Privacy Policy

1. Scope and principles

“We” means the developer and operator of StarScan, whose contact details appear at the end of this page. Scanning, offline OCR, document organization and local export do not require a StarScan account. The current version has no StarScan account registration or cloud document library.

We handle information as necessary to deliver your selected features, respond to your requests and meet legal obligations. You enable optional transfers through connection, pairing or sharing actions. This policy does not replace separate consent where the law requires it.

On first launch, the Android and HarmonyOS apps display a privacy notice and the full policy for offline reading. You can choose Agree and continue or Disagree. Scanning, motion-sensor listening, the document library and sync tasks do not start before consent, and remain disabled if you disagree. You can exit or review the policy again. System permissions such as camera access are requested separately when you use the corresponding feature; agreeing to this policy does not grant system permissions.

2. Documents and local processing

The app processes and stores on your device the images, PDFs, Markdown source and resources, ID pages and attachments you scan, photograph or choose to import, together with document titles, tags, notes, recognized text, edits, signature images, reminders and search indexes. This supports scan enhancement, offline OCR, search, layouts, editing, reading and export.

Scanning and offline text recognition do not require uploading documents to our servers. Originals, edited pages and derived outputs may be stored separately in the local library. We do not obtain your document contents merely because you use these local features, and do not use them for advertising or to train our artificial intelligence models.

IDs, medical records, financial documents and signatures may contain sensitive personal information. Only process materials you are authorized to use, and check recipients, necessity and permissions before sharing or syncing. The app does not verify identity by scanning IDs or saving signatures.

3. Device permissions

The system or app requests permissions when needed for a feature. You can revoke them in system settings. Denying a permission may prevent the related feature from working but does not prevent features that do not need it.

• Camera: scan your chosen papers, IDs, barcodes and QR codes.
• Gyroscope and accelerometer (including linear acceleration): after you agree to the Privacy Policy and open the scanner, the app reads angular velocity and acceleration through Android SensorManager or HarmonyOS SensorServiceKit to detect device stability, reduce motion blur and assist automatic capture. Readings are processed in memory only while the scanner is in the foreground. They are not saved, uploaded, added to documents, used for advertising or profiling. Listening stops when you leave the scanner. The StarScan native scanner accesses the camera and motion sensors; advertising or analytics SDKs do not perform this access.
• Photos and files: import selected content or save exports to a chosen location; older systems may require storage permission.
• Local network and network status: discover nearby devices, pair and transfer data.
• Bluetooth: discover nearby devices and provide fallback sync on supported platforms after you verify, pair and authorize them in the app. Keep both apps in the foreground.
• Biometrics: use system authentication to confirm protected editing, deletion and export actions on supported platforms. The app does not read or store fingerprint or facial templates.
• Calendar read/write: after you enable calendar reminders and grant permission, the app writes your document reminders to the system calendar and reads calendar and event identifiers to update or remove reminders it created. Privacy options can hide document titles.
• Notifications and restart recovery: deliver document reminders you set on supported platforms and restore reminder schedules after a device restart.

4. Nearby-device sync, external content and sharing

The current version disables Google Drive, OneDrive and WebDAV cloud sync by default and does not provide a StarScan cloud document library. Nearby-device sync prefers the local network; supported platforms offer Bluetooth as a fallback.

Discovery processes device names and identifiers, network addresses, Bluetooth connection information, pairing records and sync status. Documents, attachments, recognized text and metadata are transferred only after you verify and authorize the device in the app. Enabled automatic sync may continue when connection conditions allow. Bluetooth transfer requires both apps to remain in the foreground. You can stop syncing or revoke device authorization.

Remote images in Markdown are not loaded by default. When you choose to load one, the app requests it from its provider, which can receive your IP address, request time and information contained in the image URL. Opening a link sends you to the relevant website or app, whose policies apply.

Exporting, system sharing, printing or backing up hands files to your selected destination, app, device or service. Recipients may retain independent copies under their own policies and storage locations. System backups may be stored by your configured system service; check device backup settings.

If cloud sync or new recipients are introduced, we will update this information before enabling the processing and obtain consent where required by law.

5. Website, browser storage and technical data

The current website has no login, document uploads, advertising trackers or analytics scripts. The localStorage key starscan-site-language stores the selected language code in your browser. Website scripts do not send this value to a server. Clear this site’s browser data to remove it. The current website does not use advertising or analytics cookies.

The website uses Cloudflare for hosting, CDN delivery and security. Your browser must make requests to Cloudflare to load the website. That infrastructure may process IP addresses, access times, request paths, browser information, response status and security logs to deliver pages, protect the service and diagnose issues. This is separate from uploading scanned documents. Log retention depends on the hosting service’s settings and rules.

The app may keep task status, errors and sync diagnostics on your device to show progress and troubleshoot. If you contact us and provide logs, screenshots or files, we process the contact details and materials you provide to address your request. Please redact unnecessary ID numbers, passwords and document contents first.

• Cloudflare Privacy Policy

6. Disclosure and third-party services

We do not sell your personal information or use scanned documents for advertising tracking. Information is disclosed only to relevant recipients as necessary for sync, sharing or support you request, essential infrastructure services or applicable legal obligations.

Operating systems, download stores and storage services you connect handle the data needed for their own services. If a version offers paid items through a store, payment is generally handled by that store as described at purchase. We require service providers processing personal information on our behalf to stay within the agreed purpose and scope and provide protection at least equivalent to this policy and applicable requirements. This policy does not replace third-party privacy policies.

7. Retention, security and deletion

Local documents and indexes mainly remain in the app’s data directory on your device until you delete or clear them. Moving a document to trash is not permanent deletion; use the corresponding permanent-delete action. Uninstalling or clearing app data may remove local documents but does not automatically remove exports, backups or copies on other devices or in cloud storage.

Deletions may propagate through sync and may be affected by offline devices, conflicts, trash and third-party retention rules. Disconnecting or revoking authorization stops future access but does not automatically delete remote files. Check the relevant device or service and remove unwanted copies there.

We use system access controls, authorization mechanisms and transfer safeguards appropriate to the features provided. Protect your devices and credentials and use trusted networks and HTTPS connections. Do not authorize sync with devices you have not verified. No storage or transmission method can guarantee absolute security.

Support materials you submit and necessary service records under our control are retained only as needed to resolve requests, investigate security issues or meet legal obligations, then deleted or anonymized. Logs, backups and files independently controlled by third parties follow those services’ retention rules.

8. Your choices and rights

You can view, edit, export and delete documents in the app, manage permissions in system settings, stop connections in sync settings and revoke authorization with third-party services. You directly control local data. We cannot remotely read or restore documents on your device.

For personal information we actually process, you can use the contact details on this page to request access, a copy, correction, deletion, withdrawal of consent, restriction or an explanation, as applicable under law. You may also complain to the relevant authority. We will verify requests only as necessary and respond as required by applicable law, explaining any inability to fulfill a request. Withdrawing consent does not affect prior lawful processing.

• Data management and deletion guide

9. Children

StarScan is not specifically directed at children. Minors should use it with guidance from a parent or guardian, particularly when handling IDs, sharing files or connecting storage. Processing personal information of children under 14 requires guardian consent and appropriate safeguards where applicable law requires them.

If a guardian believes a child has provided personal information to us that should not have been provided, contact us using the details on this page to request review and deletion.

10. Policy updates

We will update this policy and its date when features or processing practices change. Material changes to purposes, methods, data categories or recipients will be explained on the website or through applicable in-app notices, with renewed consent where required by law.