Privacy Policy
In short: your photos, scans, PDFs and recognized text stay on your device. We have no accounts and no servers that receive your documents. The app uses a few service providers for subscriptions, ads (free version only), crash reports and usage statistics; they are listed below with what they receive.
1. Who we are
The app “Photo to PDF: Document Scanner” (formerly “Convert Image To PDF Documents”, the “App”) is published by Metko Apps (METKO LABS BILISIM ITHALAT VE IHRACAT TICARET LTD STI, “we”, “us”). We are responsible for the processing described in this policy. You can reach us at info@metko.org.
2. Your documents stay on your device
- Photos you take or import, edited page images, generated PDFs, document names and dates are stored only in the App’s private storage on your device. They are not uploaded to us or to any service provider.
- Editing (rotate, crop, filters, brightness and contrast), Smart Scan edge detection and PDF creation run on your device.
- “Extract text” (text recognition) runs on your device with the operating system’s built-in recognition; the recognized text is not sent anywhere unless you copy or share it yourself.
- Settings such as appearance, page size, sort order, the free daily allowance counters and whether you have seen the introduction are stored on your device.
- The App has no user accounts, no cloud sync and no backend that receives your content. Your device’s own backup (for example iCloud Backup) may include the App’s data according to your device settings.
3. Camera and photo access
The App asks for camera access to scan documents and for photo library access to import images. Both are used only when you start a scan or an import. You can change these permissions at any time in your device settings; the rest of the App keeps working.
4. Exporting and sharing
When you tap Share, Save to Files or Print, the PDF is handed to the system share sheet, the Files app or AirPrint. Where it goes next (for example Mail, Messages, AirDrop or a cloud drive) is your choice and is governed by that app’s or service’s privacy policy.
5. Subscriptions and purchases
Premium subscriptions are sold through the Apple App Store (or Google Play on Android). Payment is handled by Apple or Google; we never see your payment details.
We use RevenueCat (RevenueCat, Inc., USA) to manage subscriptions. RevenueCat receives:
- a random, anonymous app user ID created by the App (not linked to your name, email or Apple ID);
- purchase information (product, price, currency, dates, renewal and expiry, transaction identifiers and store receipts);
- technical data such as device model, operating system and app version, country/storefront, and your IP address as part of the connection.
This is used to unlock Premium, restore purchases and keep your subscription status up to date. Apple’s handling of purchases is described in the Apple Privacy Policy.
6. Apple Ads attribution
On iPhone and iPad, the App asks Apple’s AdServices framework for an attribution token and passes it to RevenueCat. It tells us whether an install came from an Apple Search Ads campaign, so we can see which campaigns lead to subscriptions. Standard attribution does not use your advertising identifier and does not require tracking permission. If you allowed tracking (see section 8), Apple may provide more detailed campaign data.
7. Advertising (free version)
The free version shows ads from Google AdMob (Google LLC / Google Ireland Ltd.): full-screen ads at natural breaks (for example after an export) and optional rewarded ads that you start yourself (“Watch an ad to …”). Premium removes all ads, and the ad software is not started for Premium users.
For ads, Google may process:
- device and app information (model, operating system, app version, language, screen size);
- your IP address and the approximate (coarse) location derived from it;
- advertising data such as ad impressions, clicks and rewarded-ad completions;
- the device’s advertising identifier (IDFA on iOS) only if you allow tracking; on Android, the advertising ID according to your device settings.
How Google uses this information is described at How Google uses information from sites or apps that use its services.
8. Consent, tracking and your ad choices
- Consent (EEA, UK and Switzerland, and other regions where required): before any ad is requested, the App shows Google’s consent message (Google User Messaging Platform) where the law requires it. You can accept or refuse personalized advertising. Ads are only requested after this step.
- Ad privacy choices: where applicable, Settings → “Ad privacy choices” lets you review or change your choice at any time.
- App Tracking Transparency (iPhone and iPad): the App asks once whether it may use your advertising identifier. If you choose “Ask App Not to Track”, the identifier is not available to the App or Google, and you will see non-personalized ads. Every feature works the same either way. You can change this later in iOS Settings → Privacy & Security → Tracking.
- Premium users are never asked for ad consent or tracking permission, because no ads are shown.
9. Crash reports and usage statistics
We use Google Firebase (Google LLC):
- Firebase Crashlytics receives crash reports and error diagnostics (stack traces, device model, operating system, app version, a Crashlytics installation identifier). Reports contain the type of error, never your documents or their contents.
- Firebase Analytics collects standard, automatic usage events (for example first open, app sessions and screens viewed) together with an app instance identifier, device information and approximate location derived from your IP address. We do not add custom events about your documents.
We use this to find and fix problems and to understand how the App is used.
10. App Store ratings
After some successful actions, the App may ask whether you would like to rate it. If you agree, Apple’s rating window (or the App Store page) opens. We do not learn whether or how you rated the App.
11. What we do not collect
We do not collect your name, email address, phone number, contacts, precise location, or the content of your photos, scans, PDFs or recognized text. We do not sell your personal information. The App has no App Lock, no notifications and no user accounts.
12. Why we process data (legal bases)
| Purpose | Provider | Legal basis |
|---|---|---|
| Selling and restoring subscriptions | Apple / Google, RevenueCat | Performance of a contract (Art. 6(1)(b)) |
| Apple Ads attribution | Apple, RevenueCat | Legitimate interest in measuring our marketing (Art. 6(1)(f)) |
| Personalized ads | Google AdMob | Consent (Art. 6(1)(a)); ATT permission on iOS |
| Non-personalized ads, ad fraud prevention | Google AdMob | Legitimate interest in funding the free version (Art. 6(1)(f)) or consent where required |
| Crash reports | Firebase Crashlytics | Legitimate interest in a working app (Art. 6(1)(f)) |
| Usage statistics | Firebase Analytics | Legitimate interest in improving the app (Art. 6(1)(f)) |
13. Retention and deletion
- Documents, images and PDFs stay on your device until you delete them in the App. Deleting the App removes all of its data from the device.
- RevenueCat keeps purchase records for as long as needed to provide the subscription and to meet legal and accounting obligations.
- Google keeps advertising, Crashlytics and Analytics data according to its retention settings (for example, Crashlytics reports are kept for up to 90 days).
- To ask for deletion of data held by our providers, contact us (see section 19). Because the App user ID is anonymous, we may need information from you (for example the purchase date or an App Store receipt) to find it.
14. Your rights
EEA, UK and Switzerland (GDPR): you have the right to access, correct and delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time (for ads: Settings → Ad privacy choices). You can also lodge a complaint with your local data protection authority.
California (CCPA/CPRA) and other US states: you have the right to know, access, correct and delete personal information and to opt out of its “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information. To opt out of personalized ads, choose “Ask App Not to Track” in iOS or use Settings → Ad privacy choices where shown. We will not discriminate against you for using these rights.
To use any of these rights, write to info@metko.org.
15. Children
The App is a general-purpose document tool and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, please contact us so we can delete it.
16. Security
Your documents are kept in the App’s private storage, which the operating system protects and isolates from other apps. Connections to our service providers are encrypted (HTTPS). No method of storage or transmission is completely secure, but we choose providers with strong security practices.
17. International transfers
RevenueCat and Google may process data in the United States and other countries. Where data from the EEA, UK or Switzerland is transferred, these providers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
18. Changes to this policy
We may update this policy when the App or the law changes. The effective date at the top shows the latest version. Important changes will also be mentioned in the App’s release notes.
19. Contact
Metko Apps (METKO LABS BILISIM ITHALAT VE IHRACAT TICARET LTD STI)
Email: info@metko.org
This policy: https://www.metko.org/scannerpdf/privacy.html