This explains what Scanquil does and doesn't collect, what leaves your device and when, and who it goes to. Last updated August 22, 2026.
Scanquil doesn't have accounts, doesn't use cookies or analytics, and doesn't track you. Everything you scan stays in your browser unless you use a tool labeled "AI" (which sends one image or one page's text to a cloud provider for that single request) or turn on the optional Sync feature (which stores whatever you explicitly opt a group into, so your other devices can retrieve it). The rest of this page explains exactly what that means.
We don't ask for your name, email, or any account information -- there's nowhere to enter one. We don't use cookies, analytics scripts, or any third-party tracking on the site. We don't build a profile of you or your usage across sessions.
Groups, scanned pages, extracted text, and Ask AI history are stored in your browser's local database (IndexedDB) by default. This data never leaves your device unless you use one of the AI tools or turn on Sync, both described below. Clearing your browser's site data, or uninstalling the app if installed as a PWA, deletes this local copy permanently -- we have no server-side copy to restore it from unless you've synced it.
Tools marked "AI" in the app (Image to Text, Extract Tables, PDF to Word, PDF to Excel, Invoice & Receipt Extraction, Form Field Extraction, and the Enhance option) send a single image to Amazon Web Services’ Textract document-processing service for that one request, to produce the result you asked for.
Ask AI sends the page text you've already extracted (not the image) to Anthropic's Claude API, along with your question, to generate an answer. Ask AI is free and has no payment step.
In both cases: only the specific request you make is sent, only for as long as it takes to process it, and we don't retain a copy on our own servers afterward. These providers process the request under their own respective privacy and data-handling terms; we'd encourage reviewing AWS's and Anthropic's own policies directly if you want specifics on how they handle a request server-side.
Most AI tools (everything except Ask AI) require a small pay-per-use payment via UPI before they run. Payment is handled entirely by Razorpay, our payment processor -- we never see, receive, or store your card number, UPI ID, or bank details. We only receive a payment/order reference confirming the charge succeeded, which we use to authorize that one AI request. Razorpay processes the payment itself under its own privacy and data-handling policy.
Sync is off for every group by default. If you turn it on for a group, that group's name, its pages' extracted text and any AI-extracted fields, and the page images themselves are stored using Supabase (a hosted Postgres database and file storage service).
There's no account tied to this data -- it's addressed only by a random code you generate on your device, hashed before it ever reaches our server, so we never see or store the code itself, only its hash. Anyone holding the plain code can read and write the data associated with it, which is why the code should be treated like a password.
Turning sync off for a group stops further syncing for it but doesn't delete what's already stored -- see "Your Choices" below for how to request deletion.
Like effectively any web service, our hosting provider (Vercel) and the infrastructure behind our rate limiting (which exists to stop abuse of the free AI-tool and sync endpoints, not to track individual users) may log standard request metadata -- such as IP address and timestamp -- for operational and security purposes, for a limited retention period. This isn't tied to any account or profile, since none exists.
Scanquil isn't directed at children under 13, and we don't knowingly collect information from them -- though as described above, we don't collect identifying information from any user in the first place.
Because there's no account, most of your privacy choices are already built into how the app works: use only the free, fully on-device tools if you'd rather nothing ever leave your browser; use Export to keep your own backup instead of turning on Sync; and turn Sync on only for the specific groups you actually want shared between your devices.
To request deletion of data already stored via Sync, contact us at the address below with the sync code in question (so we can locate the right hashed record) -- we'll delete it and confirm.
We may update this policy as the Service changes. Material changes will be reflected by an updated date on this page.
Privacy questions or data deletion requests: kiranjoshi.m@gmail.com.
No. There’s nothing to sell -- most data never reaches our servers at all, and what does (via Sync) is addressed only by a hashed code, not tied to any identity.
Only if you use an AI tool (that one image, for that one request) or Sync (for groups you've explicitly turned it on for). Nothing else ever leaves your device.
Email us the sync code and we'll delete the associated data. Turning sync off on a device stops future syncing but doesn't retroactively delete what's already stored.