OneScanner · ColorfulMoon
Privacy Policy
Who we are
OneScanner is operated by ColorfulMoon. Contact us about privacy, access, correction or deletion at mgming03@outlook.com. This policy describes the mobile app and the OneScanner service used for configuration, legal documents and optional feedback.
Your documents stay on your device
Scanning, image adjustment, signatures, redaction, document organization, PDF creation and text recognition run on your device. We do not upload document images, recognized text, signatures or your document library to our servers. The app has no account system or advertising. Android scanning and recognition use Google ML Kit, whose technical metrics are described below. We do not sell personal information or use it for targeted advertising.
Scanning providers and international processing
iOS text recognition uses Apple Vision on the device. Android scanning uses Google Play services ML Kit, which may download scanner components on first use; text recognition uses bundled Google ML Kit models. These features initialize when you actively scan or recognize text after the in-app disclosure. Images and recognition results are processed locally and are not sent to Google. ML Kit sends Google device and app information, device identifiers for downloaded features, per-installation identifiers, performance and usage metrics, API configuration, input/output sizes and error events for diagnostics, maintenance, improvement and abuse prevention. These technical data can be processed outside your country. Google determines their retention and handles relevant requests under its privacy policy: https://policies.google.com/privacy . SDK details: https://developers.google.com/ml-kit/terms and https://developers.google.com/ml-kit/android-data-disclosure . This SDK processing is separate from the 30-day feedback retention below. You may skip Android scanning and recognition and still organize and export documents.
Permissions and device storage
Camera permission is used when you scan. System photo and file pickers let you choose the items to import. The app stores documents and settings in its private storage. If you enable the app lock, the operating system verifies your biometric or device credential; the app does not receive biometric templates. You may revoke permissions in system settings. Refusing camera access does not prevent importing files.
Sharing, backups and deletion
Sharing, printing and saving to a destination you choose are initiated by you. The receiving app, printer or storage provider handles the exported file under its own terms. Archive backups contain original images, edits and recognized text: store and share them carefully. Documents in Trash remain on the device until you permanently delete them. Permanent deletion or clearing app data removes the app’s copies, but does not erase exports or backups elsewhere.
Requests to our service
If a service address is configured, the app can request service configuration and current legal documents. Requests include the app version, platform and selected language. Network infrastructure necessarily receives an IP address and request timing. The application server does not keep access logs or persistent device identifiers. IP-based abuse counters are held in memory for at most one hour. Hosting providers process network traffic to operate the service. Our service is hosted on Tencent Cloud servers in Singapore. If you connect from another country, these requests cross national borders. Cloudflare proxies service requests, including submitted feedback, through its global network for delivery and security. Its processing of connection metadata is governed by https://www.cloudflare.com/privacypolicy/ and is separate from our application feedback retention.
Optional feedback
Only pressing Send submits feedback. It contains your message, optional reply email, app version, platform and language. We use it to answer you and investigate problems. It does not attach scans, screenshots or diagnostics automatically. Please avoid including sensitive personal information or full documents in the message. You may use the app without submitting feedback.
Retention and security
Feedback records expire 30 days after submission. The service deletes expired records during hourly cleanup, on startup and before accepting new feedback. If the service is stopped, cleanup resumes on startup. We do not create application-level backups of feedback records. We restrict access to support personnel and use HTTPS in production. These measures reduce risk but cannot guarantee absolute security.
Your choices and requests
You can manage and permanently delete local documents in the app, revoke permissions, or uninstall the app. To request access, correction or earlier deletion of submitted feedback, email us with the receipt identifier or information needed to locate it. We may ask for proportionate verification before disclosing personal information. Your applicable privacy and consumer rights are not limited by this policy.
Children and policy updates
OneScanner is a general-purpose productivity tool. We do not knowingly solicit personal information from children. If a child has sent personal information, a parent or guardian can contact us for deletion. Changes to data handling will be reflected in a dated policy. Material changes will be disclosed before the affected feature is used. The app includes an offline policy copy and can load the current published version.