Privacy Policy
SnapAI: PDF Scanner (the "App") is provided by AHQ Labs ("we", "us"). Effective date: 28 October 2026. This policy is published at https://ahqlabs.com/snapai/privacy.
Contact for anything in this policy: support@ahqlabs.com.
1. The short version
- Your scanned documents, photos, PDFs and text stay on your device. We do not run a server that stores them.
- Two features send content to Google when you use them: Auto OCR (the page image) and Translate (the text). Details in section 2.1.
- The App shows ads. Ads, analytics, crash reports and purchases involve identifiers such as your advertising ID. In regions that require it, we ask for your consent first.
- We do not sell your personal information. We do not ask you to create an account.
2. What we collect, why, and who receives it
We collect only what is listed here. "On device" means it never leaves your phone.
2.1 Content you create or open
| Data | Why | Where it goes |
|---|---|---|
| Scans, photos, imported images, PDFs, extracted text, file names, passwords you set on PDFs | To scan, edit, merge, split, lock, unlock, convert, view and share documents | On device only. You decide when to share or export a file. |
| The image of a page, when you choose Auto OCR | To read the text on the page | Sent over HTTPS to Google Cloud Vision (Google LLC), which returns the text. Only the page you are reading is sent, only when you start Auto OCR. We do not keep a copy; Google processes it under its Cloud Vision terms. |
| The text you ask to translate, and the chosen languages | To translate extracted text | Sent over HTTPS to Google Translate (Google LLC), which returns the translation. Google also receives your IP address as part of the request. |
| On-device text recognition (ML Kit and Tesseract) | To read text without the internet | Runs on your device. Language models are downloaded: Tesseract models from GitHub (GitHub receives the request and your IP address), ML Kit models through Google Play services. |
2.2 Feedback you send
If you use the feedback or feature-request form we receive what you choose to send: your message, the options you tick, any screenshots you attach, and technical details to help us fix problems: device manufacturer and model, Android version, free and total storage and memory, screen size and density, app version, language setting, and whether you were online. This goes over HTTPS to a form we operate on Google Apps Script (Google LLC), which stores it in a Google Sheet and emails it to us. If sending fails you can send the same information by email yourself. Please do not put sensitive information in feedback.
2.3 Purchases
Subscriptions and one-time purchases (weekly, monthly, yearly, Lifetime, Remove Ads) are processed by Google Play. We never see your payment card. We use RevenueCat (RevenueCat, Inc.) to check what you own and to restore it. RevenueCat receives an anonymous app user ID, your Google Play purchase tokens, product and purchase details, and device and app information (such as country, locale, app version and operating system), and it keeps this to run the service and for legal and accounting needs. We use it only to unlock the features you bought.
2.4 Ads and consent
The App shows ads through Google AdMob (Google LLC). AdMob receives: ad requests and ad interactions (impressions, clicks), your advertising ID, IP address (from which an approximate location is derived), device and app information (model, operating system, language, app version) and your consent status. If we add other ad networks in future we will list them here before they go live.
Where the law requires consent (for example in the EEA, UK and some US states) the App shows Google's consent form (the Google User Messaging Platform) and requests ads accordingly. You can change your choice at any time in the App under Settings, Privacy options (shown where the law requires it), or by emailing us, and you can reset or delete your advertising ID in Android settings (Settings, Privacy, Ads). Paying for Pro or Remove Ads turns all ads off.
2.5 Measuring how the App is used and finding problems
| Service | What it receives | Why |
|---|---|---|
| Firebase Analytics (Google LLC) | Events about how you use the App (screens, taps on features, purchase prompts), an app-instance ID, device and app information, your language setting and approximate location from IP | To understand which features are used and to improve the App |
| Firebase Crashlytics (Google LLC) | Crash and error reports: stack traces, device model, Android version, app version, a Firebase installation ID, memory and storage state | To fix crashes |
| Firebase Remote Config (Google LLC) | A Firebase installation ID, country, language, app version and platform (to decide which settings apply) | To adjust app settings, limits and offers without an update |
| Firebase Cloud Messaging (Google LLC) | A push registration token and device information | To deliver notifications such as reminders |
| Singular (Singular Labs, Inc.) | Install and session data, attribution data (which campaign led to the install), advertising ID, Google Play install referrer, the events "opened a PDF" and "finished a scan", subscription events (free trial started, converted to paid, renewed, ended), ad-revenue amounts, your push token | To measure which ad campaigns work, to measure revenue, and to detect fraud |
| Mixpanel (Mixpanel, Inc.) | Usage events with the screen, feature, tab or plan involved (for example which tool you tapped on Home, which purchase screen opened and which plan you chose), and a device identifier. No document content, file names or text | To understand product usage |
Where the law requires consent, Singular and Mixpanel start only after you accept the consent form (the same choice that allows ads), and stay off if you decline. We do not link these services to your name or email, because the App does not ask for them.
2.6 Notifications and permissions
- Camera: to scan documents. Pictures go into the App, not to us.
- Photos / media (and storage on older Android): to import images and save files.
- Notifications: reminders and tips. You can turn them off in Android settings or in the App.
- Internet and network state: for the features above.
We do not access your contacts, microphone or precise location.
3. Who else receives data (summary)
Google (AdMob, UMP consent, Firebase, Cloud Vision, Translate, Apps Script, Google Play, ML Kit models), RevenueCat, Singular, Mixpanel, and GitHub (model downloads). Each acts as our service provider or, for advertising, under its own terms; see their privacy policies. We may also disclose information if the law requires it or to protect our rights.
4. How long we keep data
- Documents and extracted text: on your device until you delete them or uninstall the App.
- Feedback (message, screenshots, device details): we keep it while we work on the issue and delete it after 12 months.
- Firebase Analytics event data: 2 months (the Google Analytics default). Crashlytics reports: about 90 days.
- Purchase records at RevenueCat and Google Play: as long as needed to provide your purchases and to meet legal and tax duties.
- Singular, Mixpanel and AdMob: according to each provider's own retention policy, which you can read on their websites.
- Free Auto OCR credits and settings: on your device only.
5. Your choices and rights
- Consent for ads and tracking: use the consent form (Google User Messaging Platform) shown at first launch where required, and change it later in the App under Settings, Privacy options, or by emailing us. You can also reset your advertising ID or opt out of ads personalization in Android settings.
- Delete data: uninstalling the App deletes the documents and settings on your device. To have data we hold deleted (for example feedback you sent, or analytics linked to your device), email support@ahqlabs.com from the device owner's address and tell us what you want removed; include your app version and, if you know it, the date you used the App. We will reply within 30 days. For purchases, contact Google Play.
- Access, correct, export, object or restrict processing, and withdraw consent: email us. If you are in the EEA, UK or Switzerland you can also complain to your local data protection authority. California residents may ask what we collect and to delete it, and may opt out of "sharing" for cross-context advertising through the consent controls above; we do not sell personal information for money.
- Notifications: switch off in Android settings.
6. International transfers
We and our providers (Google, RevenueCat, Singular, Mixpanel, GitHub) process data in countries including the United States, which may have different data protection laws from yours. Where required we rely on safeguards such as Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework.
7. Security
Data sent from the App to the services above is sent over encrypted connections (HTTPS). Documents stay in the App's private storage on your device. No method is completely secure; please protect your device with a screen lock. Passwords you set on PDFs are used on your device to lock and unlock files and are not sent to us.
8. Children
SnapAI is not directed to children under 13 (or under 16 where local law sets a higher age) and we do not knowingly collect their personal information. If you believe a child has given us information, email support@ahqlabs.com and we will delete it.
9. Changes
We may update this policy. We will post the new version at https://ahqlabs.com/snapai/privacy with a new effective date, and for material changes we will tell you in the App or by another suitable way.
10. Contact
AHQ Labs Email: support@ahqlabs.com Website: https://ahqlabs.com