Who we are
Scanly is operated by ScanlyAI SaaS, a sole proprietorship registered in Morocco, at Lot El Warda, Rue 25 Nr 3, Casablanca 20000, Morocco. ScanlyAI SaaS is the data controller for the processing described in this policy. For any privacy question, email salahdmitry@gmail.com.
On-device by default
Document scanning, offline OCR, PDF editing, and barcode or QR recognition happen on your device. Your local scan history stays on your device. Cloud AI features send the content you choose for processing; product lookups, account services, and advertising make the network requests described below.
Cloud AI requests
When you choose cloud AI, your selected documents, images, text, prompts, and revision instructions are sent to Scanly's backend on Cloudflare. Depending on the feature and processing route, the backend sends that content to Mistral AI or Google Gemini to recognize, translate, extract, compose, or generate content. AI PDF Designer also sends generated document source, original attachments, and any included photo to our PDF compiler hosted on Google Cloud Run.
Cloud content is not always processed only in memory. To support retries without repeating an operation, completed results can be cached in our database for a 24-hour retention window. Designer prompts, generated document source, original attachments, and included photos are stored with your account identifier for a seven-day retention window to support revisions and regeneration. Expired records are removed by scheduled cleanup. Download or export documents you want to keep.
Scanly also keeps account and usage metadata, including account, subscription and operation identifiers, timestamps, feature usage, page and token counts, and status. We use this information for account services, quota enforcement, billing integrity, service diagnostics, usage analysis, and abuse prevention.
AI features require a free account. Authentication is provided by Google Firebase, which processes your email address, account identifier, and the credentials or Google sign-in information needed to authenticate you.
If you configure your own AI endpoint (a Pro feature), documents you scan with it are sent directly from your device to the provider you chose, under that provider's terms. Scanly's backend is not involved in those scans.
Advertising
Scanly shows no banners, no interstitials, and no pop-up advertising anywhere in the app. The only advertising is an optional rewarded video that you start yourself: once you have used your free monthly AI credits, you may choose to watch a short video to earn a few more. Nothing is shown unless you tap that button, and you can ignore it indefinitely.
Rewarded ads are served by Google AdMob and are offered only on the free tier. If you subscribe to Scanly Pro, the advertising SDK is never started on your device at all.
So that a video is ready when requested, the app loads ads in the background on the free tier after the applicable consent flow. Google AdMob collects and shares IP addresses (which may be used to estimate approximate location), advertising and other device or account identifiers, ad interactions, and diagnostic information for advertising, analytics, and fraud prevention. Google's use of that data is described in Google's business privacy notice and its partner policies.
To award the credits you earned, Scanly gives AdMob only your Scanly account identifier, which AdMob passes back to our backend when it confirms the video was genuinely watched. Your documents, scan results, and history are never shared with AdMob or with any advertiser.
In the European Economic Area, the United Kingdom, and Switzerland we collect your consent choices through Google's User Messaging Platform before any ad is requested, and personalised advertising is used only where you have consented. You can change those choices at any time from Settings › Privacy options in the app. You can also limit ad personalisation for every app from your Android privacy settings, or reset your advertising identifier there at any time.
Payments
Scanly Pro subscriptions are processed by Paddle as the merchant of record and reseller. The contracting Paddle entity depends on where you are buying from and is named in the Paddle Checkout Buyer Terms. Paddle handles payment details and billing correspondence. Scanly does not receive or store card numbers. Scanly issues the license key that unlocks Pro in the app.
Barcode product lookup
For EAN, UPC, and ISBN product lookups, the app sends the code number to the applicable lookup service, such as Open Food Facts, Open Beauty Facts, Open Pet Food Facts, OpenFDA, Google Books, or Open Library. The service also receives network information such as your IP address as part of the connection.
Sub-processors
We use the following sub-processors for specific parts of the service:
- Cloudflare for hosting and infrastructure.
- Mistral AI for cloud document and text processing.
- Google Gemini for AI document and text processing and generation.
- Google Cloud Run for PDF compilation.
- Google Firebase for account authentication.
- Google AdMob for the optional rewarded ads offered on the free tier.
- Paddle for payment processing and as merchant of record.
What we do not do
Scanly does not sell personal data. This website uses no third-party analytics or tracking cookies, sets no cookies, and displays no advertising. In the app, the only advertising is the optional rewarded video described above — never a banner or an interstitial, and never anything at all for Scanly Pro subscribers.
Data retention
Usage metadata is kept only as long as needed for quota enforcement, billing integrity, and abuse prevention. Subscription records are kept while your subscription is active and for any additional period required for tax and accounting obligations.
Your rights
You may ask to access or delete personal data associated with you. Email salahdmitry@gmail.com. We may need to verify your identity before completing a request.
You can delete your account and its data yourself at any time from Settings › Account › Delete account in the app. See Delete your Scanly account for what is erased and what is kept.
Children
The service is not directed to children under 13, or under 16 where that higher age applies. We do not knowingly collect personal data from children below the applicable age.
International transfers
Information may be processed in countries other than your own through the service providers listed above. Their processing is subject to the safeguards and legal requirements that apply to them.
Security
Scanly's managed AI and account services use HTTPS. If you configure your own AI endpoint with an HTTP address, content sent to that endpoint is not encrypted in transit; use HTTPS where available. No method of storage or transmission can be guaranteed completely secure.
Changes to this policy
We may update this policy as the service changes. The revised policy will be posted on this page with an updated effective date.
Contact
For privacy questions or requests, email salahdmitry@gmail.com.