ScanItSaveIt (“SiSi”) is an Android app published by Mody Associates and presented by Fun Fat Studios. It scans paper documents and pictures with your phone's camera, turns the pages into a PDF, and saves that PDF to your phone or a folder you choose. This notice describes exactly what the app does with your documents and what it does not do.
Summary
Scanning, filtering and PDF creation all happen on your device. There is no SiSi account, no advertising, no analytics service run by the publisher, and no document upload. The only network use is Google Play itself: the one-time download of the scanner component the first time you open the scanner, and the optional one-time Full Access purchase (price, purchase, restore and refund checks).
No accounts, no e-mail, no profile
- There is no sign-up, sign-in, profile, username or password anywhere in the app.
- The app does not ask for your e-mail address and never reads the Google account on your device.
- The optional Full Access purchase belongs to your Google Play account, and Google Play handles it. ScanItSaveIt never sees your payment details or your Google account address.
What happens to your documents
- Pages come from the camera through Google ML Kit's document scanner, which runs on this device and returns the corrected page images to the app.
- Page images are immediately copied into the app's private storage; the scanner's temporary copies are released.
- Filters (Original, Black & White, Colour, Auto), rotation, reordering, thumbnails and PDF creation are all processed locally on this device.
- No page image, PDF, thumbnail, file name, folder path or document text is transmitted to the publisher or to any third party.
- Saved PDFs live in the app's private library or in the folder you choose. Nothing is uploaded anywhere.
What the app does not collect
- No scanned pages, PDF contents, PDF text, file names, paths, thumbnails, document titles or notes leave your device through the app's own code.
- No camera images beyond the pages you deliberately capture while the scanner is open.
- No device identifiers and no advertising identifiers. The advertising-ID permission is explicitly removed from the app.
- No contacts, no location, no microphone, no calendar and no phone data. The app declares none of those permissions.
- No usage history or custom events: the app contains no analytics SDK.
Network use
- Scanner component download. The first time you open the scanner, Google Play services downloads the ML Kit document scanner component. This needs an internet connection once; after that, scanning and PDF creation work offline. The app tells you this in plain words if the component is not available yet and the device is offline.
- Google Play Billing. For the optional one-time Full Access purchase, the app asks Google Play for the localised price, starts the purchase, completes (acknowledges) it, checks the purchases you already own when you press Restore Purchase or start the app while Play is reachable, and reflects refunds or revocations once Google Play reports them. All of that traffic goes to Google Play and is governed by Google's privacy policy.
- Links you tap. Privacy, support, website and licence links open in your browser or e-mail app only when you tap them.
- There are no other network calls. Core scanning and PDF creation work without an internet connection once the scanner component is available.
Permissions in the released app
The app requests only what the features above require. The final merged manifest of the released build contains exactly these entries:
| Permission | Why it exists |
|---|---|
android.permission.ACCESS_NETWORK_STATE | Used only to tell you honestly that the first-time scanner setup needs an internet connection. It does not read your data. |
android.permission.INTERNET | Required by the Google Play libraries (ML Kit component download and Billing). The app's own code sends nothing. |
com.android.vending.BILLING | Required by Google Play Billing for the optional one-time Full Access purchase. |
- No camera permission is declared by the app: the ML Kit scanner interface runs inside Google Play services, which owns its own camera access.
- No storage permission is declared. Folders are chosen through Android's own folder picker (Storage Access Framework), which grants access to that one folder only.
- No notification permission, no location, no contacts, no microphone.
Data stored on your device
| Data | Where | Removed by |
|---|---|---|
| Saved PDFs | App-private storage, or the folder you chose | Deleting them in the app (and, for your own folders, any file manager); app-private files also disappear when you uninstall or clear app data |
| Page images and thumbnails of an unsaved scan | App-private storage, removed automatically after 24 hours or when you discard the scan | Discarding the scan, saving it, the 24-hour cleanup, uninstalling |
| Document list (names, dates, page counts, sizes, destinations, thumbnail) | Local database on this device, excluded from Android backup | Deleting documents in the app, uninstalling, clearing app data |
| Settings (default filter, default destination, folder choice) | Local store (may be included in Android's own device backup) | Uninstalling, clearing app data |
| Free page-scan allowance state (first-use date, period start, pages used) | Local store (may be included in Android's own device backup) | Uninstalling, clearing app data |
| Cached Full Access status (owned or not, last check with Google Play, no payment data and no purchase token kept in plain text) | Local store (may be included in Android's own device backup) | Uninstalling, clearing app data |
Files you save outside the app
- If you save a PDF into a folder you chose (for example on a microSD card), that file is yours and stays there even if you uninstall ScanItSaveIt.
- The app remembers the folder you granted through Android's folder picker so it can offer it again. If you later remove the SD card or revoke that folder access, the app shows the document as temporarily unavailable and keeps its entry instead of deleting anything.
- Deleting such a document in the app deletes the file from that folder, and the app asks for confirmation first.
Android device backup
Android can back up app data to your Google account when you enable device backup. ScanItSaveIt uses include-only backup rules: only the free-allowance state and your settings can be included. Scanned pages, PDFs, thumbnails, unsaved page images, file names and the document database are excluded and never placed in a device backup. Because device backup is controlled, scheduled and stored by your device and Google, restoring it (for example after reinstalling) is best-effort, not a guarantee — the free allowance is a local, offline mechanism rather than a reinstall-proof one.
Google Play statistics and Android vitals
Google Play itself provides the publisher with store statistics (installs, acquisitions, ratings, financial reports) and Android vitals (crash and ANR rates) for the app. That is Google Play platform data, governed by Google's policies; the publisher receives it in aggregated form and it is not linked to your documents. The app contains no additional analytics or crash-reporting SDK of its own.
Purchases and refunds
Full Access is a one-time purchase handled entirely by Google Play. The price you see is the localised price Google Play returns for your account. The purchase is tied to the Google Play account that bought it; the app can restore it on your other devices through Restore Purchase. If Google Play reports that a purchase is refunded or revoked, Full Access is removed the next time the app can reach Google Play. While you are offline, the app keeps the last confirmed paid status so your documents stay usable.
Children's privacy
ScanItSaveIt is a general-purpose utility that collects no personal data, is not directed at children, and contains no advertising.
Security
- Documents live in app-private storage with private file permissions.
- Sharing a PDF uses Android's share sheet with a temporary, read-only permission granted only to the app you pick. Whole folders are never exposed.
- Nothing sensitive is written to logs: no file contents, image data, document names, full paths, folder URIs or purchase tokens. Diagnostic logging is limited and debug-only.
- The app contains no hard-coded secrets or service credentials.
Changes to this notice
If a future version changes how data is handled — for example adding a feature that needs a new permission — this notice will be updated first and the effective date above will change. The version shipping the change will describe it in the Google Play listing.
Questions
Privacy and support questions can be sent to support@modyassociates.com.