On-device by default
Offline OCR and barcode or QR scanning happen entirely on your device. Documents are not uploaded, and your scan history stays on your device. Nothing leaves your device unless you choose AI Scan or Translate.
Cloud AI requests
When you use cloud AI, the document is sent to Scanly's backend on Cloudflare, which forwards it to Mistral AI for processing. For translation, the text is sent through the same path. Document contents and translation text are processed only to return a result and are not stored.
Scanly keeps only limited usage metadata: a subscription or scan identifier, timestamp, page count, and status. We use this metadata for quota enforcement, billing integrity, and abuse prevention.
Advertising
The Free tier offers optional rewarded ads served by AppLovin MAX. You choose whether to watch an ad to unlock a cloud AI scan.
The advertising SDK may collect device information and the device advertising identifier to serve, cap, and verify ads. You can reset or limit this identifier in your Android settings. AppLovin is a sub-processor.
Payments
Scanly Pro subscriptions are processed by LemonSqueezy, the merchant of record. LemonSqueezy handles payment details and issues the license key. Scanly does not receive or store card numbers.
Barcode product lookup
For EAN, UPC, and ISBN product lookups, only the code number is sent to the lookup service. No personal data is sent for this lookup.
Sub-processors
We use the following sub-processors for specific parts of the service:
- Cloudflare for hosting and infrastructure.
- Mistral AI for cloud OCR and translation processing.
- AppLovin for advertising on the Free tier.
- LemonSqueezy for payment processing and as merchant of record.
What we do not do
Scanly does not sell personal data. The website itself uses no third-party analytics or tracking cookies, sets no cookies, and displays no advertising.
Data retention
Usage metadata is kept only as long as needed for quota enforcement, billing integrity, and abuse prevention. Subscription records are kept while your subscription is active and for any additional period required for tax and accounting obligations.
Your rights
You may ask to access or delete personal data associated with you. Email salahdmitry@gmail.com. We may need to verify your identity before completing a request.
Children
The service is not directed to children under 13, or under 16 where that higher age applies. We do not knowingly collect personal data from children below the applicable age.
International transfers
Information may be processed in countries other than your own through the service providers listed above. Their processing is subject to the safeguards and legal requirements that apply to them.
Security
Data sent over the network is encrypted in transit using HTTPS. No method of storage or transmission can be guaranteed completely secure.
Changes to this policy
We may update this policy as the service changes. The revised policy will be posted on this page with an updated effective date.
Contact
For privacy questions or requests, email salahdmitry@gmail.com.