Free download Get
Legal

Privacy Notice
Scanner Pro

Last updated: November 24, 2023

Key Changes to the Terms of Service and Privacy Notice for Scanner Pro

At Readdle, we care about our users, and therefore, we have improved our Privacy Notice governing your use of the Scanner Pro app.

In a nutshell, we:

  • revised the structure of the Privacy Notice;
  • updated the retention periods of the personal data processed;
  • detailed the data subject rights and the mechanism of its exercise;
  • detailed the security measures we implement;
  • detailed the information about our processors;
  • added data subject rights belonging to the UK and Canada residents;

We encourage you to carefully review the full text of the Privacy Notice for Scanner Pro. The abovementioned updates became effective as of November 24, 2023.

If you continue using Scanner Pro, you automatically agree to the updated version of the document.

If you do not agree to the updated documents, you must cancel your subscription, delete the App, and neither access nor use the Scanner Pro.

Intro

Readdle Limited (“Readdle” or “we”) welcomes you. We provide you with our application “Scanner Pro” (“App” or “Scanner Pro”) available on iOS and iPadOS, subject to the terms and conditions of our Terms of Service.

This Privacy Notice describes which of your personal data the App collects, how stores, processes, and uses it, and what happens when you use the App.

When you use our website by following the link (“Website”), your personal data is processed in accordance with the Privacy Notice for Readdle Website. 

We understand you care about your privacy, and we appreciate the trust you place in us. To justify that trust, we embed the latest data security standards, improve our awareness of privacy matters, and comply with the General Data Protection Regulation and other privacy laws.

If you have any questions or comments about this Privacy Notice, visit our Support page for more information about the App or contact us.

Table of Contents

About Us

We are the controller of your personal data processed through Scanner Pro. This means that we determine the purposes and means of personal data processing.

Name Readdle Limited
Company Number 630281
VAT IE 3560869EH
Address Glandore Business Centre, Grand Canal House, 1 Grand Canal Street Upper, Dublin 4, D04 Y7R5, Ireland
Email rdsupport@readdle.com – for general inquiries
dpo@readdle.com – for privacy inquiries

Our support team is happy to assist you in any matter. We kindly ask you to be polite and calm in your communication with us. Otherwise, we may not respond to offensive emails/messages.

About You

When you download Scanner Pro, you become our user (“User”).

We divide the Users into categories so you can easily find details about the processing of your personal data. Pay attention that you can fall into several categories depending on your actions.

Data Subject Description
Free User User who uses the App for free
Paying User User who subscribed to our Plus subscription
Expense Report Subscriber User who subscribed for Expense Report functionality
Support Requestor User who contacts customer support via the App
Feedback Provider User who provides feedback about the App to us directly or via the third-party platform
Please note! We do not knowingly process the personal data of Users under the age of 16. If you are such a User or you are a legal representative of such a User, please, contact us.

Personal Data

Sources of Data

We receive data when you download the App and interact with it, depending on your actions in the App and your device. Please read carefully the details below.

You can change your personal data in the App by exercising your right to rectification or by the App functionality. Please note that the same lawful bases and storage terms apply to the changed data.

We may also, although we do not necessarily do so, receive data from third parties. It depends on your settings and the features you use.

Lawful Basis for Processing

To process your personal data, we rely on the following lawful bases:

  • performance of the contract — for the processing of personal data necessary for the negotiating on, conclusion, and performance of a contract (mainly, Terms of Service) with you;
  • legal obligation — for the processing as required by applicable laws (for example, to comply with tax or KYC/AML regulations) or if requested by a law enforcement agency, court, supervisory authority, or another state-authorized public body;
  • legitimate interest — for the processing necessary for the development of our services, taking into consideration your interests, rights, and expectations;
  • consent — for additional processing for specific purposes.

Technical Data

We collect identifiers, technical information, usage, and diagnostics data about the Users to optimize performance, debug issues, and enhance features while ensuring security and privacy to improve the overall user experience.

Most of the technical data we collect are anonymous, but some data is associated with your IP address and device ID. Please read about personal technical data below.

Data Reasons for Processing Lawful Basis
IP address:
  • process;
  • code type;
  • report version;
  • accounts cache;
  • locale.
 The smooth operation of the App and improvement of the App. Performance of the contract.
Incident Identifier:
  • path;
  • parent process;
  • exception type
  • onetimecodes.
CrashReporter key:
  • timezone;
  • date / time
  • exception codes;
  • device UUID
Hardware model:
  • version;
  • iOS version;
  • crashed thread;
  • device name.
Data Storage
We store the data for 3 years from its collection.

Account Data

Account data refers to all Users. We collect this data to track and analyze transactions, provide personalized experiences, maintain transaction history, and improve user engagement.

Data Description Reasons for Processing Lawful basis
Receipt ID. Purchase_date_ms value from AppStore receipt data. To identify, create and maintain the profile of the User. Performance of the contract.
Transaction ID. Original_transaction_id value from first subscription inApp in AppStore receipt data.
Receipt Cache. Cached response per receipts for client application.
Service Identifier. Id provided by service or user email.
User Identifier. Email of the user.
Event Data. All data from server-to-server notification.
Event Type. Type of the event received from Apple server or external subscription provider service.
Data Storage
We store the data during your use of the App and for 6 years after the termination of the agreement between Readdle and you

Free Users' Data

Before using the App’s features, we may ask you for some information about yourself to help us choose how to improve the App.

Data Reasons for Processing Lawful Basis
Field of activity Improvement of the App Legitimate interest
Files preferences
Necessary functions
Data Storage
We store the data until you delete your account

We may ask you for your email to send you some useful information according to your answers.

Data Reasons for Processing Lawful Basis
Email To send you tops about the usage of the App Consent
Email To inform you about major Company's events and special offers. Legitimate interest
Data Storage
We store the data until you withdraw your consent
We store the data during the performance of the contract or until you object the processing

While using a scanning feature, we can request access to your camera or photos in order to scan the document.

You may upload, create or edit different kinds of documents or content.

Data Reasons for Processing Lawful Basis
Documents and their content Providing you with the functionality of the App Performance of the contract
Fax number Providing you with the fax feature of the App Performance of the contract
Data Storage
We do not store your documents

We provide you with the possibility to link accounts from third-party services (Apple or Google) for integration and synchronization of data.

Data Reasons for Processing Lawful Basis
Files on the cloud of the third-party service Providing you with the functionality of the App Performance of the contract
Data Storage
We do not store your files

Paying Users' Data

If you are a Paying User, we collect the same data as the Free Users’ Data and some additional data to process your payments.

We charge you for subscriptions and paid features through the App Store.

We keep the history of payments, as this is a legal requirement, and we cannot delete this information until the filing of the annual accounts expires.

Data Reasons for Processing Lawful Basis
Email To provide payment for the subscription Performance of the contract
Payment details
Data storage
We store the data during your use of the App and 6 years after the termination of the agreement between Readdle and you

Expense Report Subscribers' Data

If you are an Expense Report Subscriber, we collect the same data as the Paying User and some additional data to provide you with some features.

Data Reasons for Processing Legal Basis
Receipts and their content Providing you with the functionality of the App Performance of the contract
Data storage
We do not store your receipts

Support Requestor's Data

When you address your request to support in the App, we collect some information to help you.

We may collect your detailed log files to help you with your problem. These log files may contain sensitive personal information and are connected to you

Data Reasons for Processing Lawful Basis
Email. To fulfill your support request. Performance of the contract.
Name
Type of device
Text of the request
Attached files
Logs
Privacy requests
If you contact us through our DPO mailbox, we will process your request with the help of Spark Mail.
Data Storage
We store the data during your use of the App and 3 years after the termination of the agreement between Readdle and you

Feedback Providers' Data

When you submit your feedback about the App to us directly or via third-party platforms, we process personal data in your feedback, which may include data listed below

Feedback Provided to us Directly
Data Reasons for Processing Lawful Basis
Email. To respond to your feedback and ask for your consent. Consent.
First and last name or username. To use your feedback in our marketing activities.
Text of the feedback. To use your feedback in our marketing activities.
Date of the feedback. To use your feedback in our marketing activities.
Assigned rating To use your feedback in our marketing activities.
Data Storage
We store the data for 6 years from feedback or the last communication on feedback
Feedback Provided via a Third-party Platform
Data Reasons for Processing Lawful Basis
First and last name or username. To use your feedback in our marketing activities. Legitimate interest
Text of the feedback. To use your feedback in our marketing activities.
Any other information contained in or related to your feedback such as the date of the feedback, rating you assigned etc. To use your feedback in our marketing activities.
Data Storage
We store the data for 2 years from feedback or the last communication on feedback

Data Received from Third Parties

We may receive some personal data from third parties.

The amount of data collected, the purposes, and the legal basis for processing is determined by the respective privacy documents of these parties.

Third Parties Privacy Document
Dropbox Privacy Policy
Google Drive Privacy Policy
OneDrive Privacy
Box Privacy Notice
OneNote Privacy Statement
Evernote Privacy Policy
WebDAV Privacy Policy
Veryfi Privacy Policy

Data Sharing with Third Parties

We can share your personal data with third parties without any harm to you and in full compliance with applicable law. In addition, we have implemented organizational and technical measures to ensure the security of personal data during data transfer to third parties.

To share your data, we rely on the following lawful bases, depending on the case: consent, compliance with the law, and performance of a contract.

Third Party Description
Analytics tools We use analytics tools to understand and promote our business.
Messengers We use messengers to communicate with you in ways that are convenient for you.
Contractors We cooperate with contractors to operate, develop, and improve the features and functionality of the App, fulfill your support requests, etc.

We sign data processing agreements with them and impose various security measures to ensure your data is safe.
Services Scanner Pro uses We use third-party services to provide you with the functionality of the App.
Services our team uses We use CRM systems, messengers, and other services in our organization to provide you with our services.
To manage and fulfill privacy requests we use:
  • Spark for processing requests and communication with the user;
  • Jira for internal tracking and timely involvement of responsible ones in scope of request.
State authorities, courts, law enforcement agencies, etc. We may be obliged to transfer some of your data to tax authorities, courts, law enforcement agencies, and other governmental bodies:
  • to comply with a government request, court order, or applicable law;
  • to prevent unlawful use of the App;
  • to protect against claims of third parties;
  • to help prevent or investigate fraud.
To get a detailed list of the third-party recipients of your personal data, contact us

Data Sharing Outside the European Economic Area

The personal data we collect is stored on the US servers, which participate in the Data Privacy Framework and European Economic Area (“EEA”) servers, which fall under the General Data Protection Regulation.

We may share personal data with the recipients in the USA and other countries, including non-EEA ones, ensuring that your data is protected and processed in accordance with the General Data Protection Regulation. For example, we share some data with our contractors in Ukraine.

To share the data outside the EEA, we rely on the adequacy decision by the European Commission or the Data Privacy Framework participation of the recipient.

If the recipient does not participate in the Data Privacy Framework and its country is not deemed to provide an adequate level of protection for your personal data, we adopt Standard Contractual Clauses based on legislation assessments for data protection during transfer and storage.

You can read more detailed measures to protect your personal data here.

Security Measures

We systematically perform Data Protection Impact Assessments to ensure that we use an appropriate level of technical and organizational measures to prevent accidental or unlawful destruction, loss, alteration, and unauthorized disclosure of or access to personal data transmitted, stored, or otherwise processed.

To be more specific, to protect your personal data, we use HTTPS and encryption, divided group and individual access (where appropriate), an alarm system, corporate VPN, and written approved internal policies (like password policy and physical access policy).

Moreover, we systematically monitor our technologies’ state of the art and never forget about the backups. All our contractors are under contractual obligations compliant with the GDPR requirements.

You can contact us in case of any questions regarding security issues.

Here you can find information about the specific steps we mentioned above:

Physical Measures
Limited Access to Premises
Organizational Measures
Policies and Instructions
  1. Password policy
  2. Monitoring and physical access policy
  3. Contractual obligations and corporate VPN
  4. Internal security policy
  5. Access control policy
 Transfer Protection
  1. Data Transfer Agreements
  2. Standard Contractual Clauses
  3. Data Privacy Framework
Contractor and Staff Training Agreements
  1. Non-disclosure Agreements
  2. Data Processing Agreements
Regular Access and Policy Review Privacy Protection:
  1. Privacy by design and by default.
  2. Internal procedures for GDPR compliance
Code Review
Technical Measures
Encryption technologies:
  • Encryption in transit
  • Backup encryption
  • State-of-the-art methods of cryptographic keys
 Backup
  • Regular backup of the entire system
  • Redundant operation of the critical services in multiple data centers controlled by a high-availability system
Two-factor Authentication Stress-tests
Static Analysis Quality Assurance
Regular Patch Management Dependency and Supply Chain Vulnerability Check

Data Subjects Rights

You, as a data subject, have the right to interact with your data directly or through a request to us. This section describes these rights and how you can exercise them depending on your residency.

European Economic Area and United Kingdom Residents

Right Description
Right to access You can request an explanation of the processing of your personal data.
Right to rectification You can change the data if it is inaccurate or incomplete.
Right to erasure You can send us a request to delete your personal data from our systems. We will remove them unless otherwise provided by law.
Right to restrict the processing You may partially or completely prohibit us from processing your personal data.
Right to data portability You can request all the data you provided to us and request to transfer data to another controller.
Right to object You may object to the processing of your personal data.
Right to withdraw consent You can withdraw your consent at any time.
Right to file a complaint If your request was not satisfied, you could file a complaint to the regulatory body.
To exercise your rights, contact us. If your request was not satisfied, you can submit a complaint to your local Data Protection Authority. You may find it here.

UK residents enjoy the same rights but may lodge a complaint at the other Authority in the UK – Information Commissioner’s Office.
You can contact them at 0303 123 1113 or go online at www.ico.org.uk/concerns.

United States Residents

Your rights vary depending on the state of your residency, as indicated below.

Right Description Area
Right to access You can request an explanation of the processing of your personal data. California
Colorado
Connecticut
Indiana
Iowa 		Montana
Tennessee
Texas
Utah
Virginia
Right to correct You can change the data if it is inaccurate or incomplete. California
Colorado
Connecticut
Indiana 		Montana
Tennessee
Texas
Virginia
Right to delete You can send us a request to delete your personal data from our systems. California
Colorado
Connecticut
Indiana
Iowa 		Montana
Tennessee
Texas
Utah
Virginia
Right to portability You can request all the data you provided to us and request to transfer data to another controller. California
Colorado
Connecticut
Indiana
Iowa 		Montana
Tennessee
Texas
Utah
Virginia
Right to opt out of sales The right to opt out of the sale of personal data to third parties. California
Colorado
Connecticut
Indiana
Iowa 		Montana
Tennessee
Texas
Utah
Virginia
Right to opt out of certain purposes The right to opt out of processing for profiling/targeted advertising purposes. Colorado
Connecticut
Indiana
Montana 		Tennessee
Texas
Utah
Virginia
Right to opt out of the processing of sensitive data The right to opt out of the processing of sensitive data California  
Right to opt in for sensitive data processing The right to opt in before the processing of sensitive data. Colorado
Connecticut
Indiana
Montana 		Tennessee
Texas
Virginia
Right against automated decision-making A prohibition against a business making decisions about a consumer based solely on an automated process without human input. California
Colorado
Connecticut
Indiana
Iowa 		Montana
Tennessee
Texas
Virginia
Private right of action The right to seek civil damages from a controller for violations of a statute. California  
To exercise your rights, contact us
We will answer your request within 30 to 60 days, depending on the state and legislative requirements. If your complaint is not satisfied, you can submit a complaint with the Federal Trade Commission.
Please note! Some states do not have their own privacy laws. The rights of residents of such states are governed by U.S. federal law. If your state is not on the list, please contact us.

Do Not Sell My Personal Information

California residents have the right under the California Consumer Privacy Act (“CCPA”) to opt out of the “sale” of their personal information by a company governed by the CCPA.

Readdle does not sell your personal information to anyone nor use your data as a business model.

However, we support the CCPA by allowing California residents to opt out of any future sale of their personal information. If you would like to record your preference that we will not sell your data in the future, please contact us at dpo@readdle.com.

Do-Not-Track Requests

California residents visiting the App may request that we do not automatically gather and track information about their online browsing movements across the Internet.

Such requests are typically made through web browser settings that control signals or other mechanisms that allow consumers to exercise choice regarding collecting personal data about an individual consumer’s online activities over time and across third-party websites or online services.

We currently do not have the ability to honor these requests. We may modify this Privacy Notice as our abilities change.

Canada Residents

Right Description
Right to access You can request an explanation of the processing of your personal data.
Right to rectification You can change the data if it is inaccurate or incomplete.
Right to delete You can send us a request to delete your personal data from our systems. We will remove all data except of what we are obliged to store in compliance with the law requirements.
Right to data portability You can request all the data you provided to us and request to transfer data to another controller.
Right to object opt-out You may object to the processing of your personal data.
Right to withdraw consent You can withdraw your consent at any time.
Right not to be subject to automated decision-making You can object to being subject to automated-based processing to know if there are consequences concerning them due to such processing.
Right to lodge a complaint If your request is not satisfied, you could file a complaint to the regulatory body.
To exercise your rights, contact us.
We will answer your request within 30 days. If your complaint is not satisfied, you can submit a complaint to the Office of the Privacy Commissioner of Canada.

Privacy Notice Updates

The Privacy Notice and the relationships falling under its effect are regulated by the General Data Protection Regulation. Existing laws and requirements for processing personal data are subject to change. Should this be the case, we will publish a new version of the Privacy Notice addressing such changes in our App.

If we make substantial changes to the Privacy Notice or the App that affect your data privacy rights, we will notify you by email or display information in the App and ask you to read it. We will notify you in advance, and if you continue using the App after the changes come into effect, it shall be deemed that you have agreed to and accepted the updated Privacy Notice.

Company

Products

How to

Legal

Copyright © 2007 - 2024 Readdle Limited.
Apple, the Apple logos, MacBook, iPad, iPhone, Apple Watch, and Apple Vision Pro are trademarks of Apple Inc., registered in the U.S. and other countries. App Store and Mac App Store is a service mark of Apple Inc., registered in the U.S. and other countries.
Terms of Service
Privacy Notice