Privacy policy

In plain language

• Scanning, text recognition and redaction run on your device. Without an account, we do not receive your documents.
• If you create an account, we store your email and how you sign in: an email code, a passkey, Apple, Google, or your company’s single sign-on. With company sign-on, your organisation’s identity provider sends us your name, email and groups.
• If you turn on sync, each document is encrypted on your device before upload and only your devices hold the key. We store the encrypted file in the region you chose, EU (Frankfurt, Germany) or US (Virginia, United States). We do not have the key, so we see only details such as file sizes, dates and your account email. Keep your recovery code: it is the only way to restore encrypted documents if you lose every device.
• The web app shows your synced documents in your browser after you sign in. Drop sends a file from your phone to a browser end-to-end encrypted through our relay, in your account’s region. The relay deletes it after download or within 24 hours.
• If you connect a backup to your own cloud storage, your device copies readable PDFs there, and that provider’s terms apply.
• AI actions send the text of the pages you choose to our AI provider (see AI processing). The Free plan shows Google ads. Google asks for your choice in its own consent form. If you decline personalised ads you can still see ads, but they are not personalised.
• Apple or Google sell app subscriptions. Web subscriptions are sold by [Merchant of record], the seller of record, which takes the payment and issues your invoice. Our subscription provider (RevenueCat) receives the purchase record so it can tell the app which plan you have.
• Write to [email protected] with any question about your data.

In plain language

• Amazon Web Services (AWS) hosts YomuScan in the region you chose: encrypted files, account details, sign-in (Amazon Cognito) and our emails (Amazon SES).
• [Merchant of record] sells web subscriptions: it receives your name, email, country and payment details, takes the payment, and issues invoices and refunds.
• Apple and Google handle app purchases, sign-in with Apple or Google, and push notifications. On the Free plan, Google shows ads in the app.
• RevenueCat receives purchase records so the app knows your plan.
• [AI provider name] receives the text of the pages you choose, only when you use an AI action.
• [Error reporting provider] receives crash and error reports from the apps and the website.
• For YomuScan for Teams, your organisation’s admins see member names, emails, roles and the audit log.

In plain language

• To provide what you asked for (contract): your account, sync, share links, Drop, Teams and subscriptions.
• With your consent: analytics and marketing cookies, personalised ads and cloud AI. You can withdraw it at any time in Settings or from the footer.
• For our legitimate interests: keeping the service secure, stopping abuse and fraud, and fixing errors.
• Because the law requires it: tax and accounting records, and answers to lawful requests.

In plain language

• You must be at least [minimum age] to create a YomuScan account.

In plain language

• Synced files, share links and Drop transfers are stored in the region you chose: EU (Frankfurt, Germany) or US (Virginia, United States). We have no data center in Asia or elsewhere, so if you live outside the EU and the US, your encrypted files are stored outside your country.
• Some recipients listed above, such as [Merchant of record], RevenueCat, [AI provider name], Apple and Google, may process data in other countries, including the United States. Our support and operations staff in [operations team countries] may access account details, not document contents, to help you and keep the service secure.
• Where the law requires it, these transfers use safeguards such as the EU Standard Contractual Clauses. The full policy will list them.

In plain language

• Access and export: export your documents from the app or the web app (Account › Your data). Write to [email protected] to ask what we hold about you, such as your account details, support emails or a purchase record.
• Erase: delete your account in the app (Settings, Account) or in the web app (Account › Your data). If you cannot sign in, request deletion on the web.
• Correct, restrict or object to our use of your data, or take it to another service: write to us and we reply within one month.
• You can complain to your local data protection authority at any time.
• Marketing cookies on this website are off unless you turn them on, and we treat the Global Privacy Control signal as a refusal.

In plain language

• Delete your account in the app (Settings, Account, Delete account) or in the web app (Account › Your data). Both ask you to type DELETE. You can also request deletion on the web if you cannot sign in; we email the address on the account to confirm.
• We delete your account details (name, email and sign-in) and your synced documents within 30 days. Copies in our backups are deleted within 30 days too. Documents on your own devices are not affected. Support emails are kept up to 12 months.
• If your account is part of a YomuScan for Teams organisation, documents in team folders belong to the organisation and follow its retention and legal-hold rules, so they may be kept after you leave. Ask your admin. Deleting your account removes your personal documents and your membership. If you are the last Owner, you are asked to make another member Owner or delete the organisation first.
• Deleting your account cancels a web subscription at once; any refund follows the Refunds and cancellation section of our terms. It does not cancel an App Store or Google Play subscription: cancel that in the store.
• Some billing records stay because the law requires them. [Merchant of record] keeps invoices and payment records for web purchases, and Apple and Google keep app purchase records, each as the seller and under its own policy, for as long as tax law requires. Ask them about those records. We delete your customer record at RevenueCat, our subscription provider, within 30 days.

In plain language

• When you export or share from the app, the file goes where you send it through your phone’s share sheet. We do not see it.
• A share link lets anyone who has it (and the password, if you set one) view the document until it expires or you turn it off. You choose the expiry, whether people can download, and whether your redactions apply.
• We record when a link is opened and how many times, so we can tell you and show it in the document’s activity. We keep these records for [link activity retention period]. Turning a link off stops new opens at once; anyone who already downloaded the file keeps that copy.

In plain language

• Premium AI actions (summary, questions about a document, translation) send the text of the pages you choose to our AI provider, [AI provider name], so it can answer.
• Cloud AI is off until you turn it on in Settings, and the app asks before it sends a page. Scanning, text recognition and redaction never need it.
• We use that text only to produce your answer. Whether the provider keeps it, and for how long, is set out in the agreement with [AI provider name].