TopScanner — Privacy Policy

This policy explains what information the TopScanner mobile app (“the app”, “we”, “us”) collects, how it is used, who it is shared with, and the choices you have. It is written to meet the requirements of the Apple App Store, Google Play, Google AdMob, the EU/UK GDPR and the California Consumer Privacy Act. The app is published by the maker of AMPDF, who is the data controller. For any privacy question or request, contact privacy@ampdf.com.

The short version

• •Your scans, documents, their recognised text and file names are created, processed and stored on your device. We run no servers and never receive them.
• •There is no account and no sign-in, and no third-party analytics or tracking SDK in the app.
• •The free app shows ads through Google AdMob. Google and its partners use an advertising identifier and related data to serve and measure those ads.
• •In the EEA, UK and Switzerland the app asks for your consent (Google’s User Messaging Platform) before personalised ads. On iOS it asks for permission (App Tracking Transparency) before any tracking. Decline and the app still works fully — ads are just non-personalised.
• •The optional “Ask Document” AI feature is off by default. It only sends text to an AI provider if you enable it and add your own API key.
• •You can erase everything from Settings → Privacy & Data → Delete all data, or by uninstalling.

1. Documents, scans, OCR and search

When you scan a page, import a file, enhance an image, run OCR, create or edit a PDF, extract receipt or business-card fields, organise pages, or search your library, all of that work happens locally on your device. Documents, page images, thumbnails, recognised text, extracted fields, folders, tags and the search index are held only in the app’s private storage (an on-device SQLite database and the app’s sandboxed file area). They are not uploaded to us or any third party, and we cannot see them.

On-device OCR uses the Apple Vision and Google ML Kit text-recognition frameworks built into the operating system. Image enhancement, edge detection, deskew and quality checks run on-device. No image or recognised text is sent off the device for these features.

Cloud backup is off by design — the app has no sync or upload feature. Deleted items go to an in-app Trash and stay on your device until you purge them.

2. Camera and photo library

• •Camera — used only while you are actively scanning a document, ID card, whiteboard or QR / barcode. Frames are analysed on the device for page edges and quality and are not stored unless you save the scan. Scanned QR / barcode links are never opened automatically.
• •Photos / files — used only when you choose to import an image or PDF, or when you save or export something you created. The app accesses only the specific items you pick. On Android it requests the “selected photos” access (READ_MEDIA_VISUAL_USER_SELECTED) rather than your whole library.

3. Contacts

The app never reads your address book. If you use Business-Card Mode and tap Create contact, the app asks for permission to add that one contact (WRITE_CONTACTS) using the fields shown to you. Nothing is added without your explicit confirmation, and no contact data leaves your device.

4. Secure Vault and App Lock

If you enable App Lock or the Secure Vault, unlocking uses your device biometrics (Face ID / Touch ID / fingerprint) through the operating system. Your biometric data is handled entirely by the OS — the app never sees or stores it. A PIN you set is kept in the platform secure keystore (iOS Keychain / Android Keystore) on your device only.

5. Advertising (Google AdMob)

The app is free and ad-supported. Ads are supplied by Google AdMob. Banners appear only on the main browsing screens; full-screen ads appear only after a task finishes (for example a scan is saved or a PDF tool completes) and never during camera capture or document viewing. To serve and measure ads, Google and Google’s advertising partners may collect and process:

• •your device’s advertising identifier — the Advertising ID on Android, or the Identifier for Advertisers (IDFA) on iOS (the IDFA only if you allow tracking);
• •coarse, non-precise information such as device model, operating system, language, general location derived from IP address, and ad-interaction events (impressions, clicks);
• •cookies and similar on-device identifiers used for frequency capping, invalid-traffic / fraud prevention and measurement.

This data is used to show ads (personalised where you have permitted it, otherwise non-personalised), to limit repetition, to measure performance and to prevent abuse. It is not combined with the contents of your documents, which never leave your device. For how Google uses this information see “How Google uses information from sites or apps that use our services” and the list of Google advertising-technology providers.

6. Your ad and tracking choices

• •EEA, UK and Switzerland — on first launch the app shows a Google-certified consent request (Google’s User Messaging Platform). Your choice controls whether personalised ads and related data use are allowed. Change it any time from Settings → Privacy & Data → Ad privacy choices.
• •iOS — App Tracking Transparency — before any cross-app or cross-site tracking, iOS asks for your permission. Decline and the app does not use the IDFA and ads are non-personalised. Change it in iOS Settings → Privacy & Security → Tracking.
• •Android — Advertising ID — you can reset your Advertising ID, opt out of ad personalisation, or delete the ID entirely in Android Settings → Privacy → Ads. The app declares the com.google.android.gms.permission.AD_ID permission for advertising.
• •You can also opt out of personalised Google ads at Google Ads Settings.

7. Optional AI feature — “Ask Document”

The app includes an optional assistant that lets you ask questions about a document. It is disabled by default. To use it you must turn it on and supply your own API key for a third-party AI provider (Anthropic). The key is stored in your device’s secure keystore and is never sent to us.

Each time you send a request, and only after a per-request confirmation, the relevant document text and your question are transmitted over HTTPS directly from your device to the AI provider to generate an answer. That processing is governed by the provider’s terms and privacy policy. If you never enable the feature, no document data is ever sent anywhere.

8. App updates

The app can download over-the-air updates to its own code from Expo’s update service. That request includes only technical values such as the app version, runtime version and platform. It contains none of your documents or personal information.

9. Permissions summary

10. Data collection summary (for store labels)

11. How your information is shared

We do not sell your personal information and we do not “share” it for cross-context behavioural advertising beyond what is described in this policy. Data is disclosed only to:

• •Google (AdMob) — the advertising identifier and ad-related data described in section 5.
• •Anthropic — only if you enable and use the “Ask Document” feature, and only the text you submit.
• •Expo — technical values for over-the-air updates (section 8).

12. Legal bases (EEA / UK)

• •Providing the app’s features — performance of our agreement with you and our legitimate interest in a working product. This is all on-device.
• •Personalised ads and associated identifiers — your consent, collected through the consent request and withdrawable at any time.
• •Non-personalised ads, fraud prevention and measurement — our and Google’s legitimate interest in funding and protecting a free app.
• •The optional AI feature — your consent, given each time you send a request.

13. Data retention and deletion

• •Documents and settings stay on your device until you delete them or uninstall the app.
• •Settings → Privacy & Data → Delete all data permanently erases the local document database, cached files and the search index.
• •Uninstalling the app removes all app data from the device.
• •To reset or remove advertising identifiers, use your operating system settings (section 6).
• •For any request relating to data held by our ad partner, contact us at privacy@ampdf.com and use Google’s controls linked above.

14. Security

Documents are held in app-private storage. Your PIN and any AI API key are stored in the platform secure keystore. All network traffic — ads, updates and the optional AI feature — uses HTTPS/TLS. No system is perfectly secure, but the app is designed so that the most sensitive data, your documents, never leaves your device.

15. Children

TopScanner is a general-purpose productivity tool and is not directed to children. We do not knowingly collect personal information from children. Ad requests are tagged as not directed to children and, where required, as for users under the age of consent, so Google serves only non-personalised ads in those cases. If you believe a child provided information through the optional AI feature, contact us and we will help you address it.

16. International users

Your documents are processed on your device wherever you are. Our advertising partner (Google) and, if you use it, the AI provider (Anthropic) may process the limited data described above on servers in other countries, including the United States, subject to their own policies and transfer safeguards.

17. Your rights

Because your content stays on your device, you control it directly — view, export or delete any document in the app at any time. Depending on where you live you may also have rights to access, correct, delete, port or restrict processing of personal data held by our partners, to object to processing, and to withdraw consent. You have the right not to receive discriminatory treatment for exercising these rights. Exercise them through the Google and Anthropic controls linked above, or contact privacy@ampdf.com and we will assist and, where applicable, pass the request to our processor. EEA/UK users may also complain to their local data protection authority.

18. Changes to this policy

If we change how the app handles data we will update this page and its dates and, for material changes, surface a notice in the app before the change takes effect.

19. Contact

Questions about this policy or your data: privacy@ampdf.com.

See also the TopScanner Terms of Use and the AMPDF website privacy policy, which covers this site’s browser-based tools.