ScanGo Privacy Policy
Effective date: 3 October 2026
Responsible operator: Hoàng P, acting as an individual
Verified distribution accounts: Apple App Store — The Hoang Pham; Google Play — CÔNG TY TNHH NĂNG LƯỢNG XANH SOLAR VN
Support contact: Hoàng P
Privacy contact: thehoang15793@gmail.com
The distribution-account names identify the store publishers. They are listed separately from Hoàng P’s responsibility for this policy and do not imply shared legal ownership.
1. Your document content
ScanGo lets you scan paper documents, import selected images, arrange pages, add text or notes and create PDFs. ScanGo Pro adds signatures and company stamp images. Images, document names, text, notes, signatures, stamp images and PDFs are processed and stored in the app's data area on your device. ScanGo does not require its own account and does not operate a server receiving document content. This content is not sent to the operator or RevenueCat for payment processing.
2. Camera, photos and files
The camera is used when you choose to scan or take a stamp photo. ScanGo requests camera access when you open the corresponding feature. On Android, Google Play services supplies the scanner interface; the app also requests camera permission because its current library configuration declares that permission. On Android 7–9, the camera library's stamp-photo flow may request permission to write to shared storage; the system can also grant implied storage read access from that permission. These legacy storage permissions are capped at Android 9 (API 28) and are not granted on Android 10 or later. When importing photos, you select images through the system picker. ScanGo uses the images you select as document pages or signature/stamp images. You can change permissions in your device settings. Features that need a denied permission may be unavailable.
3. System components and SDKs
The Android app uses Google ML Kit document scanning through Google Play services. Scanner resources may be downloaded before first use and updated later. Google states that ML Kit inputs and outputs are processed on the device and are not sent to Google servers. ML Kit Terms & Privacy
Google's SDK disclosure describes technical data used for diagnostics and usage analytics, including device and application information, device/installation identifiers, performance, API configuration, input/output sizes, feature events and error codes. This technical data is distinct from the content of scanned pages. Google states that the collected data is encrypted in transit using HTTPS. See ML Kit's data disclosure and Google's privacy policy.
ScanGo uses RevenueCat to verify transactions, restore Pro access, process refund changes and provide purchase analytics. In iOS and Android releases configured for store purchases, ScanGo initializes RevenueCat when the app opens and checks Pro status and available products, including when the app becomes active again. The SDK uses a random anonymous app user identifier without a ScanGo login. This identifier, related technical processing and purchase analytics may apply to all users of those releases, including people who have never bought Pro.
RevenueCat may receive the anonymous app user identifier, entitlement status and related app/device technical information. If you buy or restore Pro, product and transaction identifiers, receipts or purchase tokens and purchase dates are also processed over the network by RevenueCat and the store. The current app configuration disables optional automatic device identifier collection and RevenueCat diagnostics; anonymous identifiers, entitlement checks and purchase analytics still apply. Document, signature and stamp images are not sent in this flow. Payment card details are handled by Apple/Google; ScanGo does not ask you to enter a card number. See RevenueCat’s privacy policy.
ScanGo has no advertising. Purchase analytics still apply even without a ScanGo login. Apple's or Google's processing through the operating system, store, backup services or receiving apps is governed by the corresponding policies.
4. Sharing you choose
When you choose to share or save externally, the operating system transfers the file to the app or location you select. A receiving app may store or upload it according to its settings and policies. ScanGo does not control copies you have shared. Share sensitive documents only with recipients and services you intend to use.
5. Retention and deletion
Documents managed by ScanGo remain on your device until you delete them in the app, clear the app's data or uninstall it. Temporary PDF exports are stored in the cache. Each subsequent export attempts to remove temporary PDF exports older than 24 hours. Temporary scanning and editing images may remain in cache until the operating system removes them or app data is cleared. Cache removal is not a guarantee of secure, unrecoverable erasure.
Deleting a document in ScanGo does not delete original photos in your library or PDF copies saved or shared outside the app.
On iOS, saved documents, pages, text/notes, signatures, stamp images and the library manifest are stored in the app’s Documents area without a backup-exclusion flag. Depending on your device backup settings, these files may be included in iCloud or computer backups. You control these operating-system backups through your device and backup settings. Deleting a local document or uninstalling ScanGo does not necessarily delete copies in existing backups. Temporary PDF exports are stored in purgeable cache. These backups are separate from ScanGo; the app does not upload your document content to its own server.
On Android, ScanGo disables automatic app backup. Device-to-device transfer behavior can vary by device manufacturer, so this is not a promise that every transfer method excludes app data. Operating-system backups or copies you export follow the relevant provider’s settings and retention rules.
Deleting ScanGo or a document does not automatically delete anonymous app-user, entitlement or transaction records held by RevenueCat or the store. Do not send scanned documents when requesting help with these records.
Anonymous app-user and entitlement records are kept while needed to verify access and support purchase restoration. Purchase records are retained while needed to verify or restore lifetime Pro, handle refunds or disputes, or meet legal obligations. Send access or deletion requests to thehoang15793@gmail.com. If you have purchased Pro, include the store and transaction identifier to help locate the anonymous purchase record. If you have not purchased Pro, you can still contact support; additional non-sensitive information may be needed to locate the correct anonymous record. Requests are reviewed against the records Hoàng P can manage and applicable store or legal retention requirements. Deleting verification data may affect later restoration of Pro; it does not delete records held independently by Apple or Google.
6. Protecting your data
ScanGo relies on the operating system's app storage isolation and device protections. This version does not provide a separate app lock or additional password protection/encryption for exported PDFs. Use a screen lock and manage exported files carefully. The operator does not have a copy of your document content and cannot restore it if it is lost or deleted.
7. Support messages
If you contact support, you may provide your email address and the contents of your request. Avoid sending sensitive documents when they are unnecessary. Requests sent to thehoang15793@gmail.com are handled by Hoàng P, acting as an individual, to answer the request, investigate a reported problem and fix issues. Support messages are kept while needed to resolve the request. You may request deletion by emailing the same address; messages will be removed on request unless retention is required by law.
8. This support website and Cloudflare
This support website is hosted on Cloudflare Pages. Cloudflare receives technical request information, such as your IP address, requested URL, request time and browser/device information, to deliver and protect the website. Cloudflare may process security and network logs under its policies. We do not promise a fixed deletion period for records controlled by Cloudflare.
The website has no advertising, optional web analytics, document upload form or payment checkout. Its own page code does not set cookies or store your language choice in browser storage; the language is kept in the page URL. Cloudflare may use security cookies when relevant protection features are active, for example to distinguish legitimate visitors from bots or remember a passed security check. These hosting/security processes are separate from ScanGo’s on-device document processing. See Cloudflare’s privacy policy and Cloudflare’s cookie information.
9. Changes and contact
If our data practices change, we will update this policy and its effective date. Questions or requests about privacy can be sent to thehoang15793@gmail.com. The current policy is available at scango.solarvn.app/privacy.