ScanItSaveIt ("SiSi") is an Android app published by Mody Associates and presented by Fun Fat Studios. It scans paper documents and pictures with your phone's camera, turns the pages into a PDF, and saves that PDF to your phone or a folder you choose. This notice describes exactly what the app does with your documents and what it does not do.
Summary
Scanning, filtering and PDF creation all happen on your device. There is no SiSi account, no advertising, no analytics service run by the publisher, and no document upload. Google libraries use the network for fallback component downloads, technical diagnostics and the optional Full Access purchase.
No accounts, no e-mail, no profile
- There is no online account, sign-up, sign-in, profile or username. Optional app-lock PINs and PDF passwords are handled locally.
- The app does not ask for your e-mail address and never reads the Google account on your device.
- The optional Full Access purchase belongs to your Google Play account, and Google Play handles it. ScanItSaveIt never sees your payment details or your Google account address.
What happens to your documents
- Pages come from the app's on-device CameraX scanner, which requests camera permission. Google ML Kit provides a fallback scanner when needed.
- Page images are immediately copied into the app's private storage; the scanner's temporary copies are released.
- Filters (Original, Black & White, Colour, Auto), rotation, reordering, thumbnails and PDF creation are all processed locally on this device.
- No page image, PDF, thumbnail, file name, folder path or document text is transmitted to the publisher. When you explicitly share or export a file, your selected app or storage provider receives that file.
- Saved PDFs live in the app's private library. Export creates a copy in the folder you choose; a cloud-backed folder may sync through its provider.
What the app does not collect
- No scanned pages, PDF contents, PDF text, file names, paths, thumbnails, document titles or notes leave your device through the app's own code.
- No camera images beyond the pages you deliberately capture while the scanner is open.
- The app's own code does not read device or advertising identifiers. Google's ML Kit SDK uses installation identifiers for technical diagnostics. The advertising-ID permission is explicitly removed from the app.
- No contacts, no location, no microphone, no calendar and no phone data. The app declares none of those permissions.
- No publisher-operated usage analytics. Google ML Kit collects technical usage and diagnostic events as described below.
Network use
- Google ML Kit diagnostics. The OCR and fallback scanner libraries can send Google device/app information, installation identifiers, performance measurements, SDK configuration, input/output sizes, feature events and error codes for diagnostics and usage analytics. Google encrypts this traffic with HTTPS. Document images and recognized text are processed on-device; this technical telemetry is separate from document content. See Google's ML Kit disclosure.
- Fallback scanner component download. The built-in CameraX scanner works on-device without downloading a scanner component. If the ML Kit fallback is needed, Google Play services may download its component on first use.
- Google Play Billing. For the optional one-time Full Access purchase, the app asks Google Play for the localised price, starts the purchase, completes (acknowledges) it, checks the purchases you already own when you press Restore Purchase or start the app while Play is reachable, and reflects refunds or revocations once Google Play reports them. That traffic goes to Google Play and is governed by Google's privacy policy.
- Links you tap. Privacy, support, website and licence links open in your browser or e-mail app only when you tap them.
- The app has no custom backend. Core scanning and PDF creation work without an internet connection through the built-in scanner.
Permissions in the released app
The final merged manifest of the released build contains exactly these entries:
| Permission | Why it exists |
|---|---|
android.permission.CAMERA |
Captures pages while the scanner is open; requested at runtime. |
android.permission.ACCESS_NETWORK_STATE |
Used only to tell you honestly that the first-time scanner setup needs an internet connection. It does not read your data. |
android.permission.INTERNET |
Required by the Google Play libraries (ML Kit downloads/diagnostics and Billing). The app's own code sends nothing. |
com.android.vending.BILLING |
Required by Google Play Billing for the optional one-time Full Access purchase. |
- Android also adds an app-specific signature permission for non-exported dynamic receivers. It does not grant access to personal data.
- No storage permission is declared. Folders are chosen through Android's own folder picker (Storage Access Framework), which grants access to that one folder only.
- No notification permission, no location, no contacts, no microphone.
Data stored on your device
| Data | Where | Removed by |
|---|---|---|
| Saved PDFs | App-private library; exported copies in your chosen folder | Deleting in the app removes the library copy only; exported copies remain. App-private files disappear when you uninstall or clear app data |
| Page images and thumbnails of an unsaved scan | App-private storage, removed automatically after 24 hours or when you discard the scan | Discarding the scan, saving it, the 24-hour cleanup, uninstalling |
| Document list (names, dates, page counts, sizes, destinations, thumbnail) | Local database on this device, excluded from Android backup | Deleting documents in the app, uninstalling, clearing app data |
| Settings (default filter, default destination, folder choice) | Local store (may be included in Android's own device backup) | Uninstalling, clearing app data |
| Free scan allowance state (first-use date, period start, documents saved) | Local store (may be included in Android's own device backup) | Uninstalling, clearing app data |
| Cached Full Access status (owned or not, last check with Google Play, no payment data and no purchase token kept in plain text) | Local store (may be included in Android's own device backup) | Uninstalling, clearing app data |
Files you export outside the app
- Exported copies stay in your chosen folder after uninstalling the app or deleting the library original. Manage those copies through your file manager.
- The app remembers the folder access granted through Android's picker. If the folder becomes unavailable, export asks you to choose an available folder.
- Choosing a cloud storage provider may upload the exported file through that provider. This happens only through your explicit export/share action.
Android device backup
Android can back up app data to your Google account when you enable device backup. ScanItSaveIt uses include-only backup rules: only the free-allowance state and your settings can be included. Scanned pages, PDFs, thumbnails, unsaved page images, file names and the document database are excluded and never placed in a device backup. Because device backup is controlled, scheduled and stored by your device and Google, restoring it (for example after reinstalling) is best-effort, not a guarantee — the free allowance is a local, offline mechanism rather than a reinstall-proof one.
Google Play statistics and Android vitals
Google Play itself provides the publisher with store statistics (installs, acquisitions, ratings, financial reports) and Android vitals (crash and ANR rates) for the app. That is Google Play platform data, governed by Google's policies; the publisher receives it in aggregated form and it is not linked to your documents. The app contains no additional analytics or crash-reporting SDK of its own.
Purchases and refunds
Full Access is a one-time purchase handled entirely by Google Play. The price you see is the localised price Google Play returns for your account. The purchase is tied to the Google Play account that bought it; the app can restore it on your other devices through Restore Purchase. If Google Play reports that a purchase is refunded or revoked, Full Access is removed the next time the app can reach Google Play. While you are offline, the app keeps the last confirmed paid status so your documents stay usable.
Children's privacy
ScanItSaveIt is a general-purpose utility, is not directed at children, and contains no advertising. Google's technical SDK data is described above.
Security
- Documents live in app-private storage with private file permissions.
- Optional app lock stores a salted PIN hash locally; it is an access gate, not encryption of the library. PDF passwords are used to encrypt the chosen output and are not stored by the app. OCR runs on-device.
- Sharing a PDF uses Android's share sheet with a temporary, read-only permission granted only to the app you pick. Whole folders are never exposed.
- Nothing sensitive is written to logs: no file contents, image data, document names, full paths, folder URIs or purchase tokens. Diagnostic logging is limited and debug-only.
- The app contains no hard-coded secrets or service credentials.
Changes to this notice
If a future version changes how data is handled — for example adding a feature that needs a new permission — this notice will be updated first and the effective date above will change. The version shipping the change will describe it in the Google Play listing.
Questions
Privacy and support questions can be sent to support@modyassociates.com.