Privacy Policy

Last updated: August 24, 2026

Data we collect

Scantivo is built to protect your privacy. The app doesn’t require an account and includes no ads, no ad tracking, no profiling, and no audience-measurement service operated by Scantivo.

By default, scanned documents, PDFs, images, and related information stay on the device. They are transmitted only when the user chooses to share, export, copy to a folder, or enable optional Library Sync. Scantivo requires no account and stores no document on its own servers.

Auto-rename and on-device processing

Auto-rename, content search, and backup and restore are available during the optional 14-day trial, then with Scantivo Unlimited. They run on-device with local-processing technologies provided by Apple or Google. Scantivo does not send your documents to a CAMPO STELLATO server. No Scantivo cloud is imposed: if you pick a remote location, that choice is yours alone.

On Android, on-device text recognition uses Google ML Kit. Google states that ML Kit collects limited technical data—device and app information, a per-installation identifier, performance metrics, API configuration, input and output sizes, feature events, and error codes—for diagnostics and usage analytics. Google does not receive scanned images, document text, or recognition output. These technical data are encrypted in transit, and Google states that it does not share them with third parties. This collection is governed by Google’s terms and cannot currently be disabled in Scantivo.

Optional Library Sync

Library Sync is off by default. If you enable it, PDFs and the data needed for their saved changes are copied to Scantivo’s private space in Apple iCloud or Google Drive app data. No document is stored on a server operated by Scantivo.

On Apple devices, synchronization uses the active iCloud account. On Android, you choose the Google account to authorize. Scantivo never receives the account password. Apple and Google process the data under their own terms and privacy policies.

A deletion made on one synchronized device is propagated to the others. Turning Library Sync off stops future exchanges but does not erase the remote copy. A separate “Erase Synchronized Data” action removes Scantivo’s synchronized data from the selected provider.

In-app purchases

Scantivo Unlimited is a one-time purchase with no subscription, processed by Apple through the App Store on iPhone and iPad, and by Google Play on Android. The optional 14-day trial triggers no automatic purchase. Payment details are handled by the relevant store and are not accessible to CAMPO STELLATO.

Synchronized folders and Scantivo Pulse

For Scantivo Pulse only: You alone choose the compatible folder to follow. Scantivo Pulse works between iPhone and iPad with a compatible iCloud Drive folder, or between Android devices with a compatible Google Drive folder; these remain separate paths. The selected service synchronises the file under its own terms and privacy policy. Scantivo does not connect to your storage account and does not host or synchronise the PDF. Scantivo receives neither the PDF, its name, its path nor its contents; the alert signal contains no file, name, path, page, text or image.

Technical data used by Scantivo Pulse

When you use Scantivo Pulse, the app sends CAMPO STELLATO’s notification relay a random installation identifier, a random installation secret of which only the cryptographic hash is retained, the platform, an Apple push token or Google Firebase Cloud Messaging (FCM) registration identifier, pseudonymous channel identifiers derived from followed documents and, when a revision is published, a random revision identifier. These elements contain no PDF, filename, file path, document content, person’s name or email address.

These data are used only to authenticate the installation, deliver requested alerts and limit abuse. The relay and its database are hosted by Cloudflare; delivery uses Apple Push Notification service (APNs) or Google Firebase Cloud Messaging (FCM). Cloudflare also processes the connection IP address transiently to apply a short rate limit; Scantivo does not retain it in the relay database or application logs. These providers process data under their own terms and privacy policies. Scantivo does not sell these data or use them for advertising, analytics or profiling.

Revision events are erased after 7 days. Invalid push identifiers are erased when reported by Apple or Google. Inactive installations and subscriptions are erased after 90 days. When Pulse access ends, or when no followed channel or pending publication remains, the app requests immediate deletion at its next successful connection. On Android, when Pulse notifications are no longer needed, the app unregisters from FCM and deletes its Firebase Installation ID. You may also request early deletion at contact@scantivo.fr.

Cookies and tracking

The Scantivo website does not set advertising or audience-measurement cookies and includes no third-party trackers. It only uses browser local storage to remember the selected language. This strictly functional storage is not used to track your browsing.

Your rights

Under the GDPR, users may have rights of access, rectification, erasure, restriction, and objection where applicable. Documents stored on the device can be deleted from the app or from the device itself.

Contact

For privacy or personal data questions: contact@scantivo.fr.