Privacy Policy
Effective Date: November 1, 2026 | Last Updated: November 1, 2026
Vellscan is engineered with an on-device first architecture. Your scanned documents, camera feeds, OCR extractions, and visual signature stamps are processed locally inside your smartphone’s hardware sandbox. We do not upload, retain, or train AI models on the contents of your scanned documents on remote servers.
1. Information We Collect
Depending on how you interact with Vellscan, we collect limited categories of data strictly necessary to provide the service:
- Account Credentials (Optional Registration): When you create an account to synchronize app settings or manage Pro access, we store your email address, an encrypted 1,000-round key-stretched password hash, and a cryptographic ownership verification token. We never store plaintext passwords.
- In-App Purchases & Subscription Tokens: When you purchase Vellscan Pro through Google Play, Google generates an anonymized purchase token. Our backend verifies this token to activate Pro entitlements and prevent fraud. We do not receive or process credit card numbers or banking information.
- Diagnostics & Crash Telemetry: Anonymized app crash logs, device OS versions, and application build numbers to resolve technical bugs and guarantee app stability.
2. Permissions & Device Capabilities
Vellscan requests the following device permissions solely to deliver features you explicitly trigger:
- Camera (
android.permission.CAMERA): Required to photograph physical documents for scanning, perspective edge detection, and cropping. - Storage / Media: Required to save exported PDF, XLSX, and DOCX documents to your device’s document directory, and optionally import an existing image or signature photo.
- Biometric Sensors (
android.permission.USE_BIOMETRIC): Used only locally by your smartphone's operating system when you enable the optional App Lock. Biometric templates never leave your phone hardware.
3. Data Security & Storage
Your local document database is shielded by your smartphone's application sandbox. Document exports and signatures saved to "My Signature" are isolated within private app storage. All API communication between the mobile app and our backend uses industry-standard TLS/HTTPS encryption.
4. Third-Party Services
Vellscan interacts with trusted infrastructure providers strictly for operational functions:
- Google Play Billing: Manages subscription payments and lifecycle management.
- Google Cloud (Gemini API): If you explicitly trigger AI document summarization, the optical text is sent via encrypted channels to Google Cloud for immediate processing and is not retained for model training.
5. Account & Data Deletion (Google Play Compliance)
You maintain full ownership of your data at all times. You may delete your account and associated telemetry directly within the mobile app (Settings → Delete Account) or via our public web portal at vellscan.com/delete-account.html. Upon request, all associated server records and account tokens are permanently purged.
6. Contact Us
For inquiries, privacy questions, or data requests, please contact our Data Protection Office at: support@vellscan.com.