Privacy Policy

Last updated: 23 August 2026

In short: Papyrus stores your scans on your device and nowhere else. There is no account, no sign-in, and the app does not send your documents anywhere. A document leaves your device only at the moment you choose to share, export or print it.

Who this covers

This policy applies to the Papyrus mobile application for iOS and Android ("the app"). It explains what the app stores, what it does not collect, and the limited cases in which information reaches a third party.

What the app stores on your device

Everything the app creates is written to your device's private app storage:

Scanned images. The original capture and the processed version of every page.
Document details. Names, folders, favourites, page order and timestamps, held in a local database.
Recognised text. With Papyrus Premium, the words read from each page, held in the same local database so you can search your scans.
Settings. Your preferences, such as scan quality, theme and export options.
App lock. If you set a PIN, it is stored in the device's secure keychain, not in the document database.

This data is not readable by other apps. Removing the app removes it, so export anything you want to keep first.

What the app does not collect

No account, email address, name or phone number.
No analytics, usage tracking or advertising identifiers.
No location data.
No contacts, calendars or health data.
No copies of your documents on any server. The app has no server.
No text from your scans. Text recognition runs on the device itself, and what it reads is stored alongside the scan and goes nowhere else.

Scanning, editing, reading and exporting all work with the device offline. The one exception is crash reporting, described below.

Crash reports

When the app crashes or hits an unexpected error, a diagnostic report is sent to Sentry, which we use to find and fix the fault. This is the only case in which the app contacts a server.

A report contains:

The error and the point in the code it came from.
Device model, operating system version and app version.
A short trail of what the app was doing beforehand, such as which screen you were on.

A report never contains:

Any part of a scan. Screenshots and screen contents are switched off, so no image of a document can be attached.
Document names or file names, which are removed before a report is sent.
Your name, email address or any account identifier. There is no account.

Sentry processes this data on our behalf and stores it in the European Union. Reports are kept for a limited period and used only to diagnose faults.

Permissions the app asks for

Camera. Required to scan. Frames are processed on the device to find page edges and are never streamed anywhere.
Photo library. Requested only if you import an existing photo. The app reads the image you pick and nothing else.
Face ID, Touch ID or biometrics. Used only to unlock the app when you turn app lock on. Biometric data is handled by the operating system and is never available to the app.

You can withdraw any of these in your device settings at any time.

When information does leave your device

Sharing, exporting and printing

When you share a document, the app hands the file to whichever destination you choose, such as mail, messaging, cloud storage or a printer. From that point the receiving service's own privacy policy applies. Papyrus is not involved in what happens next and cannot retrieve the file.

Purchases

Papyrus Premium is a one-time purchase. Payment is processed by Apple or Google, and whether you own it is managed through RevenueCat, which acts as our processor for that purpose. Those services receive a randomly generated customer identifier and the details of the transaction. They do not receive your documents, and we never see your payment details.

That identifier is not linked to your name or your email address, because the app never asks for either. You can read it yourself under Settings, so that you can quote it to us if you need help with a purchase.

Ratings prompt

The app may ask you to rate it. The prompt is presented by the operating system, and any review you leave is handled entirely by the App Store or Play Store.

Children

Papyrus is not directed at children and does not knowingly collect information from them. As the app collects no personal information from anyone, there is nothing for us to delete on request.

Your rights

Because your data stays on your device, you control it directly: delete a document in the app, empty the trash to remove it permanently, or remove the app to erase everything at once. There is no account for us to close and no copy of your data for us to hand over, correct or delete, because we never receive one.

Changes to this policy

If the app's behaviour changes in a way that affects this policy, for instance if optional cloud backup is introduced, this page will be updated and the date at the top revised before the change ships.

Contact

Questions about this policy can be sent to info@code-canvas.eu.