Privacy Policy

App: OCRScan AI  |  Developer: Hussain  |  Contact: hussainxdeveloper@gmail.com

Effective: 7 October 2026

This Privacy Policy explains how OCRScan AI (the "Application"), operated by Hussain ("Service Provider", "we", "us"), handles information when you use the Application.

In short: OCRScan AI does not require an account, shows no ads, and we do not operate any backend servers. The images and text you scan are processed on your device and never leave it, including when optional on-device AI features are used. The only information that reaches anyone else comes from processing purchases, handled by Google Play Billing and RevenueCat.

1. Information we do not collect

We do not collect, store, or have any access to:

All scanning, text recognition, cleanup, and translation happen using on-device processing. This data stays in the Application's private storage on your device until you delete it or uninstall the Application.

2. No backend servers

We do not operate any backend servers, and we do not directly collect, store, or process the information described in this policy on servers we own or control. Where data is collected (purchase data, described below), it is collected and processed directly by the third-party services involved — Google Play Billing and RevenueCat — sent directly from your device to those providers, not routed through us.

3. Permissions the Application requests

Importing images from your gallery or files uses your device's built-in picker, which does not require granting the Application broad photo or storage access.

4. Information collected for purchases (Google Play Billing & RevenueCat)

If you buy a subscription or make a purchase in the Application, the transaction itself is handled by Google Play Billing — we never see or store your payment details (card number, billing address, etc.).

We use RevenueCat, which acts as a data processor on our behalf, to manage subscription status and entitlements. Because the Application has no accounts, RevenueCat identifies your purchase using an anonymous identifier generated on your device — not any personal account of yours. RevenueCat receives purchase-related information such as the product purchased, transaction ID, purchase and renewal dates, and subscription status, used to validate purchases and prevent fraud. It never receives any scan content.

Prices are shown in the Application before you purchase and may vary by region. Subscriptions can be viewed, managed, or cancelled at any time through the Google Play Store — no sign-in to the Application itself is needed to do this.

5. Automatic technical data (Google Play / Android Vitals)

Like all apps on the Play Store, the Application's crash reports, "app not responding" (ANR) events, and basic performance data are automatically collected by Google Play at the operating-system level to help us find and fix bugs. We see this only in aggregate form through Google Play Console — never as content from an individual scan.

6. Optional diagnostics you choose to send

If you use the "Send Diagnostics" option in Settings, the Application prepares a report containing your device model, OS and app version, and recent error logs — never scan content. You choose where this is sent through your device's own share menu. Nothing is sent automatically or in the background.

7. Optional on-device AI features

Some optional features (such as AI-assisted spelling suggestions or document summaries) use a small AI language model that runs entirely on your device. If you turn one of these features on, the Application downloads the model once, with its size shown to you first, and it then works offline from then on, like everything else. The model never sends your scanned text anywhere — all processing happens locally, the same as the rest of the Application. These features are only available on devices capable of running the model, and are switched off by default until you choose to enable them in Settings.

8. What requires an internet connection

Scanning, text extraction, cleanup, saving, searching, and organizing your library all work fully offline. An internet connection is used only for: verifying a purchase, downloading an optional AI model if you enable an on-device AI feature, and (in a future update) downloading an optional translation language pack. Standard data charges from your mobile provider may apply to these.

9. Where data goes

Google Play Billing and RevenueCat are global services and may process data in countries other than your own, including outside the European Economic Area. Where required, appropriate safeguards such as Standard Contractual Clauses are used by these providers — see their linked policies for details.

10. Data retention

Because we have no backend server, we don't retain your data ourselves. Retention works like this:

11. How to delete your data

Because the Application has no accounts and no central server, there's no single database to delete from — each type of data is handled separately:

For anything not listed here, email hussainxdeveloper@gmail.com and we'll help or point you to the right provider. Requests are typically actioned within 30 days.

12. Legal disclosure

We may disclose information described in this policy if required by law (for example, to comply with a subpoena), if we believe in good faith it's necessary to protect our rights or your safety or someone else's, to investigate fraud, or to respond to a lawful government request. We do not sell your personal information.

13. California privacy rights (CCPA/CPRA)

We do not sell or share personal information, and the Application shows no ads and has no accounts, so there is very little personal information to report on. If you're a California resident and have questions about your rights under the CCPA/CPRA, contact us at the email below.

14. Children

The Application does not require a minimum age to use its core scanning features. The Application has no ads, no accounts, and collects no personal data from any user, including children. If you are a parent or guardian with any questions, contact us at the email below.

15. Your consent

Where we rely on your consent — for example, granting camera, notification, or biometric permission, or turning on an optional AI feature — you give that consent by actively opting in to the relevant feature. You can withdraw consent at any time (for example, by revoking a permission or turning a feature off in Settings), without affecting anything already done before the withdrawal.

16. Security and data breaches

Because your scans never leave your device and we hold no server-side database of your data, there's very little on our end that could be breached. We take reasonable measures to keep the parts of the Application we do control (our email correspondence, our developer accounts) secure. Any breach affecting Google or RevenueCat's own systems is governed by their own breach-notification practices, linked above.

17. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page. Previous versions are available on request.

18. Contact us

Questions about this Privacy Policy can be sent to hussainxdeveloper@gmail.com.