Scanizma has no developer-operated backend, account system, ads, or advertising trackers. The Scanizma developer does not receive your documents, scans, recognized text, contacts, passwords, or exported files.
What is true on every platform
Documents stay local. Scans and OCR results are stored in the app's private device storage. Files leave that storage only when you explicitly export, share, or create a portable backup.
Camera. Camera access is used only to capture scans.
Contacts. Business-card results are handed to the system's own contact screen for your review. Scanizma never silently writes or uploads a contact.
Local security. Optional vault files and OCR text are encrypted with AES-256-GCM. Portable .hscan backups use a password-derived AES-256-GCM key. Passwords are not stored and cannot be recovered by us.
Deletion. Delete documents in the app and empty/expire Trash, or uninstall the app to remove its private local data. Exported files and portable backups remain in the locations you selected and must be deleted there separately.
Android
No app internet permission. Scanizma removes INTERNET and ACCESS_NETWORK_STATE from its merged manifest, so the app cannot open a network connection at all. You can check this yourself: Settings → Apps → Scanizma → Permissions, or the app's own “Offline proof” screen, which reads the list live from your device's package manager. System cloud backup and device-transfer backup are disabled for all app data.
Encryption. Vault keys are held in the Android Keystore.
ML Kit. Scanning, recognition, barcode detection, and segmentation inputs and outputs are processed on-device. Google states that ML Kit may contact Google services for models, fixes, and hardware compatibility and collects device/app information, per-install identifiers, performance metrics, API configuration, event types, and error codes for diagnostics and usage analytics. Google states this data is encrypted in transit and is not shared with third parties. Image, video, text, and recognition outputs are not sent to Google servers by ML Kit.
Google ML Kit disclosures: https://developers.google.com/ml-kit/android-data-disclosure · ML Kit Terms & Privacy: https://developers.google.com/ml-kit/terms
iOS
No network requests. iOS has no “internet permission” that an app can decline, so we will not claim one. What we can tell you is that Scanizma makes no network requests — and you do not have to take our word for it, because iOS keeps its own record: Settings → Privacy & Security → App Privacy Report → Scanizma shows every domain the app contacted. It is empty.
Encryption. Vault keys are held in the iOS Keychain and all encryption uses Apple's own cryptography (CryptoKit); no third-party cryptographic library is bundled.
Text recognition. OCR runs entirely on your device.