PRIVACY POLICY OneScan AI - AI PDF Scanner & Editor Last updated: July 28, 2026 This Privacy Policy explains how the OneScan AI - AI PDF Scanner & Editor app ("OneScan", "the app", "we", "us") processes users' data. The app allows users to scan, import, edit, protect, summarize, and translate PDF documents. Data Controller Jart Technologies Contact email: jart.technologies@gmail.com 1. Data Processed by the App Depending on the features used, OneScan may process the following categories of data: PDF documents imported or created by the user; images captured through the camera or selected from the photo library; text extracted from documents through OCR; PDF file names; app settings, such as language, theme, Premium status, and local preferences; technical data required for the app to operate, such as device information, technical errors, and usage data provided by integrated third-party services; information voluntarily entered in the Help & Feedback form, such as name, email address, and message. 2. Purposes of Processing Data may be processed to: create and manage PDF files; import existing documents; edit pages and add text, images, signatures, highlights, or corrections; perform OCR and make text readable; search for text within documents; generate AI-powered summaries; translate documents; protect documents using a password or PIN; save user preferences; manage Premium subscriptions; display advertisements to non-Premium users, where applicable; receive support requests or feedback; improve the app's stability, security, and performance. 3. Local Document Processing Most OneScan features operate locally on the user's device. PDF files, scanned images, graphic edits, documents protected within the app, preview caches, and main preferences are stored on the device or within the app's local storage. OneScan does not automatically upload all documents to external servers. Documents or document content are sent to external services only when the user uses features that require it, such as AI Summary, AI translation, feedback, or system and third-party services required by the platform. 4. OCR, Search, and Object Counting OCR, PDF search, and object-counting features are designed to work locally on the device whenever technically possible. Text detected through OCR may be used by the app to: display search results; prepare an AI summary when requested by the user; prepare an AI translation when requested by the user. 5. AI Features, Summaries, and Translations When the user chooses to use AI features, such as summarization or translation, OneScan may extract text from the document and send it through a secure HTTPS connection to a Cloud Function controlled by Jart Technologies. The Cloud Function forwards the request to third-party artificial intelligence services, such as OpenAI/ChatGPT, to generate the requested result. The following data may be sent when AI features are used: text extracted from the document; the technical prompt required to generate the selected type of result, such as a bullet-point summary, executive summary, detailed summary, or translation; the target language in the case of translation; minimum technical information required to complete the request. Normally, the entire PDF file is not sent. Only the extracted text required for the requested feature is transmitted. However, the extracted text may contain personal data or confidential information included in the document. Users should avoid using AI features with documents containing highly sensitive, medical, financial, legal, child-related, business-secret, or confidential information unless they knowingly accept this processing. AI-generated results may contain errors, omissions, or inaccurate interpretations. Users must verify the results before relying on them for important decisions. 6. AI Transparency and the European AI Act OneScan informs users when a feature uses artificial intelligence or third-party AI services. The app's AI features are assistance tools designed to summarize or translate text. They do not make automated decisions that produce legal or similarly significant effects on users. Regulation (EU) 2024/1689, known as the Artificial Intelligence Act or AI Act, entered into force on August 1, 2024. Its provisions apply progressively: from February 2, 2025, certain general provisions apply, including definitions, prohibitions, and AI literacy obligations; from August 2, 2025, governance rules and obligations for general-purpose AI models apply; from August 2, 2026, most provisions apply, including various transparency requirements; some rules for high-risk systems have later application dates. OneScan is committed to maintaining a transparent approach toward users: it indicates when content is processed by AI services; it requests confirmation before sending text to external AI services; it limits transmitted data to what is required for the requested feature; it advises users not to submit sensitive or confidential content unless strictly necessary; it presents AI-generated results as assistance that must be verified, not as definitive decisions. 7. Legal Basis for Processing For users in the European Economic Area, data processing is based on one or more of the following legal grounds under Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR): Performance of a contract or pre-contractual measures: to provide the features requested by the user; Consent: when the user voluntarily chooses features such as AI processing, feedback submission, or access to the camera or photo library; Legitimate interests: for security, abuse prevention, technical diagnostics, and app improvement; Legal obligations: when required by applicable laws, distribution platforms, or competent authorities. 8. Device Permissions OneScan may request system permissions, including: Camera: to scan documents; Photos or photo library: to import images or documents; Storage or file picker: to import or save PDF files, within the limits allowed by the operating system; Notifications or other technical permissions: only if introduced in future versions and required for specific features. Users may manage or revoke permissions through the device settings. Revoking a permission may prevent certain features from working properly. 9. Subscriptions and In-App Purchases Premium subscriptions are managed by official platforms such as the Apple App Store or Google Play. OneScan only receives the information required to verify subscription status and unlock Premium features. Payment information, such as card numbers or payment methods, is processed directly by Apple or Google in accordance with their respective privacy policies. OneScan does not store complete payment information. 10. Advertising The free version of the app may display advertisements through third-party advertising services such as Google AdMob. These services may process advertising identifiers, technical device data, and usage information in accordance with their own privacy policies. Premium users may receive an ad-free experience, subject to the conditions of the subscription. 11. Feedback and Support When a user submits feedback or a support request through the app, the following data may be processed: name, if provided; email address; message; app version; Premium status; minimum technical information useful for understanding the issue. This information is used only to respond to the request, investigate technical problems, and improve the service. 12. Data Retention Documents and images stored locally remain on the device until the user deletes them or uninstalls the app. Information submitted through feedback is retained for the time necessary to manage the request and for any related technical, legal, or security requirements. Data sent to AI services is processed to generate the requested response. Retention by AI providers depends on the settings and policies of the provider used. Where technically available, OneScan configures AI requests to limit unnecessary data retention. 13. Data Sharing with Third Parties OneScan may share data with: AI providers, such as OpenAI/ChatGPT, only when the user uses AI features; cloud services used by Jart Technologies to forward AI or feedback requests; Apple and Google for app distribution, purchases, subscriptions, and platform services; Google AdMob or other advertising services for advertisements in the free version; technical service providers required for hosting, security, diagnostics, or app operation. We do not sell users' personal documents. 14. International Data Transfers Some service providers, including AI, advertising, cloud, or app-platform providers, may process data outside the European Economic Area. Where applicable, such transfers must comply with the GDPR through adequacy decisions, Standard Contractual Clauses, or other legally recognized safeguards. 15. Security OneScan adopts reasonable measures to protect processed data, including: HTTPS connections for cloud-based features; limiting the data sent to third parties; local document storage whenever possible; separation between local and cloud-based features; access to AI features only after an explicit action by the user. No digital system can guarantee absolute security. Users should protect their devices, use strong passwords, and avoid sharing sensitive documents with unauthorized individuals. 16. Children OneScan is not specifically intended for children. Minors should use the app only with the consent and supervision of a parent or legal guardian, in accordance with the laws applicable in their country. 17. User Rights Under the GDPR, where applicable, users may have the right to: receive information about the processing of their data; access their personal data; request correction of inaccurate data; request deletion of their data; request restriction of processing; object to processing in certain circumstances; receive their data in a portable format; withdraw consent when processing is based on consent; lodge a complaint with a competent supervisory authority. To exercise these rights, users may contact: jart.technologies@gmail.com 18. Data Deletion Users may delete PDF files and local content directly from the app, where the relevant feature is available, or uninstall the app to remove associated local data. For information submitted through feedback or support requests, users may request deletion by contacting the email address provided above. 19. Changes to This Privacy Policy This Privacy Policy may be updated to reflect new features, technical changes, legal requirements, or requests from Apple and Google. In the event of material changes, we will update the revision date and, where necessary, notify users through the app or other appropriate channels. 20. Contact Information For questions regarding this Privacy Policy or the processing of personal data: Jart Technologies Email: jart.technologies@gmail.com