Last updated: 4 November 2026
DocScan India (“the app”) is a document scanner that runs on your phone. This policy explains, in plain terms, what happens to your documents and what data the app does and does not collect.
Your documents never leave your device. We operate no server, you have no account, and there is nothing to log in to. We cannot see your scans, because they are never sent anywhere.
The app shows no ads, contains no advertising software, and sells nothing. Every feature is included, with nothing to buy or unlock. It does count which screens and features are used, through Google Analytics, so we know what to improve first — never what is in a document.
Everything to do with your documents happens on your device:
We have no copy of any of it, and no way to obtain one.
Only feature usage, described below. We collect no personal information, no account details, no contact information and no crash reports. There is no advertising software in the app and no advertising identifier is read. We do not build a profile of you.
The app uses Google Analytics for Firebase to count which screens are opened and which features are used — for example “a scan was started”, “a PDF was exported” or “two PDFs were merged” — so we know which parts of the app to improve first. An event can say which of the app’s own presets, tools, portals or size limits it involved, which setting was changed and to what, the kind of code scanned (for example “QR” or “EAN-13”), or why a scan or export did not finish (for example “out of space”). With each event Google also records the app version, the phone model, the Android version, the language, an approximate country derived from the IP address, and a random identifier for this installation of the app.
Analytics never receives a document, an image, recognised text, a document or file name, the content of a QR code or barcode, or anything you type. Collection of the advertising identifier and ad personalisation are both switched off. Google processes these events on our behalf as described in Firebase privacy and security and keeps them for a limited time. Clearing the app’s data in Android settings resets the installation identifier.
The app uses Google ML Kit for document capture, text recognition, reading QR codes and barcodes, and — when you ask it to change the background of a passport photo — for telling a person apart from the wall behind them. All of them run on your device and never send your images, your face, the recognised text or the content of a code anywhere. The background and code-reading models are built into the app rather than downloaded, so they work with no network at all.
We want to be precise about one thing rather than overclaim. ML Kit reports diagnostic metrics about itself to Google — for example how long a scan took and whether it succeeded — as described in Google’s ML Kit data disclosure and ML Kit terms. That telemetry is about the scanning components, not about you, and it never includes your documents, your images or the text found in them. Google provides no option for an app to switch it off.
The installed app lists the INTERNET permission for those Google components and for
the usage analytics above. Neither sends your documents anywhere.
After you have used the app a few times, it may ask the Google Play Store to show its standard rating card. The card is displayed by the Play Store, and the app is not told whether you rated or what you wrote. The “Share with friends” option in Settings opens Android’s share sheet with a fixed message and a link to the app’s Play Store page; it contains nothing about you or your documents, and goes only to the person and app you pick.
The app asks the Google Play Store app on your phone whether a newer version exists, and offers to install it. That request is made by the Play Store, using your existing Google account, and the only thing it asks about is this app’s version number. We do not see the answer, and nothing about your documents is involved. If you installed the app from somewhere other than Play, no check happens at all.
There are none. The app has no in-app purchases, no subscriptions and no paid tier, and it contains no billing software.
| Permission | Why |
|---|---|
CAMERA |
To photograph documents, to take a passport photo if you choose that instead of picking one, and to read QR codes and barcodes. Images go straight into on-device processing. |
USE_BIOMETRIC, USE_FINGERPRINT |
The optional app lock, if you turn it on. |
INTERNET, ACCESS_NETWORK_STATE |
For the usage analytics described above, and for Google’s ML Kit components and Android’s background-work library. Documents are never sent. |
WAKE_LOCK, FOREGROUND_SERVICE,
RECEIVE_BOOT_COMPLETED |
Not declared by us either. Added by Android’s background-work library, which the app uses to finish exporting a large document if you leave the screen. |
The app requests no storage permissions. Saving uses Android’s system file picker, so it only ever writes where you point it.
Because people keep identity documents in a scanner app, the app offers an optional lock using your device’s biometric or screen-lock credential. Authentication is performed by Android; the app never receives, stores or transmits your fingerprint, face data or PIN.
The app is not directed at children and we do not knowingly collect data from anyone. It is rated for a general audience.
Documents are held in app-private storage, protected by Android’s application sandbox, and are optionally shielded further by the app lock. Since nothing is uploaded, there is no server-side breach that could expose your documents.
This policy is published here and a copy of it ships inside the app, so you can read it without a connection. If it changes, this page is updated first and the date above changes with it; the copy in the app catches up when you next update the app. Material changes will also be noted in the app’s release notes on Google Play.
Questions about this policy or about privacy in the app: please open an issue at github.com/diptendulkar/diptendulkar.github.io/issues.