Processed on your device
Text recognition, redaction and search run on your phone and work offline.
Security and privacy
Your documents stay yours.
Documents are processed on your phone. Here is what can leave it when you sync, share or use AI, how it is protected, and where you can check it for yourself.
Principles
Four rules we build by.
Account is optional
You can scan without one. If you sign in, we store your email, sign-in method and plan. Synced files are end-to-end encrypted.
Redaction you can trust
Covers are part of the image. Editing the PDF cannot remove them.
Leave any time
Export everything as a ZIP, or use Delete all data in Settings. See how to delete your account.
For teams: Teams adds single sign-on, an audit log and admin controls on top of these rules. See Teams
Data flow
Where your data goes.
Everything YomuScan can send from your phone, and when. Apart from your phone’s own backup (see the table below), anything not on this list stays on the device.
AI only when you ask
Premium AI sends a document to our AI service only when you ask for a summary or an answer about it. If you do not use these features, nothing is sent to an AI service.
Your phone
Scans, recognized text, redaction, search and the Vault. Works offline.
Stays on the deviceYour account (optional)
If you sign in, we keep your email, sign-in method and plan. Your documents are not part of your account.
Only if you sign inEncrypted cloud sync
Files are end-to-end encrypted on your device before they are synced, and only your devices hold the key. We can see metadata such as file sizes and dates, not what is inside.
Only if you turn it onShare links
A document you share with a link is kept so the people you send it to can open it, with an optional password and expiry.
Only if you shareDrop to a computer
The file is end-to-end encrypted on your phone, passes through our relay, and is deleted after the computer downloads it, or within 24 hours.
Only if you use DropBackups to your own cloud
If you connect Google Drive, OneDrive or Dropbox, your phone or browser copies PDFs there. That copy is a normal PDF, outside our end-to-end encryption, under that provider’s terms.
Only if you connect onePremium AI
The document you pick is sent to our AI service when you ask for a summary or an answer about it.
Only if you askApple, Google and our billing provider
Handle payment and tell the app which plan you have. They never see your documents.
Only if you subscribeAds in the free plan
The free plan shows only non-personalised ads, from Google AdMob. YomuScan does not ask to track you across apps or websites, and ads never receive document content.
Free plan only
Data inventory
What we keep, where, and for how long.
| Data | Where it is kept | How long |
|---|---|---|
| Scanned pages and files | On your phone, in the app’s private storage | Until you delete them. Deleted items stay in Trash for 30 days. |
| Recognized text | On your phone, with its document | As long as the document. |
| Vault documents | On your phone, behind a separate PIN | Until you delete them. They export only after you enter the PIN. |
| Account email and sign-in method | Our account service, only if you sign in | Until you delete your account. How to delete your account |
| Synced documents | Our cloud storage, only if you turn on sync. End-to-end encrypted: only your devices hold the key. We can see metadata such as file sizes and dates. | Until you delete them. When you delete your account, synced documents and our backups of them are deleted within 30 days. |
| Documents you share with a link | Our servers, so the people you send the link to can open it | Until the link expires or you turn it off. |
| Files sent with Drop | Our relay, end-to-end encrypted, while the file is on its way to your computer | Deleted after the computer downloads it, or within 24 hours. |
| Backups to your own cloud | Google Drive, OneDrive or Dropbox, only if you connect one. Your phone or browser copies normal PDFs there, outside our end-to-end encryption. | Under that provider’s terms, until you delete them there. |
| Your phone’s own backup | iCloud or Google, if your phone’s backup settings include app data | Kept by Apple or Google under your backup settings. It is not protected by YomuScan’s end-to-end encryption. |
| Documents you send to Premium AI | Our AI service, only when you ask for a summary or an answer | Explained in the privacy policy. |
| Subscription status | Apple or Google, and our billing provider (RevenueCat) | The link between your account and your plan is deleted within 30 days after you delete your account. Purchase records at Apple, Google and RevenueCat are kept as long as tax law requires. |
| Ad requests (free plan) | Google AdMob | Free plan ads are non-personalised only, and YomuScan does not ask to track you. Google handles ad requests under its own terms. Ads never receive documents. |
| Error log | On your phone, with personal data filtered out | Sent to us only if you choose Report a problem. |
Check it yourself
Facts you can test on your own phone.
Each claim on this page comes with a way to check it. No trust required.
| Claim | How to check it | More |
|---|---|---|
| Text is recognized on your phone | Switch on airplane mode. Scan a page, then select and copy its text. | Text recognition |
| Redaction removes the number from the image | Redact a page and export the PDF. Open it in any PDF editor and try to move or delete the cover: the number is not underneath. | Redaction |
| No account is needed | Install the app, then scan, redact and export a PDF. It never asks you to sign up. | Getting started |
| Sync is off until you turn it on | Scan without signing in, then open Settings: Sync stays off until you sign in and switch it on. | How sync works |
| AI sends nothing until you ask | In the web app, open your browser’s developer tools on the Network tab and open a document: no request goes to the AI service until you press Ask. | Premium AI |
| You can take all your data with you | In Settings, export your whole library as one ZIP file. | How to export |
Policies and contacts
Privacy policy
The full legal version of this page, with a plain-language summary.
Report a vulnerability
Found a security issue? Tell us privately and we will work with you on a fix.
System status
Current status of the services YomuScan runs.
Private by default. Free to start.
Your documents stay on your phone unless you choose to sync, share, send with Drop, back up to your own cloud or ask AI.