Halo Scan privacy policy
In short: your documents, page images and recognised text are created and stored only on your device. They leave it only when you share, export, save or print them to a place you choose. The app has no accounts, no ads and no analytics or advertising SDKs. Its only network use is crash reports, which you can turn off. On Android, Google's on-device scanner and text-recognition components also send Google anonymous performance statistics. Neither ever includes your documents.
What stays on your device
- Scans, pages and recognised text. These are created and stored in the app's private storage. Text recognition runs on your device.
- Exports (PDF, JPEG, PNG) and backups. These are created on your device and go only where you send them: the share sheet, "Save to Files", or print.
- Settings (theme, export defaults, app lock, crash reports on/off).
We never receive, see or store any of this. We have no servers that hold your documents.
What is sent, and why
1. Crash reports (Firebase Crashlytics, by Google)
If the app crashes or hits a serious error, it sends a crash report so we can find and fix the bug. A report contains:
- the error and stack trace (which code failed), and the app's state at that moment;
- the app version, device model, operating system version and similar technical details;
- a random installation identifier, used to count how many installations a crash affects. It isn't your advertising ID or a hardware ID, and it changes if you reinstall the app.
A report never contains your documents, images, recognised text, file names or folder names. We don't attach user IDs, names, email addresses or custom logs to reports. Crash reports are not used for advertising or tracking.
Your choice: turn crash reports off at any time in Settings › Privacy › Send crash reports. When it's off, no crash reports are sent. Development builds never send them.
Retention: Firebase keeps crash data and the associated installation identifiers for 90 days and then deletes them (Firebase privacy information).
2. Android only: Google ML Kit performance statistics
On Android, document capture and text recognition use Google ML Kit, which runs on your device. Google documents that ML Kit sends Google technical information for diagnostics and usage analytics: device and app information, performance figures (such as how long recognition took), image format and size, error codes and a per-installation identifier. ML Kit does not send your images or the recognised text. The app can't switch this off (ML Kit data disclosure). Google Play services may also download the text-recognition language models you enable, over its own connection.
The iOS app uses Apple's VisionKit and Vision frameworks, on your device. They don't send anything to us.
3. Things you choose to send
When you share, export, save or print a document, it goes to the app or place you pick. That app's own privacy policy then applies. Halo Scan doesn't send a copy anywhere else.
What the app does not do
- No accounts or sign-in.
- No advertising, no advertising ID, no analytics or attribution SDKs, no tracking across apps or websites.
- No access to your location, contacts or microphone, and no photos except the ones you pick yourself.
- No selling or sharing of personal data.
Permissions
- Camera: used only while you scan. On Android, the document camera belongs to Google Play services and Halo Scan doesn't request the camera permission itself.
- Photos: only the photos you pick in the system photo picker are imported.
- Internet (Android): used only to send crash reports.
- Biometrics / screen lock (optional app lock): handled by your device. Halo Scan never sees your fingerprint, face or PIN.
Service providers
Crash reports are processed by Google LLC (Firebase Crashlytics) on our behalf. ML Kit statistics on Android go to Google under Google's terms. Data is encrypted in transit (HTTPS). We have no other processors.
Data retention and deletion
Your documents stay on your device until you delete them in the app or uninstall it. A document you delete waits in Recently deleted on your device for 30 days, so you can restore it, and is then erased; Delete now there erases it at once. Uninstalling removes all app data. The app opts out of automatic cloud backups of its data. To move to a new phone, use Settings › Backup & restore, which creates a single file (optionally encrypted with your passphrase) that you control.
Crash reports are kept for 90 days (see above). To ask us to delete crash data from your installation sooner, email haloapps.dev@gmail.com. Because we hold no names or emails, tell us roughly when the crash happened and your device model.
Your rights
Depending on where you live (for example under the GDPR or UK GDPR), you may have rights to access, delete or object to the processing of personal data. The only personal data we could hold is crash-report data. You can stop it with the setting above or contact us to exercise your rights. Our legal basis for crash reports is our legitimate interest in keeping the app working, and you can opt out at any time.
Children
Halo Scan is suitable for all ages and is not directed at children. It collects no personal information beyond the technical crash data described above, from anyone.
Changes
If a future version changes what is sent, we will update this policy and the in-app privacy screen before release. Any new network feature will be off by default and clearly labelled.
Contact
Halo Apps · haloapps.dev@gmail.com