Privacy Policy for SnapFolio: PDF Scanner & OCR

Effective date: October 4, 2026

SnapFolio: PDF Scanner & OCR is provided by Hector Cruz. For privacy questions or requests, contact privacy@h-studio.dev or contact@h-studio.dev.

Release verification: the developer name above must exactly match the person or entity identified in the Google Play listing.

Summary

SnapFolio stores documents in app-private storage on your device by default. We do not operate a SnapFolio document server, sell personal information, or include advertising. Documents leave app-private storage only when you direct the app to share, email, export, or back them up. Google ML Kit processes document content on device, but its SDKs send limited diagnostics and usage information to Google as described below.

Data the app handles

• Camera images, imported images, PDFs, text files, and office-document previews. Imported images may retain EXIF data such as GPS coordinates, device details, and capture timestamps.
• File names, folders, tags, favorites, pins, archive/trash state, and document metadata.
• OCR text, barcode values, signatures, annotations, and scan-analysis results.
• Scan, naming, privacy, app-lock, email, and backup settings.
• A backup-folder URI and backup status when backup is enabled.
• Support and bug-report correspondence, including anything you type and bug-report draft fields such as the app version, Android release/API level, device manufacturer, and device model.
• Google Play product, purchase, and entitlement status.
• Reviewer credentials entered for App Review Access and temporary review-access grant metadata.
• Sanitized crash diagnostics stored locally on the device.

These categories may contain sensitive personal information if it appears in a document you choose to process.

Purposes and processing

We process this data to provide scanning, organization, OCR, barcode detection, editing, export, sharing, app lock, purchase restoration, optional backup/restore, and authentication for authorized app reviewers. Document content is not used for advertising or sold.

Camera and files

SnapFolio requests the Camera permission for its manual document capture screen. Captured pages are stored in app-private storage and may be processed by Google ML Kit for OCR and barcode detection. Imports, exports, sharing, and backup locations use Android system pickers or share controls. SnapFolio receives access only to the items or folders you select, and only for the operations you request.

OCR, barcode scanning, and Google ML Kit

SnapFolio uses Google ML Kit for document scanning, OCR, and barcode detection. Google states that ML Kit processes input images, video, and text, along with the resulting outputs, on device and does not send that content to Google servers.

ML Kit may contact Google to obtain models, fixes, and hardware-compatibility information. It also collects device and application information, device or per-installation identifiers, performance metrics, API configuration, input/output sizes, feature versions, event types, and error codes for diagnostics, usage analytics, maintenance, improvement, and abuse detection. Google states that this information is encrypted in transit and is not shared by ML Kit with third parties. Google handles this information under its own privacy terms.

References: ML Kit terms and ML Kit Android data disclosure.

Local crash diagnostics

SnapFolio stores a maximum of 50 sanitized diagnostic reports in app-private storage. Reports may contain an event name, severity, exception class, app stack location, fingerprint, and short sanitized context. They are designed not to contain document content, OCR text, file paths, email addresses, biometric data, backup-folder URIs, or purchase tokens. Reports are not uploaded automatically. They leave the device only if you explicitly share them for support.

Backup and restore

Backup is optional. When enabled, SnapFolio copies library files, saved signatures, and selected library settings into a SnapFolio folder within the storage location you select through Android. Saved email addresses, App Lock and Private View settings, backup-connection details, and cached purchase entitlements are excluded. The selected storage provider receives and stores backup copies under its own terms and privacy policy. Automatic backup may run periodically and after document changes while enabled. Restore reads the selected backup and copies permitted data back into SnapFolio.

Disconnecting backup stops future synchronization but does not delete existing backup copies. Delete those copies through the selected provider. New backup generations encrypt document and settings payloads and authenticate the manifest and generation pointers with a user-visible recovery key. SnapFolio stores the key locally; you can view or copy it from Settings and must keep it safe to restore encrypted backups. Backups created before this protection may remain in the legacy format and are readable only as legacy backups. Providers can still see backup file and folder names and related storage metadata; encrypted manifest contents include file sizes, modification timestamps, and content hashes. App Lock protects the SnapFolio interface, not copies stored by the selected provider.

Biometrics and app lock

Android performs biometric or device-credential verification. SnapFolio receives only the success, failure, or error result—not a fingerprint, face image, biometric template, or device PIN. App Lock and Private View restrict access through SnapFolio and block screenshots in protected sessions, but they do not add a separate encryption layer to every document or create an encrypted Vault.

Purchases

Google Play processes subscription and one-time purchase payments. SnapFolio receives product, purchase, acknowledgement, and entitlement status needed to offer, unlock, restore, and manage Pro access. Google controls payment records under its own terms and privacy policy. SnapFolio does not receive full payment-card details.

SnapFolio uses Google Play Billing directly to query product and purchase status and to acknowledge purchases. Purchase tokens are handled locally by the app for this Play Billing flow and are not sent to a SnapFolio server. SnapFolio does not operate a purchase-verification backend.

The local entitlement cache is protected from casual editing by an app-specific Android Keystore key. Purchase confirmation can remain pending while Google Play acknowledgement is retried and is reconciled with Google Play on refresh.

App Review Access

App Review Access is restricted to authorized app reviewers using developer-issued credentials; it does not create a personal SnapFolio account. When you select Unlock, SnapFolio sends the entered username and password over HTTPS to a developer-operated authentication service hosted on Cloudflare Workers to check whether review access is authorized. This request does not include documents, OCR text, or Google Play purchase tokens.

SnapFolio keeps credentials temporarily in memory and does not save them to disk. If authorized, the app stores an encrypted temporary access grant containing issue and expiry times and a device boot counter in app-private storage. The grant is valid for no more than one hour, and restarting the app does not extend it. Expired or invalid grants are ignored, and the app attempts to remove them when checked. Clearing app storage or uninstalling removes the local grant.

Cloudflare may process connection information, including IP addresses and request metadata, to deliver and secure the service. Related service records are retained under Cloudflare's applicable policies. See the Cloudflare Privacy Policy. Contact us for privacy or deletion requests concerning data sent to the review-access service.

Sharing, email, export, and links

When you share, email, export, open a detected link, or save a document elsewhere, the selected content is sent to the app, storage location, or service you choose. That recipient independently controls its copy. Review the destination before sending sensitive documents.

When you choose Contact or Report a Bug, SnapFolio opens a draft addressed to the developer. Bug-report drafts include the app version, Android release/API level, device manufacturer, and device model, along with the questions or description you enter. Your email app controls whether the draft is sent. Sent support correspondence is retained in the developer's email account only as long as reasonably necessary to respond, document, or protect against the reported issue, then deleted unless law requires longer retention.

Copying OCR, barcode, Wi-Fi, contact, or document text places it in Android's system clipboard outside SnapFolio's app-private storage. SnapFolio marks its clipboard entry sensitive on Android 13 and later and clears or empties its own entry after one minute when it is still current. Android and other apps control clipboard previews, history, and any later retention.

Imported images may retain EXIF metadata, including location, device, and capture-time fields. Review or remove that metadata before sharing or backing up when it could identify where, when, or with which device an image was created.

Original PDF and Office imports may retain document properties such as author, company, timestamps, and hidden properties, as well as embedded attachments or objects. Review the source file and destination before sharing or backing up when those details are sensitive.

Retention and deletion

• Local documents and metadata: retained until you delete them, clear app storage, or uninstall. Items moved to the in-app trash remain until permanently deleted.
• Deletion and secure erasure: SnapFolio uses ordinary Android/filesystem deletion and does not promise forensic secure erasure or guaranteed overwriting; recoverable remnants may remain subject to device and filesystem behavior.
• Settings and saved email address: retained in app-private preferences until changed, cleared, or the app is uninstalled.
• Decrypted and editing caches: temporary files use app-private cache storage. SnapFolio makes a best-effort cleanup after sensitive flows, during a cold launch, and when the app finishes normally; process death or task eviction can defer cleanup until the next launch or Android cache eviction.
• Share caches: temporary share copies are capped at 50 MB and expire after one hour during normal cleanup. SnapFolio also makes a best-effort cleanup on a cold launch and when the app finishes normally; process death or task eviction can defer cleanup.
• Local crash diagnostics: limited to the latest 50 reports and removed when app storage is cleared or the app is uninstalled.
• Review access: credentials are not saved to disk by the app. Local encrypted grants are valid for no more than one hour; expired or invalid grants are ignored, and the app attempts to remove them when checked. Clearing app storage or uninstalling removes them. Cloudflare service records are retained under its applicable policies as described above.
• Backup copies: retained by the selected storage provider until you delete them there; deleting or uninstalling SnapFolio does not delete them.
• Shared/exported copies: retained by recipient apps or locations until deleted there.
• Google Play and ML Kit records: retained by Google under Google's applicable policies.
• Support correspondence: retained in the developer's email account only as long as reasonably necessary to answer, document, or protect against the reported issue, then deleted unless law requires longer retention.

SnapFolio does not offer personal user-account creation and has no developer-operated document server, so there is no personal SnapFolio account to delete. Developer-issued reviewer credentials are used only for App Review Access. To delete local data, use in-app deletion, Android's Clear storage control, or uninstall. For data sent to another provider, submit deletion requests to that provider. Contact us for deletion of support correspondence or data sent to the review-access service.

Security

We use Android credential-protected app-private storage, the Android application sandbox, scoped system pickers, restricted URI grants, screenshot blocking while App Lock or Private View is enabled, local diagnostic sanitization, backup integrity checks, and encrypted SDK/service transport where provided. App Lock and Private View restrict access through SnapFolio but do not add a separate encryption layer to every document or create an encrypted Vault. No storage or transmission method is guaranteed secure. Device security and the security of selected backup/share providers remain important, especially for identity, medical, financial, tax, or legal documents.

Children

SnapFolio is a general-audience productivity app and is not directed to children under 13. We do not knowingly request personal information directly from children. A parent or guardian who believes a child sent information directly to the developer may contact us for deletion.

Your choices and rights

You control document imports, sharing/export destinations, backup connection, saved email address, and app-lock settings. Depending on your location, you may have rights concerning personal data sent directly to the developer, including the rights to access, correct, delete, object to, or restrict processing, and to complain to a privacy regulator. Contact us to exercise an applicable right. This does not override rights you must exercise directly with Google or a selected storage/share provider.

International processing

Google, Cloudflare, and storage, email, or sharing providers you select may process information in countries other than yours under their own terms and transfer mechanisms. The review-access authentication service is hosted on Cloudflare Workers. SnapFolio does not operate its own document-processing or purchase-verification server.

Changes

We may update this policy when app functionality or legal requirements change. The effective date above identifies the current version. Materially different data handling will be disclosed before or when it takes effect as required.

Contact