Offscan Privacy Policy
Last updated: November 5, 2026 (version 0.18 and later)
In short: your documents never leave your phone. Offscan reads, names and files them on the device. The account is optional: if you create one, the server only knows your e-mail address and what the account needs to work, never the content of a document.
Your documents
Scans, pages, recognized text, signatures, document names, amounts, deadlines, searches and settings are stored only in the app's private storage on your phone. Text recognition (OCR) and document analysis run on your phone. None of this is sent to us or to anyone else, with or without an account.
A document leaves your phone only when you choose to share or export it, for example to an e-mail or messaging app or to a file. Those apps handle the file under their own privacy policies.
The optional account
You can use Offscan without an account. If you sign in (Settings › Account), the account server keeps:
- Your e-mail address, to send you sign-in codes and recognize your account on another phone.
- If you sign in with Google: the e-mail address, name and profile picture address that Google shares when you agree.
- An account number and the dates you created the account and last signed in.
- Your plan, once Offscan Pro is available: free or Pro, and the state of a Google Play subscription (active, expired...). Google Play handles the payment; we never see your card.
- Usage counts for features with a monthly free limit: numbers only, such as "4 smart searches in November". What you searched or extracted is never sent.
- Document request templates you save, if you use document requests: the title and the list of documents you ask for. The documents themselves are never sent.
To keep you signed in safely, the server also records, for each signed-in phone, the IP address and type of device of the last sign-in. Short-lived security logs of sign-ins (time, IP address, device type) are kept for at most 7 days.
Some features may create an account without an e-mail address (anonymous), only to keep usage counts. It holds no personal details and is deleted automatically after 12 months without use.
Why we use this information
- To provide the account you asked for: signing in, keeping your plan and limits across phones (performance of a contract).
- To protect accounts against abuse, such as repeated sign-in attempts (legitimate interest).
We do not sell or rent your information, we show no advertising, and the app contains no analytics or tracking library.
Who handles it
- Supabase hosts the account server and its database, in the European Union (Paris, France). Supabase, Inc. is a US company; any access from outside the EU is covered by the European Commission's standard contractual clauses. Supabase privacy policy.
- Brevo (France) sends the e-mails with your sign-in codes. Brevo privacy policy.
- Google, if you choose to sign in with Google, and Google Play for downloads and subscriptions. Google privacy policy.
How long we keep it
Account information is kept until you delete the account. Anonymous accounts are deleted after 12 months without use. Security logs are kept for at most 7 days.
Deleting your account
In the app: Settings › Account › Delete account. On the web: offscan.app/delete-account. Or write to contact@offscan.app from the address of your account. Deleting the account erases everything the server keeps about it. Your documents stay on your phone until you delete them or uninstall the app. Deleting the account does not cancel a Google Play subscription: cancel it in Google Play.
Your rights
You can ask to access, correct, export or delete the information about you, or object to its use, by writing to contact@offscan.app. We answer within one month. You can also complain to your data protection authority; in France, the CNIL.
Permissions
- Camera: to scan documents. Images are processed on the phone and are never sent anywhere.
- Internet: used only by the optional account, to reach the account server. Documents, their text and your searches are never sent.
- Notifications: to remind you of deadlines you set on your documents.
- Biometrics: to unlock the vault with your fingerprint. Your fingerprint is handled by Android; the app never receives or stores it.
Google document scanner
On phones with Google Play services, the app can use Google's document scanner, which is provided by Google Play services and runs on your phone. Google Play services is governed by Google's Privacy Policy.
Backups
Your documents, their text and your settings are kept out of Google's cloud backup. When you move to a new phone with a direct transfer (cable or Wi-Fi), Android can carry them along, but not your account session: you sign in again on the new phone. The backup file you can create in Settings stays wherever you save it and never contains your account.
Children
The app is not directed to children. Do not create an account for a child under 15.
Changes
When this policy changes, we update this page and its date before the new version of the app is released. The content of your documents will never leave your phone.
Contact
The data controller is the publisher of Offscan. Questions and requests: contact@offscan.app