Privacy Policy
Scanlio ("the app") is a document scanner that runs in your browser. This policy explains what data the app handles and who can see it. The short version: your scans stay on your device unless you choose to upload them, and we run no servers that receive them.
1. What stays on your device
- Scans and documents — page images, generated PDFs, thumbnails, names, tags and the text recognised from them (OCR) are stored in your browser's IndexedDB. We never receive them.
- Preferences — theme, view mode, export format, chosen upload folders, last-used upload destinations and any OAuth client IDs you enter are kept in the browser's local storage.
- Sign-in tokens — access tokens for Google Drive and OneDrive are kept in session storage and disappear when the browser session ends.
- iCloud Drive folder — if you pick a folder, the browser keeps a handle to it so the app can write files there.
You can remove all of this at any time by deleting documents in the app or clearing the site's data in your browser settings.
2. Camera
The app asks for camera permission to scan pages. Video frames are analysed on your device to find page edges. They are not recorded or transmitted. You can revoke permission in your browser settings or import photos instead.
3. Cloud uploads you initiate
If you connect Google Drive or OneDrive and choose to upload a document, the app sends the file(s) directly from your browser to the provider using your account. You choose the file format (PDF, PNG or JPG) and the destination folder. We do not receive your tokens or files. What the providers do with the data is governed by their own policies (Google, Microsoft). Saving to iCloud Drive uses your device's folder picker or share sheet; data goes to Apple only through those system features.
- Google Drive — the app requests only the
https://www.googleapis.com/auth/drive.filescope. It lets Scanlio create files and folders and write into folders you select (via the Google Picker or a folder Scanlio created). Scanlio cannot see your other Drive files. Google data is used only to save the files you export and to show the folder you chose; it is never stored on our servers, sold, used for advertising, or used to train AI models. - OneDrive — the app requests
Files.ReadWriteandoffline_accessso you can choose any of your folders and so uploads can resume. While you browse, the app reads folder names only; it does not read the contents of your existing files.
Scanlio's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Third-party resources the app loads
To work, the app fetches code and data from third parties. Those requests reveal your IP address and browser details to the host, as with any website:
- OpenCV.js from docs.opencv.org (page-edge detection).
- Tesseract.js engine and language data from jsDelivr / tessdata.projectnaptha.com (OCR). Recognition itself runs on your device; your images are not sent.
- Google Identity Services and the Google Picker (accounts.google.com, apis.google.com) and Microsoft's sign-in pages, only when you connect those accounts.
- Hosting by Vercel, which may keep standard request logs (IP address, user agent, URL) for security and operations.
5. What we do not do
- No accounts, advertising, trackers or analytics.
- No selling or sharing of personal data — we do not have your documents to share.
- No use of your scans to train models.
6. Children
The app is not directed at children under 13 and we do not knowingly collect their data.
7. Your rights
Because we hold no personal data about you, access, deletion and export happen directly in the app and your browser. If you believe we hold information about you (for example from correspondence), open an issue at github.com/cckhaw/scanlio/issues and we will respond.
8. Changes
If this policy changes, we will update the date above. Material changes will be noted in the app's repository.
9. Contact
Questions about this policy: open an issue at github.com/cckhaw/scanlio/issues.