or share the personal information of anyone under 16, and you will not be treated differently for exercising these rights.

13. Permissions

Scanleaf holds permissions for the camera, for network access, for the advertising ID and the related Android ad functions, and for in-app billing — and none for your files, your photos, your location, your contacts or your microphone. The build fails if a forbidden one is added.

Photos you import arrive through Android's photo picker, which hands the app the single picture you chose and needs no permission at all. The app shows you its own live permission list, with a reason for each, under Settings → What stays on this phone.

14. Children's privacy

Scanleaf is a general-audience utility. It is not directed at children, it is not part of Google Play's Designed for Families programme, and we do not knowingly collect personal information from children. Because the app carries ads, it is meant for a general or adult audience rather than for children. If you believe a child has provided personal information through the app, contact us — though the app sends us nothing that we could hold or delete.

15. Security

Your scans are kept in the app's private storage, which other apps on your device cannot read. The requests the app makes to Google use HTTPS.

16. Changes to this policy

If this policy changes, the updated version is published at this same URL with a revised “last updated” date, and a material change is noted in the app's release notes. The material changes so far:

17. Contact

Questions about this policy or the app can be sent to privacy@navritto.com. We aim to respond to privacy enquiries within 30 days. The publisher is Navritto Solutions Private Limited; our Corporate Identity Number is shown at the foot of this page and can be verified on the Ministry of Corporate Affairs portal.