Privacy Policy

This explains what Scanquil does and doesn't collect, what leaves your device and when, and who it goes to. Last updated August 22, 2026.

The Short Version

Scanquil doesn't have accounts, doesn't use cookies or analytics, and doesn't track you. Everything you scan stays in your browser unless you use a tool labeled "AI" (which sends one image or one page's text to a cloud provider for that single request) or turn on the optional Sync feature (which stores whatever you explicitly opt a group into, so your other devices can retrieve it). The rest of this page explains exactly what that means.

What We Don't Collect

We don't ask for your name, email, or any account information -- there's nowhere to enter one. We don't use cookies, analytics scripts, or any third-party tracking on the site. We don't build a profile of you or your usage across sessions.

What Stays on Your Device

Groups, scanned pages, extracted text, and Ask AI history are stored in your browser's local database (IndexedDB) by default. This data never leaves your device unless you use one of the AI tools or turn on Sync, both described below. Clearing your browser's site data, or uninstalling the app if installed as a PWA, deletes this local copy permanently -- we have no server-side copy to restore it from unless you've synced it.

What the AI Tools Send, and to Whom

Tools marked "AI" send either an image or already-extracted text to a cloud AI provider (Amazon Web Services’ Textract, or Anthropic’s Claude API, depending on the tool) for that one request, to produce the result you asked for. The table below covers every tool.

In every case: only the specific request you make is sent, only for as long as it takes to process it, and we don't retain a copy on our own servers afterward. These providers process the request under their own respective privacy and data-handling terms; we'd encourage reviewing AWS's and Anthropic's own policies directly if you want specifics on how they handle a request server-side.

Payment Data

Most AI tools require a small pay-per-use payment via UPI before they run -- the exceptions are Ask AI, Summarize PDF, Flashcard Generator, and Document Summarizer, which are free (see the table above). Payment is handled entirely by Razorpay, our payment processor -- we never see, receive, or store your card number, UPI ID, or bank details. We only receive a payment/order reference confirming the charge succeeded, which we use to authorize that one AI request. Razorpay processes the payment itself under its own privacy and data-handling policy.

What Sync Sends, and to Whom

Sync is off for every group by default. If you turn it on for a group, that group's name, its pages' extracted text and any AI-extracted fields, and the page images themselves are stored using Supabase (a hosted Postgres database and file storage service).

There's no account tied to this data -- it's addressed only by a random code you generate on your device, hashed before it ever reaches our server, so we never see or store the code itself, only its hash. Anyone holding the plain code can read and write the data associated with it, which is why the code should be treated like a password.

Turning sync off for a group stops further syncing for it but doesn't delete what's already stored -- see "Your Choices" below for how to request deletion.

Server Logs and Rate Limiting

Like effectively any web service, our hosting provider (Vercel) and the infrastructure behind our rate limiting (which exists to stop abuse of the free AI-tool and sync endpoints, not to track individual users) may log standard request metadata -- such as IP address and timestamp -- for operational and security purposes, for a limited retention period. This isn't tied to any account or profile, since none exists.

Children's Privacy

Scanquil isn't directed at children under 13, and we don't knowingly collect information from them -- though as described above, we don't collect identifying information from any user in the first place.

Your Choices

Because there's no account, most of your privacy choices are already built into how the app works: use only the free, fully on-device tools if you'd rather nothing ever leave your browser; use Export to keep your own backup instead of turning on Sync; and turn Sync on only for the specific groups you actually want shared between your devices.

To request deletion of data already stored via Sync, contact us at the address below with the sync code in question (so we can locate the right hashed record) -- we'll delete it and confirm.

Changes to This Policy

We may update this policy as the Service changes. Material changes will be reflected by an updated date on this page.

Contact

Privacy questions or data deletion requests: kiranjoshi.m@gmail.com.

Frequently asked questions

Do you sell my data?

No. There’s nothing to sell -- most data never reaches our servers at all, and what does (via Sync) is addressed only by a hashed code, not tied to any identity.

Can you see the images I scan?

Only if you use an AI tool (that one image, for that one request) or Sync (for groups you've explicitly turned it on for). Nothing else ever leaves your device.

How do I delete data I’ve synced?

Email us the sync code and we'll delete the associated data. Turning sync off on a device stops future syncing but doesn't retroactively delete what's already stored.