PDF ScannerPrivacy Policy

Effective date and last updated: August 8, 2026

This privacy policy applies to the Android mobile application PDF Scanner (also known as PDF Scanner: AI Reader & Scan), identified by the application package name com.umbrabyte.pdfscanner, developed and published by Umbrabyte Apps. It complements the general Umbrabyte Privacy Policy and serves as the official privacy policy linked within the app and its Google Play Store listing.

Plain language summary: All your PDF documents, camera-scanned images, text notes, digitized handwritten signatures, and protection passwords are processed and stored strictly locally on your device. Umbrabyte does not operate cloud servers to host or process your files, requires no user account or registration, includes no intrusive advertisements, and never sells or rents your personal data. Your documents only leave your device when you explicitly choose to share or export them to third-party apps, when using the Android file selector, when Google Play processes a PRO purchase or subscription, or when contacting direct support.

This summary does not replace the detailed terms set forth below.

1. Scope and key facts

PDF Scanner is a comprehensive document suite and intelligent scanner powered by local AI (Google ML Kit). It allows you to digitize physical documents with your camera, recognize text with OCR to generate searchable PDFs, read PDFs with eye-protection modes (Reflow, Sepia, Night Mode), merge and split pages, add text and handwritten signatures, convert images and notes into print-ready A4 PDFs, encrypt documents with passwords, and listen to text using your own device’s text-to-speech (TTS) engine.

• No account or registration required: The application does not ask you to create a user account, profile, or provide personal credentials.
• 100% On-Device / Offline-First Processing: Camera document scanning and optical character recognition (Google ML Kit On-Device API, with its AI models packaged inside the APK itself), the PDF rendering engine (PDFBox), and format conversion all run entirely on your Android device processor, with no internet connection required.
• No Umbrabyte document servers: Umbrabyte does not own or operate servers where your scanned or read documents are uploaded, copied, or analyzed.
• No ads or cross-app tracking: The application contains no advertising networks, banners, or cross-app tracking SDKs. The app manifest explicitly strips (tools:node="remove") the Android permissions tied to the advertising identifier (AD_ID) and AdServices, even if a third-party dependency declares them transitively.
• No data sales: Umbrabyte does not sell, rent, or trade user personal information under any circumstances.
• No automated profiling: We do not perform user profiling or automated decision-making with legal effects.
• Platform integration: Optional PRO purchases and subscriptions are handled via the official Google Play Billing API. Anonymous quantitative product performance and stability metrics are collected via Firebase Analytics (never including document content or file names). The app periodically checks whether a newer version has been published on Google Play using the official Google Play Core (In-App Update API) library, and reading text aloud uses whichever Text-to-Speech engine is already configured on your Android system.

For the purpose of the Google Play Store Data Safety section, “collection” refers to transmitting data off the device to the developer or third parties. This policy transparently explains both local processing and platform services.

2. Data Controller

The developer and data controller for any data received directly by Umbrabyte (such as customer support communications or license management) is:

• Full Name: Cristian Donet Segura
• Studio Name: Umbrabyte Apps
• Business Address: Calle Pintor Camarón, nº 24, 12560 Benicasim, Castellón, Spain
• Tax ID (NIF): 20468489F
• D-U-N-S® Number: 374071851
• Privacy & Support Contact: support@umbrabyte.app

Platform services such as Google Play Store or third-party storage providers selected by the user act as separate independent controllers for data processed under their own privacy policies.

3. Data processed by the application

3.1 Information stored and processed on device

The app processes the following information solely within the private local storage of the app or system locations selected by you:

Scanned documents and notes may contain confidential or sensitive information provided voluntarily by you. Such information remains at all times under your exclusive control on your device.

3.2 Permissions & device access

Android permissions are requested transparently only when you initiate a feature requiring them. You can manage or revoke permissions anytime in Android System Settings:

The application does NOT request or access precise/approximate location, contacts list, call logs, SMS, microphone, health/fitness data, Android Advertising ID (GAID), unselected gallery photos, or biometric authentication data.

3.3 User-initiated sharing and export

When using app features to save a PDF to storage, export pages as PNG images, share an encrypted file via email, or send it to cloud drives or messaging apps (e.g. Google Drive, WhatsApp), data transfer occurs through standard Android system interfaces (Intent and SAF). The destination and recipients are chosen explicitly by you.

3.4 Data Umbrabyte does NOT receive

During standard use of PDF Scanner, Umbrabyte does not receive or store on servers:

• Content, text, or images of your PDF files.
• Camera photos or document scans.
• Handwritten signatures or encryption passwords.
• File names, paths, or local metadata.
• OCR-recognized text, or the text read aloud through your system’s Text-to-Speech engine (this processing happens on your device or, if your default TTS engine is a cloud service you installed yourself, between your device and that provider — never through Umbrabyte’s servers).
• Geographic location traces or credit card details.

If you contact support via email, we receive your email address, message content, and any attachments you voluntarily provide.

4. External services & data communications

To ensure secure distribution, license verification, and technical app health, PDF Scanner uses a minimal set of platform services provided by Google:

4.1 Distribution and payments via Google Play Billing

PDF Scanner is distributed via Google Play Store and uses the official Google Play Billing SDK (com.android.billingclient) to process optional subscriptions (monthly and yearly) and lifetime access purchases.

• Data processed by Google: When completing a transaction, Google processes your Google Account data, payment card/bank details, device identifiers, subscription status, and billing info. Umbrabyte never receives or stores payment card or bank account details.
• Data accessible to Umbrabyte: Umbrabyte only accesses anonymous transaction records, purchase region, sales reports, and entitlement status in Google Play Console for customer support, legally required refunds, and tax compliance.
• Applicable terms: Transactions are governed by the Google Privacy Policy and Google Play Terms of Service.

4.2 Product analytics via Firebase Analytics

PDF Scanner integrates Firebase Analytics (provided by Google Ireland Limited / Google LLC) to measure product stability and aggregated feature usage.

• Collected metrics: Aggregated quantitative events such as screen views (e.g. main screen, reader, paywall), daily quota triggers, technical errors, or subscription workflow completion.
• Strict privacy guarantee: Firebase Analytics is configured to strictly respect our Local-first privacy model. It does NOT collect file names, document content, text notes, camera images, signatures, passwords, or local file URIs.
• Google Analytics Privacy: See details in the Firebase Privacy Documentation.

4.3 Local processing via Google ML Kit (scanner and OCR)

Camera document scanning utilizes the Google ML Kit On-Device Document Scanner library. Edge detection, perspective correction, and filter enhancement run locally on your device processor. The “OCR & Searchable PDF” feature additionally uses the Google ML Kit Text Recognition library, whose text-recognition model ships packaged inside the app’s own APK. Neither ML Kit library transmits scanned photos, documents, or recognized text to Google’s servers; all analysis happens without an internet connection.

4.4 Android Auto-Backup (Google Backup)

If Android Auto-Backup is enabled on your Google Account, your Android OS may save an encrypted backup of app preferences and local database to your personal Google Drive storage. Umbrabyte has no access to these backup files. You can manage this setting in Android System Settings.

4.5 Update checks via Google Play Core (In-App Update API)

PDF Scanner uses Google’s official Play Core library (In-App Update API) to check whether Google Play has published a newer version and, when available, offer to install it without leaving the app.

• How it works: The check happens directly between your device and Google Play Store’s servers; Umbrabyte receives or processes no personal data through this feature. No additional device permission is requested — the check reuses the Internet access permission already described in section 3.2.
• Update types: Depending on the severity of the published fix (for example, a security issue versus a minor visual tweak), the app may show a flexible update (downloaded in the background without interrupting your use) or, only for critical issues, an immediate update. This check never runs during the splash screen, the onboarding tutorial, or the subscription paywall.
• User control: You always confirm installation through Google Play’s own official interface; the app never downloads or installs packages on its own outside that interface.

4.6 Speech synthesis via your system’s Text-to-Speech engine

The “Listen to PDF” feature converts your document’s text into audio using whichever Text-to-Speech (TTS) engine is configured as default in your Android device’s accessibility settings (typically “Speech Services by Google” or another engine installed by the device manufacturer). Umbrabyte hands the text to Android’s standard TextToSpeech interface and does not intervene in or store that exchange. If the Text-to-Speech engine you have chosen processes text in the cloud rather than on your own device, that processing is governed by that specific provider’s own privacy policy, which we recommend reviewing from your system’s accessibility settings.

5. Purposes and legal bases

Under the EU General Data Protection Regulation (GDPR), UK GDPR, and international privacy frameworks, processing operations rely on the following legal bases:

6. Data retention, deletion & management

Because documents, signatures, and preferences are stored locally on your phone, you maintain full control over your data retention and deletion:

Data Deletion: PDF Scanner does not use developer server user accounts. To delete all local app data and documents, clear app storage under Settings > Apps > PDF Scanner > Storage > Clear Data, or uninstall the application.

7. Data security

At Umbrabyte, we prioritize data security through privacy and security by design:

• Android Process Isolation (Sandbox): App data is isolated within the private Android sandbox, protected against unauthorized access from other installed applications.
• Document Encryption: When using “Password Protection”, generated PDFs are encrypted using standard 128-bit encryption algorithms. Your password is never sent to any server and remains your sole responsibility to remember.
• Encrypted Transport (TLS/HTTPS): Network communication required for Google Play Billing, Firebase Analytics, and Google Play Core update checks strictly uses HTTPS/TLS encrypted connections.
• Verified updates: Application updates are downloaded and installed exclusively through Google’s official Play Core Library, which verifies the package’s cryptographic signature before installing it, just like any manual update downloaded from Google Play Store.

We recommend keeping your Android OS updated with security patches and securing your device with a PIN, pattern, or biometric lock screen.

8. Your rights worldwide

We honor your privacy rights regardless of your location. You may submit privacy inquiries or exercise your rights by emailing us at support@umbrabyte.app.

European Economic Area & Spain (GDPR / LOPDGDD)

EEA and Spanish residents hold the rights detailed in GDPR Articles 15 to 22:

• Access, rectification & erasure: Request confirmation of data processing, access your data, or request deletion.
• Restriction & objection: Object to or restrict processing based on legitimate interests.
• Data portability: Export or move your standard PDF files anytime directly from your device.
• Supervisory authority: Lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or your local EEA privacy authority.

United Kingdom (UK GDPR)

UK residents hold rights under UK GDPR and Data Protection Act 2018 and may contact the Information Commissioner’s Office (ICO) at ico.org.uk.

United States (California CCPA/CPRA & State Laws)

For residents of California and other US states:

• Umbrabyte does not sell or share personal information or engage in targeted cross-context behavioral ads.
• We do not collect or process sensitive personal information for advertising purposes.
• You can request data access or deletion by contacting our privacy email.

Brazil (LGPD - Lei Geral de Proteção de Dados)

Brazilian residents may exercise their rights of access, confirmation, correction, anonymization, or deletion under the LGPD by contacting us or the Autoridade Nacional de Proteção de Dados (ANPD).

Canada, Australia, Japan & other regions

We fulfill privacy requests under applicable laws in Canada (PIPEDA), Australia (Privacy Act), Japan (APPI), and other applicable international regulations.

9. Children’s privacy

PDF Scanner is a document utility intended for a general audience and professional adult use. It is not intentionally directed to children under 13 years of age (or the equivalent statutory minimum age in each country, such as 14 in Spain).

We do not knowingly collect personal data from children. Because the app requires no account and operates locally, parents or legal guardians can manage device usage or delete local data at any time from Android system settings.

10. Changes to this privacy policy

We may update this privacy policy periodically to reflect app changes, new legal requirements, or transparency improvements.

Any changes will be published permanently and freely accessible at this same web address. We will indicate the last-updated date at the top of the document. We recommend reviewing this policy from time to time.

11. Contact information

For privacy inquiries, rights requests, or support:

Cristian Donet Segura — Umbrabyte Apps
Calle Pintor Camarón, nº 24
12560 Benicasim, Castellón, Spain
Email: support@umbrabyte.app
Website: https://umbrabyte.app