Privacy policy

Your documents are
your business.

Planar is a document scanner that works on your phone, not in the cloud. This page says exactly what stays on the device, what leaves it, and why.

Last updated · Planar for iPhone and Android Draft · for legal review
Scans never leave your phone

Pages, photos, recognized text, signatures and ID images are stored only on the device, unless you share them yourself.

An account is optional

You can scan without one. If you sign in, we keep your email, how you signed in and your Pro plan. Nothing else.

No ads, no tracking, no selling

No advertising ID, no tracking prompt, no data brokers. Planar is paid for by Pro, not by your data.

What stays on your phone

Everything that is a document. Planar stores these only on the device you scan with, in the app's own private storage:

  • The photos you take and the pages made from them
  • The text recognized on each page, and the key details pulled from it
  • Document names, folders and search indexes
  • Signatures you draw and save
  • ID card images, and the redacted copies made from them
  • Your settings, including app lock and paper size

Text recognition runs on the device, with Apple Vision on iPhone and Google ML Kit with a bundled model on Android. No page is sent to a server to be read. If you remove the app, these files are removed with it.

What we collect, and why

Three narrow things leave the device, none of them a document.

Your account, if you create oneOptional

Your email address, how you signed in (Google, Apple or an email code), when you joined, and an account ID. It exists to keep Planar Pro with you on every device. Stored with our authentication provider, Supabase.

Purchase statusIf you buy Pro

Whether Pro is active and which plan, plus an anonymous app user ID. Handled by Apple or Google billing and by RevenueCat, checked when the paywall opens, on purchase or restore, and once per launch. We never see your card.

Anonymous usage countsAnalytics

Which screens are opened (as patterns such as “document”, never a name or ID), app version, OS, device model, country from your IP, and an anonymous app instance ID. Sent to Google Firebase Analytics with no advertising ID, no ad personalization and no user ID. It tells us which features are used, not what is in them.

When you share a document

Export sends the PDF or image where you choose: the share sheet, a printer, Files, mail. From that moment the copy is handled by the app or service you picked, under its own policy. Planar keeps no copy and does not know where it went.

Free exports carry a small “Scanned with Planar” mark that links to this website. The link carries no identifying information.

Permissions we ask for

  • Camera, to scan. Frames are processed on the device and only the pages you keep are saved.
  • Face ID, Touch ID or fingerprint, only if you turn on app lock. Biometrics are checked by the OS; Planar never sees them.
  • Photos are chosen through the system picker, so Planar gets only the photo you pick, not your library.
  • Network, used only for purchases, your optional account and the analytics above.

Services we rely on

Each one sees only the data described above, nothing from your documents.

  • Apple and Google: app distribution, in-app purchases and subscriptions, Sign in with Apple and Google.
  • RevenueCat: purchase and subscription status.
  • Supabase: hosting for accounts and the email sign-in code.
  • Google Firebase Analytics: the anonymous usage counts.

Everything in transit is encrypted with HTTPS.

Keeping and deleting data

Documents: yours to delete in the app at any time, and gone when you remove the app. There is no server copy to delete.

Account: delete it in the app under Me › your account › Delete account, or email us. Your email, sign-in and Pro link are removed within 30 days. Purchase history stays with Apple or Google, as for any app, and deleting your account does not cancel a subscription. How to delete your account.

Analytics are held by Firebase for its standard retention period and cannot be tied back to you.

Your choices and rights

You can use Planar without an account. You can ask us for a copy of the account data we hold, correct it, or delete it, and we will answer from the address you write from. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA; we honor them for everyone.

Planar is not directed at children under 13 and we do not knowingly collect their data. [LEGAL REVIEW: confirm age threshold per market]

Changes and contact

If this policy changes, the date at the top changes with it and the app will point you here. Questions go to [email protected].

Planar is made by CodeStage. [LEGAL REVIEW: add legal entity name and address]