Privacy Policy

Your documents

Every scan, page image, PDF and piece of recognised text is stored in the app's own private storage on your device, where no other app can read it. Nothing is sent to Digit Grove. There is no account to create, nothing to sign in to, and no sync.

Documents you put in the app's Vault are encrypted on your device with AES-256. The key is derived from a PIN you choose and wrapped again by a key held in your phone's hardware-backed keystore, which cannot be extracted from the device. We do not hold that PIN and cannot recover it. If you forget it, those files cannot be opened by anyone, including us.

When something does leave your phone, you asked for it

Each of these happens only when you choose it, and sends only what you chose:

• Sharing, printing or opening a document in another app — it goes to the app you picked.
• Exporting or saving a file — it goes where you saved it.
• Uploading to a destination you set up — your own WebDAV or Nextcloud server, or a folder you picked with your phone's file picker (which may be a cloud folder such as Google Drive, Dropbox or OneDrive). The address and credentials are yours; the file goes only there. Credentials are stored encrypted on the device with a hardware-backed key.
• Sending over Wi-Fi — the app runs a temporary web server on your own network and shows a link and a QR code. It is reachable only by devices on that network that have the link, it serves only the documents you selected, and it shuts down when the timer runs out, after the first download if you asked for that, or when you close the screen. Nothing passes through us.

What the app downloads

• Text recognition (OCR) language packs. When you add a language, the app downloads that language's model from a public Digit Grove release on GitHub. The request sends no part of your documents.
• Google's text recognition models. Latin, Devanagari, Chinese, Japanese and Korean are read using Google Play services, which downloads its models on demand. Recognition itself runs on your device; no page is sent to Google.

Diagnostics

Crisp Scan contains no analytics and no crash-reporting service of its own, and no advertising.

The app uses Google ML Kit for document scanning and text recognition. ML Kit sends Google technical information about itself — device model, the application's identifier, an installation identifier, and performance timings. It sends no part of your documents and nothing that identifies you personally to us. See Google's privacy policy: https://policies.google.com/privacy

Purchases

Crisp Scan Pro is sold through Google Play. Google handles the payment; we never see your card, bank or billing details. The app stores only whether Pro is active, encrypted on your device.

Permissions

Crisp Scan asks for no storage permission, no location permission, no contacts permission, and no advertising identifier. When you add a business card to your contacts, the app hands the details to your phone's own contacts app for you to save — it writes nothing itself.

Backups

Cloud backup is switched off: the app's data is not copied to Google's backup servers. When you move to a new phone, Android's device-to-device transfer carries your documents across, except for the Vault and other items protected by a key that cannot leave the old phone.

Children

Crisp Scan is not directed at children under 13, and we do not knowingly collect information from them.

Deleting your data

Uninstalling the app removes everything it stored on your device, including the Vault. There is nothing held anywhere else for us to delete, because there is nowhere else.

Changes to this policy

Any change will be posted on this page with a new date at the top.

Contact