Privacy Policy

Last updated: 2026-09-08

This policy describes the public SeliaScan Android app and this SeliaScan website. Contact the maintainer at majkeylab@gmail.com with privacy questions. Do not email private documents or credentials.

Matěj Teplý, publishing as Majkey, maintains SeliaScan and is responsible for support correspondence received at that address.

Information the app handles locally

SeliaScan handles pages you scan or import, the generated PDF, local saving preferences, language choice, selected folder access, and email subject or message defaults. This information is used only to provide the requested scanning, saving, sharing, printing, and local cleanup functions.

Temporary working copies

Pages and PDFs are copied to SeliaScan's app-private cache. The cache is bounded to at most eight scan directories and supplies the Result and Recent scans screens. Android may clear it. Removing an item from Recent removes that temporary working copy. When SeliaScan can verify an exact saved output that it created, the confirmation dialog can also delete the selected PDF, Gallery images, or both.

Durable saved files

According to your settings and actions, SeliaScan can save images to Gallery or a folder selected through Android's folder picker and PDFs to Downloads or a selected folder. They remain until you delete them through Recent scans, Gallery, Files, or the selected-folder provider. Selecting a sharing app never deletes the saved copy. Uninstalling SeliaScan does not remove saved files outside app-private storage.

Settings, backup, and deletion

A cloud-backed folder provider, or a Gallery or backup service you configured, may upload saved files under its own privacy terms. Disabling SeliaScan's Android backup does not disable those services or delete their external copies. Manage and delete those copies with the selected provider.

Settings are stored locally in app-private storage. Android backup and device-to-device transfer are disabled for SeliaScan app data. Uninstalling the app removes its private settings and cache. It does not remove files saved outside the app-private area.

Reusable signatures and stamps

Signature and stamp templates you save or import are stored separately from Recent scans in app-private storage excluded from Android backup. They remain until you use Delete selected in the signature/stamp editor, clear app data or uninstall. Removing a Recent scan does not remove these templates. Deleting a template does not erase marks already applied to saved or shared documents.

Google ML Kit Document Scanner

The scanner UI, models, and related resources are supplied through Google Play services. Google says document-scanner input and output are processed on-device and are not sent to Google servers. Google Play services may contact Google to download or update the scanner module, models, bug fixes, or compatibility information.

Optional text extraction and QR/barcode detection use ML Kit recognition models delivered by Google Play services and run on-device. A model may download before first use. SeliaScan does not upload document content or detected results to a maintainer-operated service. Extracted text is written only to a document destination you select, and copied recognition results are placed on Android's clipboard with the sensitive-content flag. Google states that ML Kit collects device and app information, device or installation identifiers, performance metrics, API configuration, input/output size, feature version, event types, and error codes for diagnostics and usage analytics. Google states that this telemetry is encrypted in transit using HTTPS and is not transferred to third parties. SeliaScan cannot disable or delete telemetry processed by Google Play services.

See Google's current ML Kit Terms and Privacy information, Android data disclosure, and Privacy Policy.

Local document cleanup

Smart cleanup and Manual cleanup process document pixels on-device. Manual cleanup reads only a bounded area around each user-drawn loop and creates a reversible child revision; the parent remains in the bounded Recent cache. SeliaScan does not send cleanup input or output to a cloud AI service.

Sharing and printing

SeliaScan sends a selected PDF or image to another app or print service only after you tap a share or print action and choose a recipient. That recipient processes the file under its own privacy terms. Review the destination before sending sensitive material.

Read all pages

Text extraction runs locally. Playback passes the selected document text to your Android text-to-speech engine after you tap Play and confirm the disclosure. That engine or voice may process text online under its own settings and privacy terms. SeliaScan cannot guarantee offline processing by a third-party speech engine. Do not confirm playback of sensitive text unless you trust the selected engine.

Google Play edition

The separately maintained Google Play edition uses the com.majkeylab.scanit package and includes Google Mobile Ads, Google User Messaging Platform, and Google Play Billing. These SDKs are not present in the stable GitHub edition. SeliaScan requests consent where required before initializing or loading ads and provides a Privacy options control in App info when Google requires it.

Google states that its current Mobile Ads SDK automatically collects and shares IP address, product interactions such as app launches, taps, and video views, diagnostic information such as launch time, hangs, and energy use, and device or account identifiers including Android advertising ID and app set ID. Google uses this information for advertising, analytics, and fraud prevention and encrypts it in transit using TLS. See Google's GMA Next-Gen data disclosure and Privacy Policy.

SeliaScan does not pass scanned pages, OCR text, generated PDFs, saved images, email defaults, or selected recipients to the advertising SDK. When ads are enabled, advertising may initialize or load on eligible screens, including Result and Recent scans, after the applicable consent checks. Scanning, cleanup, OCR, saving, and sharing continue to process document content locally.

Premium purchases

Google Play Billing returns the monthly subscription or lifetime Premium product identifier, purchase state, acknowledgement state, and purchase token needed to buy or restore Premium for the current Google Play account. SeliaScan does not receive payment-card details, does not log purchase tokens, and does not persist a local Premium entitlement. Either confirmed product unlocks Document Actions and removes ads. The monthly subscription renews until canceled in Google Play. A pending purchase grants nothing until Google Play confirms it.

Information SeliaScan does not request

The stable GitHub edition has no account system, advertising SDK, billing SDK, first-party analytics, app-owned Internet access, contact access, location access, or notification access. The Google Play edition adds Internet access plus Google advertising, consent, and Play Billing components. Neither edition requests its own camera permission because the scanner uses the Google Play services camera flow, and neither requests broad legacy storage access.

Support email and GitHub issues

Private support email is used to answer and investigate your request. The retention rule is deletion within 90 days after the case closes. A case closes when resolved, or after 90 days waiting for the requester's reply. Records needed for an actual unresolved refund, dispute or legal preservation duty are retained until that matter is resolved or the applicable statutory period ends; unrelated correspondence follows the 90-day rule. You can request earlier deletion where applicable rights allow it.

Public GitHub issues are visible to everyone and form the project's technical issue history. GitHub hosts them under its own privacy terms. Do not post private documents, credentials or payment information. Contact the maintainer to request removal of personal information from content the maintainer controls.

A support request is not consent to marketing. Support handling relies on responding to your request and legitimate interests in maintaining the app; purchase-related support and required records may also involve contractual or legal obligations. This site has no contact form or mailing list.

Your data rights

Where GDPR applies, you can request access, correction, deletion, restriction or portability, and object to processing where the conditions for those rights apply. Contact support for information handled by the maintainer. You can withdraw advertising consent through the app's privacy options when available. Google's and GitHub's linked notices explain their processing, international transfers and safeguards.

You can complain to your local supervisory authority. In Czechia this is the Office for Personal Data Protection. No maintainer-operated profiling or automated decision system processes your documents.

This website

The SeliaScan site contains no maintainer-added analytics, JavaScript, forms, advertising, tracking pixels, web fonts, or cookies. It loads its stylesheet and QR image from the same site.

See the cookie policy for hosting and the separate Android advertising controls.

The site is hosted by GitHub Pages. GitHub states that it logs and stores visitors' IP addresses for security and may process other service data under the GitHub General Privacy Statement. SeliaScan adds no code that exposes those hosting logs to the maintainer.

External links, including GitHub, email, and Buy Me a Coffee, are opened only when you select them. Those services apply their own privacy terms. The Android app does not receive payment-card details from Buy Me a Coffee and a contribution does not unlock features. The maintainer may receive supporter information provided by that service; the support-handling section above applies to information received directly by the maintainer.

Children

SeliaScan is intended for an adult document workflow and is not directed to children under 18. It has no account or social features.

Changes and contact

This policy will be updated before the public app materially changes its data handling. The effective date above identifies the current version. Questions or deletion requests about information sent directly to the maintainer can be emailed to majkeylab@gmail.com.