Privacy Policy
Effective 13 November 2026
- Your scans never leave your device. We can't see them.
- No account, no ads, no analytics, no tracking.
- The only data that leaves your device is what's needed to run your subscription, handled by Apple and RevenueCat.
Who we are
GatoScan is published by its independent developer, based in Portugal ("we", "us"). We are the data controller for the limited personal data described below. Contact: support@gatoscan.com.
Your documents
You create documents by scanning with the camera or importing images from Photos or Files. All processing happens on your device using Apple's built-in frameworks: edge detection, perspective correction, filters, text recognition and PDF creation.
Your pages, PDFs, document titles and recognized text are stored in GatoScan's private storage on your device, protected by iOS data protection. They are never uploaded to us or to anyone else, and we have no way to access them.
If you back up your device (with iCloud Backup or to a computer), iOS may include GatoScan's data in that backup, under your Apple account and settings. We have no access to your backups.
Sharing and exporting
When you email, share, save to Files, AirDrop or print a document, iOS hands the file to the app or service you choose (for example, your mail account). The file goes from your device directly to that destination, under that service's terms. It never passes through us.
Camera and photos
GatoScan uses the camera only while you scan. When you import from Photos, the app receives only the photos you select. You can change camera access at any time in iOS Settings.
Subscriptions and purchases
Payments are handled by Apple. We never see your name, Apple account or payment details.
To manage subscriptions, GatoScan uses RevenueCat, Inc. (United States), which acts as our processor. When the app checks or updates your subscription, RevenueCat receives:
- an anonymous ID created by the app (not linked to your name or email);
- purchase information from Apple: products, purchase and renewal dates, trial status, price, currency and App Store country;
- technical data sent with each request: IP address, device model, iOS version, app version and language.
We use this to unlock GatoScan Pro, restore purchases, prevent fraud and understand subscription numbers in aggregate. The legal bases are the performance of our contract with you (GDPR Art. 6(1)(b)) and our legitimate interest in preventing fraud and running the business (Art. 6(1)(f)). RevenueCat processes data in the United States, protected by safeguards such as the European Commission's Standard Contractual Clauses. See RevenueCat's privacy policy.
Notifications
If you start a free trial, GatoScan asks whether it may remind you before the trial ends. The reminder is a local notification scheduled on your device. We don't use push notification servers.
Contacting support
If you email us, we receive your email address and your message. We use them only to answer you, and delete the conversation within 12 months after it ends, unless we need to keep it longer to meet a legal obligation. Legal basis: our legitimate interest in answering your request (Art. 6(1)(f)).
What we don't do
- No accounts or sign-in.
- No advertising, analytics or crash-reporting SDKs.
- No tracking across apps or websites, and no selling or sharing of personal data.
How long data is kept
Your documents stay on your device until you delete them or delete the app. Subscription records at RevenueCat are kept for as long as needed to provide your subscription and to meet tax and accounting obligations.
Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. Email support@gatoscan.com to use them. Because we hold no name or email for app users, we may ask for details (such as the date of a purchase) to find your records.
You can also complain to the Portuguese data protection authority, the CNPD, or to the authority in your own country.
Children
GatoScan is not directed at children under 16, and we don't knowingly collect personal data from them.
Changes to this policy
If we change this policy, we'll publish the new version here with a new effective date. If a change is significant, we'll also tell you in the app.