LumaScan Privacy Policy
This Privacy Policy explains how LumaScan ("we", "our", or "us") handles information when you use the LumaScan mobile application.
1. Information we process
LumaScan is designed as a local-first document scanner. Your documents and scan data remain on your device and are not uploaded to our servers.
- scanned documents, pages, and generated PDFs stored locally
- document titles, timestamps, and page ordering metadata
- language preferences for OCR text recognition
- camera access for capturing document images (with your explicit permission)
- image import via your device's system photo picker (no additional permissions required)
We do not create user accounts, and we do not operate a backend service to collect, store, or view your documents or personal data.
2. Local storage
LumaScan saves your scanned documents, page images, exported PDFs, and app preferences locally on your device. This data is used only to power the scanning, editing, and document management features inside the app. No document data is transmitted to external servers by LumaCraft Studio.
3. Third-party services
While LumaScan's core scanning, editing, and export experience does not transmit your documents to our own servers, the app may rely on the following third-party services:
- Google Fonts, which may request font files from Google servers when rendering app typography. These requests may expose standard network information such as IP address and request headers to Google.
- Google Mobile Ads (AdMob), when advertising is enabled at build time. In ad-enabled builds, the AdMob SDK may process network information, device identifiers, and limited ad-interaction data for ad delivery, measurement, and fraud prevention. LumaScan is ad-free by default when no AdMob configuration is supplied.
- Google ML Kit for on-device optical character recognition (OCR). Text recognition runs locally on your device. Non-Latin script models may be downloaded on-demand via Google Play Services on first use.
- RevenueCat for managing Pro subscription entitlements. RevenueCat processes purchase tokens provided by the app store and does not have access to your documents or personal identity.
You can review Google's Privacy Policy and RevenueCat's Privacy Policy for more details about their respective services.
4. Data sharing
We do not sell, rent, or trade personal information. Because LumaScan does not collect your documents or personal data through its own backend service, we do not share document data with third parties. Information processed by Google services and RevenueCat described above is handled directly by those services under their own policies.
5. Camera and storage permissions
LumaScan requests camera permission to capture document images. For importing images from your device, LumaScan uses the Android system photo picker, which does not require storage or media access permissions. Camera permission is requested only when you initiate document capture. You may deny or revoke camera permission at any time through your device settings. Camera images are processed locally and are not transmitted off-device by LumaCraft Studio.
6. Children's privacy
LumaScan is not directed to children under the age required by applicable law for independent consent. We do not knowingly collect personal data from children.
7. Security
LumaScan is designed to minimize privacy risk by keeping your documents and preferences local to your device. The security of locally stored information depends in part on the security of your device and operating system.
8. Changes to this policy
We may update this Privacy Policy from time to time. Updated versions will be posted at this URL with a revised effective date.
9. Contact
For privacy questions, contact lumacraftstudio.support@gmail.com.