This Privacy Policy explains how the mobile application "iEdit: Pdf & Document & Video" (shown on your device as "iEdit Scanner", the "App") handles information about you. The App is published by Favantis ("Favantis", "we", "us" or "our"). It applies to the App on iPhone, iPad and Android devices, in every language and country where the App is offered.

Please read this policy together with our Terms of Use and our End User Licence Agreement (EULA), which you can open from Profile › Legal in the App.

1. The short version

iEdit processes your documents, photos, videos, scans, signatures and recognised text on your device. We do not run servers that receive, store or analyse your files.
Signing in is optional, and iEdit works the same without it. If you choose to sign in with Apple or Google, they confirm your account to us; we never see a password, and our sign-in service stores nothing about you. Otherwise we do not ask for your name, e-mail address, phone number or password.
iEdit contains no advertising, no advertising identifiers, no analytics SDK and no crash-reporting SDK. We do not track you across apps or websites, and we do not sell or share your personal information.
Information leaves your device only in the cases described in section 4: buying or restoring an iEdit Premium subscription (through Apple or Google and our subscription service provider RevenueCat), signing in with Apple or Google if you choose to, a copy of your files in your own iCloud or Google Drive if you turn on cloud backup, downloading an optional text-recognition model when you ask for one, diagnostic information that Google's on-device ML Kit libraries send on Android, and any e-mail you choose to send to our support address.
You can delete everything the App keeps on your device at any time, from My files or by deleting the App.

2. Who is responsible

Favantis is the developer and publisher of the App and the "controller" (in Turkish law, "veri sorumlusu") of the limited personal data described in this policy. You can reach us at any time by e-mail at support@favantis.com. Our contact details are also given in section 15.

3. Information that stays on your device

Almost everything the App does happens on your device. The following information is created, stored and processed only on your device, in storage that belongs to the App, and is not sent to us or to anyone else by the App, except to your own iCloud or Google Drive if you turn on cloud backup (section 4.9):

Documents and files you scan, import, create or edit: PDFs, images, videos, Word, Excel and PowerPoint files, text files, and their names, categories, thumbnails, page order and page rotation.
Camera images taken by the document scanner, the ID card scanner, the text scanner and the QR code and barcode scanner. The App uses them to detect page edges, straighten, clean up and enhance pages, recognise text and read codes, and keeps only the results you save.
Text recognised from your pages and pictures (optical character recognition, "OCR"), and the invisible text layer added to scanned PDFs so that they can be searched.
The content of QR codes and barcodes you scan (for example a link, a Wi-Fi network name and password, contact details, an e-mail address, a phone number or a product code). Nothing is opened, joined or saved until you tap the matching button.
Signatures you draw and keep for signing PDFs.
Passwords you type to lock or unlock a PDF. They are used once, on your device, to encrypt or decrypt that file. The App does not store them and cannot recover them.
Voice-overs you record for videos with the microphone.
The speech in your videos, when you ask the video editor for automatic captions. Your device's own speech recognition turns it into subtitles (Apple's speech recognition on iPhone and iPad, Android's on-device speech recogniser on Android); the sound and the text never leave your device. On iPhone and iPad with iOS or iPadOS 26 or later, the first time you make captions in a language, your device may download Apple's speech recognition model for that language from Apple, as it does for keyboard dictation; nothing from your videos is sent.
Photos in your photo library, when you allow the App to read it for the gallery tools: finding duplicate photos, picking the best shot of similar photos, tagging photos by what they show, making albums by moment, showing your gallery by date, and summarising what takes up storage. To do this the App analyses your photos on your device (for example by computing image fingerprints, detecting faces and open eyes for the best shot and for the privacy blur, and labelling what a photo shows). These results are used only on your device and are not sent anywhere.
Location and camera details (EXIF and other metadata) inside your photos and videos. The App reads them only to show them to you or to remove them when you ask.
Your settings: language, appearance, notification preference, the last settings of each tool, and whether you have seen the introduction.
Drafts of video editor projects.

This information stays on your device until you delete it in the App, delete the App, or your device's operating system removes it. Like any app data, it may be included in the backups your device makes (for example iCloud Backup on iPhone and iPad, or Android's backup to your Google account), depending on your device settings; those backups are governed by Apple's or Google's terms and privacy policies. Downloaded text-recognition models are excluded from iCloud backups.

4. Information that leaves your device

4.1 Subscriptions: Apple, Google and RevenueCat

iEdit Premium is an optional auto-renewing subscription. Payments are handled entirely by Apple (App Store) or Google (Google Play). We never see or receive your payment card or bank details, your Apple Account or Google account password, or your billing address.

To offer the subscription, show its price and free trial, confirm a purchase, restore earlier purchases and know whether Premium is active, the App uses the software development kit (SDK) of RevenueCat, Inc., a subscription service provider that acts on our behalf as a data processor. When the App talks to the store about Premium, the RevenueCat SDK sends the following to RevenueCat's servers:

An app user ID. If you have not signed in, it is a random, anonymous app user ID created by the SDK on your device. If you sign in (section 4.8), it is your iEdit user ID instead, a pseudonymous code that lets your subscription follow you to your other devices. Neither contains your name or e-mail address, and the App does not set any customer attributes about you.
Purchase information from the store: the products you bought, purchase and expiry dates, trial status, the store's receipt (App Store) or purchase token (Google Play), and the store transaction identifiers.
Technical information: the device type and model, operating system and version, the App's version, the SDK's version, your device's language and region settings (locale) and the currency of the price.
Your IP address, which RevenueCat uses to estimate the country of a purchase and, according to RevenueCat, does not keep after that.

We use this information only to provide and verify your subscription, to prevent fraud and misuse, to restore purchases, to answer your questions about a purchase, and to see aggregated subscription figures (for example how many subscriptions are active). RevenueCat stores this data on servers in the United States (Amazon Web Services). RevenueCat's privacy policy is available at https://www.revenuecat.com/privacy.

Apple and Google process your purchase as independent controllers under their own terms and privacy policies (https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy). When you subscribe, cancel, ask for a refund or manage your subscription, you deal with Apple or Google directly.

4.2 Optional text-recognition models

Your device's own text recognition does not read every script. When you choose to read text in a script that your device cannot read itself (on Android: Cyrillic, Arabic, Greek and Thai; on iPhone and iPad: Greek), the App asks you before it downloads the matching open-source Tesseract model (roughly 8 to 37 MB each). The download is a plain file request to our file server models.ieditscanner.com, which Cloudflare, Inc. runs for us as a service provider (Cloudflare R2 storage and its content delivery network). Like any web server, that server receives your IP address, the time of the request and technical request details; Cloudflare processes them only to deliver the file and protect the service. Nothing about you, your documents or your text is sent. The file is checked against a fixed checksum and kept on your device until you remove it in the App or delete the App. Models are downloaded only when you ask for them; the App never downloads them by itself.

4.3 Google ML Kit on Android

On Android, the App uses Google's ML Kit libraries, with models that are built into the App, for text recognition, reading barcodes and QR codes, detecting faces (for the privacy blur and the best shot) and labelling what a photo shows. The images and text are processed on your device by these libraries. According to Google, the ML Kit libraries send Google diagnostic and usage information about their own operation, such as the device manufacturer and model, the operating system version, the App's package name and version, a per-installation identifier that is not intended to identify a user or a physical device, performance metrics, the configuration of a request (such as the image format and resolution) and error codes. Google states that it uses this information for diagnostics and usage analytics of ML Kit, encrypts it in transit and does not transfer it to third parties. See https://developers.google.com/ml-kit/android-data-disclosure. iPhone and iPad use Apple's on-device Vision framework instead, which does not send this information through the App.

4.4 Contacting support

If you tap "Contact us", the App opens your own e-mail app with a message to support@favantis.com. To help us understand your question, the App adds at the end of the message: the App's version and build number, your operating system and its version, your device model and the App's language. You can read, change or delete these lines before you send the message, and nothing is sent unless you send it. If you write to us, we receive your e-mail address, your name if your e-mail app includes it, your message and any attachments you choose to add. We use them only to answer you and to improve the App, and we keep them as long as necessary to handle your request and for a reasonable period afterwards (normally no longer than three years), unless the law requires us to keep them longer.

When you share a file, save it to Files or your photo library, open a link from a QR code, call a number, write an e-mail, add a contact or join a Wi-Fi network from the App, the App hands that information to the app, service or system feature you choose. What happens to it there is governed by that app's or service's own terms and privacy policy.

4.6 Crash reports from Apple and Google

The App itself contains no crash-reporting or analytics library. If you have chosen in your device settings to share analytics or diagnostics with app developers, Apple (App Store Connect) or Google (Google Play Console) may give us crash reports and performance statistics about the App. These reports are compiled and shared by Apple or Google according to their own privacy policies and your device settings. We use them only to find and fix problems.

4.7 Rating the App

After you buy iEdit Premium, and once at a launch at least a day after you first opened the App if you have not bought Premium, the App asks Apple (App Store) or Google (Google Play) to show their standard rating prompt. Apple and Google decide whether the prompt appears and how often. If you rate or review the App, you do so with Apple or Google under their own terms and privacy policies. The App does not learn whether you rated it or what you wrote; we only see the ratings and reviews that the stores show to developers. To keep track of this, the App stores on your device the date you first opened it and whether it has asked at a launch.

Signing in is optional; every feature of the App works without it. Its purpose is to let an iEdit Premium subscription follow you to your other iPhone, iPad and Android devices. The App offers it once after the introduction and at any time in Profile.

When you tap "Continue with Apple" or "Continue with Google", Apple or Google shows its own sign-in screen. You sign in with them, not with us, and we never see your password. Apple or Google then gives the App a signed token that contains an identifier of your account with them and, if you agree to share them, your e-mail address and your name. Apple lets you hide your real e-mail address behind a private relay address, and it shares your name only the first time you sign in.
The App sends this token once to our sign-in service at auth.ieditscanner.com, which Cloudflare, Inc. runs for us as a service provider (Cloudflare Workers). The service checks with Apple's or Google's public keys that the token is genuine and was made for iEdit, and returns your iEdit user ID: a code calculated from the account identifier with a secret key, from which the identifier cannot be read back. The service does not store the token, your e-mail address, your name or your iEdit user ID, and we keep no user database. Like any web server, it receives your IP address, the time of the request and technical request details; Cloudflare keeps short technical logs of requests for a few days to run and protect the service.
On Android, Sign in with Apple opens Apple's sign-in page in a browser tab. Apple sends the result to our sign-in service, which checks it in the same way and hands it straight back to the App.
The App keeps on your device the sign-in method, your iEdit user ID and the e-mail address and name that Apple or Google shared, to show in Profile who is signed in. It uses your iEdit user ID as the app user ID for RevenueCat (section 4.1), so that Premium is available on every device where you sign in with the same account.
Signing out (Profile › Sign out) removes this information from your device, and the App goes back to an anonymous app user ID. Your Premium comes back when you sign in again.
Deleting your account (Profile › Delete my account) removes this information from your device and ends the link between iEdit and your Apple or Google account. For an Apple account, Apple asks you to confirm once more, and our sign-in service then asks Apple to revoke iEdit's access to your Apple Account. For a Google account, the App clears its Google sign-in; you can also remove iEdit from your Google account at https://myaccount.google.com/connections. Deleting your account does not cancel a subscription. If you also want the subscription records that RevenueCat keeps under your iEdit user ID deleted, write to us (section 10).

Apple and Google process your sign-in as independent controllers under their own terms and privacy policies.

4.9 Optional cloud backup to your iCloud or Google Drive

Cloud backup is off until you turn it on in Profile › Cloud backup. When it is on, the App keeps a copy of your files in your own cloud storage, so that you can bring them back on a new or reset device. You choose where the copy goes: iCloud (on iPhone and iPad) or Google Drive (on iPhone, iPad and Android). It does not need an iEdit account.

What is copied: the files in My files with their names, folders and dates; your saved signatures; video editor drafts with the media they use; and your appearance, language and tool settings. Each backup also records a short name for the device it comes from (such as "iPhone" or "Pixel 9"), so that you can tell backups apart.
Where it goes: to the App's private storage in your iCloud account, through Apple's CloudKit, or to the hidden app data folder in your Google Drive. Only iEdit can read these places; they are not shown among your iCloud Drive or Google Drive files. For Google Drive, the App asks Google for access to that folder only and cannot see or change your other files in Drive. The copy goes straight from your device to Apple or Google over an encrypted connection. It never passes through our servers, and we have no access to it. Apple and Google keep it under your own agreement with them and their privacy policies, and it counts against your iCloud or Google Drive storage.
When: after changes in My files, when you leave the App and when you tap "Back up now". Automatic backups wait for Wi-Fi unless you allow mobile data. Only new and changed files are sent.
Deleted files: a file you delete on your device stays in the backup for 30 days, so that it can still be restored, and is then removed from it.
Restoring adds the files of a backup that are not on the device; it does not replace files that are already there.
Turning it off and deleting: turning cloud backup off stops new backups and, for Google Drive, withdraws the App's access. The backup already made stays until you delete it: "Delete backup" in the App removes this device's backup from your cloud. You can also remove it in your iCloud settings (Manage Storage) or in Google Drive's settings (Manage apps).

5. What we do not do

We do not upload your documents, photos, videos, scans, recognised text or signatures to our servers. We have no servers for them.
We do not create profiles of you, sell your personal information, or share it for cross-context behavioural advertising.
We do not track you. The App does not use the Apple Advertising Identifier (IDFA) or the Google Advertising ID, and it does not ask for App Tracking Transparency permission.
We do not use your data to train artificial intelligence models.
We do not collect your precise or approximate location. The App only reads location details already stored in a photo or video when you ask it to show or remove them.

6. Permissions the App asks for

The App asks for a permission only when you use the feature that needs it. You can refuse, and you can change your choice later in your device settings. Refusing a permission only switches off the feature that needs it.

Camera: to scan documents and ID cards, read text and read QR codes and barcodes.
Microphone (optional): to record voice-overs for your videos. On Android it is also needed for automatic captions, because Android's speech recogniser asks for it, although the App gives it only the sound of your video and does not listen to the microphone.
Speech recognition (optional, iPhone and iPad): to make automatic captions from the speech in your videos, on your device (section 3).
Photo library, read access (optional): for the gallery tools described in section 3. On recent Android and iOS versions you can give access to selected photos only. Picking photos to import or edit uses the system photo picker and does not need this permission.
Photo library, add only (iPhone and iPad) or storage access on older Android versions: to save the images and videos you export to your photo library.
Notifications (optional): to tell you when a long task, such as converting a video, has finished while the App is in the background. These are local notifications created on your device; no push notification service is used.
Network access: for subscriptions (section 4.1), optional model downloads (section 4.2) and optional sign-in (section 4.8) and optional cloud backup (section 4.9).
Background work: on Android, a foreground service with a visible notification lets a task you started finish while the App is not on screen; on iPhone and iPad the App asks the system for a short time to finish it.
Wi-Fi configuration (iPhone and iPad): to join a Wi-Fi network from a QR code, only after you tap "Join network" and the system asks you to confirm.

7. Legal bases for processing (EEA, UK, Switzerland and Türkiye)

Where data protection laws such as the EU and UK General Data Protection Regulation (GDPR) or the Turkish Personal Data Protection Law No. 6698 (KVKK) apply, we rely on the following legal bases:

Performance of a contract: to provide the App and, if you subscribe, iEdit Premium, including verifying and restoring purchases (section 4.1), downloading a model you asked for (section 4.2) and, if you choose to sign in, linking your subscription to your Apple or Google account (section 4.8), and backing up and restoring your files if you turn cloud backup on (section 4.9).
Legitimate interests: to answer your support requests (section 4.4), to keep the App secure, prevent fraud and misuse of subscriptions, and to understand and fix crashes (section 4.6). We have balanced these interests against your rights, and the data involved is limited and not used to identify you.
Consent: for device permissions such as the camera, microphone, speech recognition, photo library and notifications, which you can withdraw at any time in your device settings.
Legal obligations: where we must keep or disclose information to comply with the law.

8. How long information is kept

Information on your device (section 3) is kept until you delete it or delete the App.
Subscription information processed by RevenueCat (section 4.1) is kept for as long as it is needed to provide your subscription, to handle refunds and disputes and to meet legal, tax and accounting obligations, after which it is deleted or anonymised. You can ask us to delete it sooner (section 10).
Support e-mails (section 4.4) are kept as described in that section.
Sign-in (section 4.8): our sign-in service stores nothing about you, and Cloudflare's technical logs of requests are kept for a few days. The sign-in information on your device is kept until you sign out, delete your account or delete the App.
Cloud backup (section 4.9): the copy stays in your iCloud or Google Drive until you delete it; files you delete on your device are removed from it after 30 days.
Downloaded text-recognition models stay on your device until you remove them in the App or delete the App.

9. Security

Your files stay inside the App's private storage on your device, protected by your device's own security (such as its passcode, biometric lock and storage encryption). Network connections made by the App, such as those to the stores, to RevenueCat, to our sign-in service, to the model server and to iCloud and Google Drive, use encrypted HTTPS connections. The secret key that turns your Apple or Google account identifier into your iEdit user ID never leaves our sign-in service. PDF passwords you set are applied on your device with AES-256 encryption; please keep them safe, because neither we nor anyone else can recover them. No method of storage or transmission is completely secure, but we work to protect the limited information we handle.

10. Your rights and choices

Depending on where you live, you may have the right to ask us for access to the personal data we hold about you, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with a data protection authority, for example the authority of the country where you live or work (in Türkiye, the Personal Data Protection Authority, KVKK Kurumu).

Because the App keeps your content on your device and signing in is optional, most of your data is already under your control: you can view, export and delete it in the App, and deleting the App removes everything it stored on your device (except copies you made elsewhere or that are in your device backups).

If you signed in, you can sign out or delete your account in Profile at any time (section 4.8). You can turn cloud backup off or delete the backup in Profile › Cloud backup (section 4.9). To exercise your rights regarding subscription data held by RevenueCat or e-mails you sent us, write to support@favantis.com. Because we do not know who you are, please include information that lets us find your records, such as the App Store order ID or Google Play order number of your purchase (shown in the receipt e-mail from Apple or Google). We may ask for information to confirm your request. We will answer within the time the law requires (normally within 30 days). Deleting your subscription data does not cancel a subscription: please cancel it in your App Store or Google Play account settings first.

10.1 Users in Türkiye (KVKK)

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used for that purpose, to know the third parties to whom it is transferred in Türkiye or abroad, to request correction of incomplete or inaccurate data, to request deletion or destruction under Article 7, to request that third parties be notified of such corrections or deletions, to object to a result against you arising exclusively from automated analysis, and to claim compensation for damage caused by unlawful processing. You can send your requests to support@favantis.com. Personal data described in sections 4.1 and 4.8 is transferred abroad (to the United States and other countries) to RevenueCat and Cloudflare, our service providers, as necessary to provide the subscription and the sign-in you request, in line with Article 9 of the KVKK.

10.2 Users in California and other US states

Residents of California and of other US states with comprehensive privacy laws have the right to know what personal information we collect, use and disclose, to request access to and deletion and correction of it, and not to be discriminated against for exercising these rights. In the last 12 months we have collected only the categories described in section 4: identifiers (the app user ID; if you sign in, the account identifier and e-mail address in the Apple or Google sign-in token, which our sign-in service checks but does not store; and, if you e-mail us, your e-mail address), commercial information (your purchase history of iEdit Premium) and internet or network activity limited to technical details (device and app information, IP address). We collect them for the business purposes described in this policy and disclose them only to our service providers (RevenueCat and, for sign-in and model downloads, Cloudflare) and the stores. We do not sell personal information and do not share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information. To make a request, write to support@favantis.com; you may use an authorised agent.

10.3 Users in Brazil and other countries

If you live in Brazil, you have the rights provided by the Lei Geral de Proteção de Dados (LGPD), including confirmation of processing, access, correction, anonymisation, blocking or deletion, portability, information about sharing and the withdrawal of consent. Users in other countries have the rights given by their local laws. You can exercise any of them by writing to support@favantis.com.

11. International transfers

Favantis is based in Türkiye. Our service provider RevenueCat processes subscription data in the United States, and Apple, Google and Cloudflare may process data in the United States and other countries. Where personal data from the EEA, the UK, Switzerland or Türkiye is transferred to countries that do not provide an equivalent level of protection, the transfer relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses included in our service providers' data processing terms, or on another lawful basis available under the applicable law.

12. Children

The App is a general productivity tool and is not directed to children under the age of 13 (or the minimum age required in your country, such as 16 in some EEA countries). We do not knowingly collect personal data from children. Because the App processes content on the device and signing in is optional and uses an existing Apple or Google account, it does not ask anyone for their age. If you believe that a child has sent us personal data, for example by e-mail, please contact us and we will delete it. Subscriptions can only be bought through an App Store or Google Play account, under the parental controls and family settings that Apple and Google provide.

13. Future features

If we introduce optional features such as cloud sync or push notifications, we will update this policy before they become available and explain in the App what information they use, and where the law requires it we will ask for your consent first.

14. Changes to this policy

We may update this policy from time to time, for example when we add features or when the law changes. We will change the "Last updated" date at the top and, if the changes are significant, tell you in the App or on the App's store page before they take effect. The current version is always available in the App under Profile › Legal and at https://ieditscanner.com/privacy.

15. Contact us

If you have any questions about this policy or about your personal data, or if you want to exercise your rights, please contact:

Favantis, developer of iEdit
E-mail: support@favantis.com
Website: https://ieditscanner.com

We aim to answer every message within 30 days.