DocHaven Privacy Policy
English
DocHaven ("the app", package com.m4coding.scan) is developed by m4coding.
Summary
Your documents, scanned images, recognized text and signatures never leave your device unless you choose to share or save them. The app has no account system, no ads, no analytics or crash-reporting SDK, and we do not operate any server. We cannot see your documents.
Data stored on your device
Documents you scan or import, recognized text, signatures, tags, folders and settings are stored only in the app's private storage on your device. They are excluded from Android's automatic cloud backup (Google Drive). When you move to a new phone with Android's device-to-device transfer, they can be copied directly to the new phone. Deleting documents in the app (after the 30-day recycle bin) or uninstalling the app removes them.
If you create a backup file in the app, it is saved only where you choose. You are responsible for where you keep that file.
Scanning and camera
Scanning uses Google Play services' document scanner, which runs on your device and returns the scanned images to the app. The app itself does not request camera or storage permission; when you import photos or PDFs, you pick them in the system picker and the app only receives the files you select.
Google ML Kit (text recognition, translation and other on-device features)
Text recognition, translation, language detection, barcode scanning and face detection (for ID photos) use Google ML Kit, which processes everything on your device. Models are downloaded by Google Play services or, for translation, when you first use a language (about 30 MB each). ML Kit may send Google limited diagnostic information, such as device model, OS version, app version, a per-installation identifier, performance metrics and error codes. It does not send your documents, images or the text in them. See ML Kit data disclosure.
Font downloads
To make Chinese, Japanese or Korean text searchable in exported PDFs, the app can download a free Noto Sans font (10–18 MB) from Google Fonts' public repository on GitHub or its jsDelivr mirror, only after asking you. Like any download, the server sees your IP address; the request contains no information about your documents.
Network use
The app uses the internet only to download the models and fonts described above (over HTTPS) and for Google Play services. It never uploads your content.
Permissions
| Permission | Why |
|---|---|
| Internet, network state | Downloading on-device models and fonts |
| Notifications | Optional reminders before an ID document expires (scheduled on the device) |
| Biometric | Optional app lock with your fingerprint, face or screen lock |
Sharing
Files leave your device only when you choose to share, save or print them, using the destination you pick (for example an email or messaging app). The app also opens links from QR codes only after you confirm.
Children
The app is not directed at children under 13 and does not knowingly collect any personal information from anyone.
Changes
We will update this page if our practices change, and change the date above.
Contact
简体中文
安扫（DocHaven，以下简称“本应用”，包名 com.m4coding.scan）由 m4coding 开发。
概要
你的文档、扫描图片、识别出的文字和签名不会离开你的设备，除非你主动分享或保存。本应用没有账号体系，没有广告，没有统计或崩溃上报 SDK，我们也不运营任何服务器，看不到你的文档。
保存在设备上的数据
你扫描或导入的文档、识别出的文字、签名、标签、文件夹和设置，只保存在本应用在你设备上的私有存储中，并且不参与 Android 的自动云备份（Google 云端硬盘）。使用 Android 的换机迁移功能时，这些数据可以直接复制到新手机。在应用内删除文档（回收站保留 30 天后彻底删除）或卸载应用，数据即被移除。
如果你在应用内创建备份文件，它只会保存到你选择的位置，请自行妥善保管。
扫描与相机
扫描使用 Google Play 服务提供的文档扫描器，在你的设备上运行，并把扫描结果交给本应用。本应用本身不申请相机或存储权限；导入照片或 PDF 时，你在系统选择器中挑选，本应用只能拿到你选中的文件。
Google ML Kit（文字识别、翻译等端侧功能）
文字识别、翻译、语言识别、二维码识别和人脸检测（用于证件照）使用 Google ML Kit，全部在你的设备上处理。模型由 Google Play 服务下载；翻译模型在你第一次使用某种语言时下载（每种约 30 MB）。ML Kit 可能向 Google 发送有限的诊断信息，例如设备型号、系统版本、应用版本、每次安装的标识、性能指标和错误码，不会发送你的文档、图片或其中的文字。详见 ML Kit 数据披露说明。
字体下载
为了让导出的 PDF 中的中文、日文、韩文可以搜索，本应用会在征得你同意后，从 Google Fonts 在 GitHub 上的公开仓库或其 jsDelivr 镜像下载免费的 Noto Sans 字体（10–18 MB）。与任何下载一样，服务器能看到你的 IP 地址；请求中不包含任何与你的文档有关的信息。
网络使用
本应用只在下载上述模型和字体（通过 HTTPS）以及 Google Play 服务运行时使用网络，绝不上传你的内容。
权限
| 权限 | 用途 |
|---|---|
| 网络、网络状态 | 下载端侧模型和字体 |
| 通知 | 可选：证件到期前提醒（在设备上定时） |
| 生物识别 | 可选：用指纹、面容或锁屏密码开启应用锁 |
分享
只有当你主动分享、保存或打印时，文件才会离开设备，去往你选择的目标（例如邮件或聊天应用）。二维码中的链接也只在你确认后才会打开。
儿童
本应用不面向 13 岁以下儿童，也不会有意收集任何人的个人信息。
变更
如果我们的做法发生变化，会更新本页面并修改上方的日期。