Privacy Policy

Last updated: 1 October 2026

This policy explains how the Scanlane app for iPhone and iPad ("Scanlane" or "the app") and the website scanlane.app handle personal data.

In short

• Scanlane processes your documents on your device. Scanning, text recognition (OCR), PDF creation and the AI features run locally on your iPhone or iPad.
• We never receive your documents, photos, recognised text or signatures.
• There is no account, no advertising, no analytics, no tracking and no third-party SDK in the app.
• Data leaves your device only when you choose it: when you use iCloud Drive (run by Apple), when you buy a subscription (handled by Apple), when you let iOS share crash reports with app developers (handled by Apple), or when you email us.
• Scanlane's privacy label in the App Store is "Data Not Collected".

1. Who is responsible

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

Neltacore, LLC
1908 Thomes Avenue
Cheyenne, WY 82001
USA
Email: support@scanlane.app

Neltacore, LLC is a company based in the USA (Wyoming). Because we offer Scanlane to people in the EU, the GDPR applies to how we process your personal data. You can contact us directly with any data protection question, in English or German.

You can find more details in our legal notice: scanlane.app/impressum

2. The app: your documents stay on your device

Scanlane does its work on your device. We do not run any servers for the app, and we have no access to what you create with it. This covers:

• Camera: Scanlane uses the camera only while the scanner is open, to find the edges of a document and capture it.
• Photos and Files: when you import, you pick items in Apple's own picker. Scanlane only receives the items you select and does not need access to your whole photo library.
• Text recognition, searchable PDFs and Office export: these run on your device, using Apple's Vision and PDFKit frameworks and Scanlane's own code.
• AI features (for example summaries or questions about a document): these use Apple's on-device language model (Apple Foundation Models). Your documents are not sent to us or to any AI provider. The features are only available on devices that support Apple Intelligence.
• Translation: this uses Apple's on-device Translation framework. iOS may download language packs from Apple; the text you translate stays on your device.
• Search: the search index is stored on your device. If you allow it, iOS can show your documents in Spotlight search on the same device.
• App lock with Face ID or Touch ID: iOS checks your face or fingerprint. Scanlane only learns whether the check succeeded and never receives biometric data.
• Reminders: notifications, for example before your free trial ends, are scheduled on your device. There is no push server.
• Signatures, settings and document details are stored in the app's storage on your device.
• Photo metadata: when you export or share images, Scanlane removes camera metadata such as location by default.

You can change camera, photo and notification access at any time in the iOS Settings app under Scanlane. You can delete your data at any time by deleting documents in the app or by deleting the app.

3. iCloud Drive (optional)

If you turn on iCloud storage in Scanlane, your documents are saved as regular files in the Scanlane folder of your iCloud Drive, together with the information needed to sync them (for example folder names). Apple syncs them to your other devices that use the same Apple Account.

iCloud is a service that Apple provides to you under your agreement with Apple. Apple's privacy policy applies: apple.com/legal/privacy. We have no access to your iCloud. If you turn on Advanced Data Protection for iCloud (where available), your iCloud Drive is end-to-end encrypted: support.apple.com/en-us/102651

You can turn iCloud storage off at any time in Scanlane's settings, and you can manage or delete the files in the Files app.

4. Purchases and subscriptions

Scanlane Pro is sold through Apple's App Store (In-App Purchase). Apple processes the payment and your Apple Account data as an independent controller. Apple's privacy policy and Apple's Media Services Terms and Conditions apply. We do not receive your name, email address, Apple Account or payment details.

To check whether Scanlane Pro is active, the app asks Apple's StoreKit service on your device. Apple provides us with sales and subscription reports in App Store Connect (for example the number of trials, subscriptions and cancellations per country). These reports do not tell us who you are.

Refunds and Family Sharing are handled by Apple.

5. Crash reports and statistics from Apple (optional)

If you have turned on "Share With App Developers" in iOS (Settings › Privacy & Security › Analytics & Improvements), Apple shares crash reports and app usage statistics with us. They do not identify you and do not contain your documents. We use them only to find and fix errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a stable, reliable app. You can turn the sharing off at any time in the same place.

6. No tracking, no advertising, no third parties

• Scanlane contains no third-party SDKs for analytics, advertising, crash reporting or attribution.
• Scanlane does not use the advertising identifier and does not track you across apps or websites.
• We do not create profiles, and we do not sell or share personal data.
• The app only connects to Apple services: the App Store, iCloud, and iOS features such as language downloads. Links to our website open in your browser.

If we ever add a feature that sends data off your device, it will be optional, clearly labelled in the app, and described in this policy before it becomes available.

7. When you contact us by email

You can email us from the app (Settings › Help › Contact support) or directly at support@scanlane.app. We then process your email address, your name if you give it, your message and any attachments, only to answer your request. You do not have to give us this data, but without your email address we cannot reply.

Diagnostics (optional): in the app you can choose to attach a diagnostics file. This option is off by default, and you can see the content before you send it. The file contains technical information such as the app version, iOS version, device model, language, relevant settings and recent error messages. It contains no documents, images or recognised text.

The legal basis is Art. 6(1)(b) GDPR if your request concerns the app or your subscription, and Art. 6(1)(f) GDPR otherwise; our legitimate interest is answering your questions.

Launch notification: if you email us from our website to be told when Scanlane is available, we use your email address only to send you that one message, and delete it afterwards. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by emailing us.

Emails to support@scanlane.app are received by Cloudflare, Inc. (Cloudflare Email Routing) and forwarded unchanged to our mailbox, which is hosted by an email provider. Both process the emails on our behalf under a data processing agreement (Art. 28 GDPR).

We delete support emails when your request is resolved, at the latest 12 months after our last message, unless we have to keep them longer by law.

Please only attach documents if they are really needed to answer your question.

8. This website

Hosting: our website is hosted by Railway Corporation, 548 Market St PMB 68956, San Francisco, California 94104, USA ("Railway"), which acts as our processor under a data processing agreement (Art. 28 GDPR). The server that delivers the website runs in Railway's "EU West" region in Amsterdam, Netherlands.

Server data: when you open a page, your browser automatically sends technical data: your IP address, the date and time, the page requested, and your browser and operating system (user agent). This data is technically necessary to deliver the page; without it, the website cannot be shown. Our own web server writes no access logs. Railway's network records requests in its HTTP logs (including IP address, user agent, requested page and status code) to operate the service and protect it against attacks. These logs are deleted automatically after 30 days at the latest. Your request first reaches the Railway network location closest to you, which can be outside the EU if you are outside the EU, and is then forwarded to our server in the EU.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is delivering the website securely and reliably.

No cookies, no tracking: this website uses no cookies, no local storage, no analytics, no tracking pixels, no external fonts, no external scripts and no embedded content. The home page loads one small script from our own server, only to make the menus and the video's pause button work and to start the footer's animation. The script stores nothing and sends nothing. We do not store or read any information on your device.

Links: links to other websites, for example Apple's, lead to their own privacy policies.

9. Who receives data

• Apple as an independent controller: App Store purchases, iCloud (if you use it), and crash reports (if you allow them).
• Railway as our processor: hosting of this website.
• Cloudflare, Inc. as our processor: receiving and forwarding emails to support@scanlane.app (Cloudflare Email Routing).
• Our email provider as our processor: our email mailbox.

Our processors may only process the data on our instructions and are contractually obliged to protect it (Art. 28 GDPR). Nobody else receives personal data from us. We do not sell personal data.

10. Transfers outside the EU

Neltacore, LLC is based in the USA. Our website server runs in the EU. These cases involve a country outside the European Union (EU) or the European Economic Area (EEA):

• Your emails to us are received by Neltacore, LLC, a company in the USA. We process them as described in section 7 and in line with the GDPR.
• Cloudflare, Inc. is based in the USA and certified under the EU-U.S. Data Privacy Framework; the transfer is based on the adequacy decision of the European Commission (Art. 45 GDPR).
• Our email provider may process emails outside the EU. Where it does, the transfer is based on an adequacy decision of the European Commission (Art. 45 GDPR) or on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
• Railway is a US company and may access data from the USA, for example for support or security. Railway is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). In addition, our data processing agreement with Railway includes the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
• Apple processes data under its own responsibility and may process it outside the EU. Details are in Apple's privacy policy.

11. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have your data erased (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR),
• object to processing (Art. 21 GDPR),
• withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation.

To use your rights, email us at support@scanlane.app. Because we do not store any data from the app, we usually cannot identify you through the app. Data on your device and in your iCloud is under your control: you can delete it in the app, in the Files app, or by deleting the app. There is no account to delete.

Right to lodge a complaint: you can complain to a data protection supervisory authority in the EU (Art. 77 GDPR), in particular in the member state where you live or work or where you believe the infringement took place. A list of all authorities in the EU: edpb.europa.eu/about-edpb/our-members_en

12. No automated decisions

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

13. Children

Scanlane does not collect personal data from anyone, including children. If a child emails us, we handle the message as described in section 7.

14. Security

Your documents are kept in the app's protected storage on your device. iOS encrypts this storage when your device is protected with a passcode. You can also lock Scanlane with Face ID, Touch ID or your device passcode. Our website is only served over an encrypted connection (HTTPS).

15. Changes to this policy

We update this policy when the app, the website or the law changes. The current version is always available at scanlane.app/privacy and in the app. The date at the top shows the last change.

16. Contact

Questions about privacy: support@scanlane.app