Summary
Clapiscan is a document scanner for iPhone and iPad published by Clapilot GbR. Clapilot GbR does not collect any data from the app. There is no account, no analytics, no advertising and no third-party code, and the app contains no networking code of its own. Scanning, text recognition, naming and summarizing happen on your device, and your documents are never uploaded to us.
Who is responsible
Controller within the meaning of the EU General Data Protection Regulation (GDPR):
Clapilot GbR
represented by Luca Sonntag
Georgenstraße 97
80798 München
Germany
Email: luca@clapilot.com
Further provider details: Legal notice (Impressum)
What Clapiscan stores and where
- Documents. Your scans are stored as PDF files in Clapiscan’s folder on your device, which you can also see in the Files app (On My iPhone/iPad → Clapiscan). Recently Deleted is a subfolder there.
- Search index. Titles, tags, summaries and recognized text are kept in a local index in the app’s private storage so you can search. It is never synced and can be rebuilt from your files.
- Spotlight. Each document’s title and text are added to your device’s on-device Spotlight index, so you can find documents in iOS search. Password-protected documents are not text-indexed.
- Editable originals and thumbnails. The scanned page images are kept on the device so you can re-crop and re-filter pages later. Thumbnails are stored in the app’s cache.
- Signatures. Saved signatures and initials are stored only on this device with the strongest iOS file protection and are not synced.
- Remembered PDF passwords. Only if you turn on “Remember in Keychain”: stored in the iOS Keychain with “this device only” protection.
- Preferences. Settings, your QR code history (up to 100 entries), a cached Pro status and the free-use counters.
Your library is part of your normal device backup (iCloud Backup or computer) if you use one.
On-device processing
- Edge detection, perspective correction, text recognition and QR/barcode recognition use Apple’s VisionKit and Vision frameworks on your device.
- Smart titles and summaries (Clapiscan Pro) use Apple’s on-device language model (Apple Intelligence) where available, otherwise simple rules on the device. Nothing is sent to us or to a cloud AI service.
Optional iCloud Drive storage
Clapiscan is built to optionally keep your library in your own iCloud Drive instead of only on your device. This option is not yet enabled in the current version; until it is, all documents are stored on your device.
Once available, iCloud Drive storage is optional and you choose it in Settings → Storage → Location. Your documents are then stored as PDF files in your personal iCloud Drive, provided by Apple under Apple’s privacy policy. Clapilot has no access to your iCloud Drive. Files in iCloud Drive stay there if you delete the app. Signatures, remembered passwords and the search index are never synced.
Permissions
Camera
To scan documents and to scan QR codes and barcodes live. Camera images are processed on your device; only the scans you save are kept.
Photos (add only)
Only when you choose Save to Photos for a JPEG or PNG export. Clapiscan cannot read your photo library. Importing from Photos uses the system photo picker, which only gives Clapiscan the photos you pick.
Face ID / Touch ID
Only if you turn on App Lock. iOS checks your face or fingerprint and only tells Clapiscan whether unlocking succeeded; Clapiscan never receives biometric data. Your device passcode works as a fallback.
Clapiscan asks for no microphone, location, contacts or tracking permission. You can change permissions at any time in Settings → Privacy & Security.
Purchases through the App Store
Clapiscan is distributed through Apple’s App Store. Clapiscan Pro is available as a one-time in-app purchase or as an auto-renewing yearly subscription. Apple processes the payment and handles billing, Family Sharing and refunds as an independent controller under the Apple Privacy Policy. We do not receive your name, email address, Apple Account or payment details.
The app uses Apple’s StoreKit framework to check on your device which purchases are active. In App Store Connect we only see aggregated sales and download reports that do not identify you.
Crash reports shared by Apple
If you have turned on Share With App Developers in your device settings, Apple may pass crash reports and anonymous diagnostic data about Clapiscan on to us. Apple does not tell us who you are. You can turn this off at any time in Settings → Privacy & Security → Analytics & Improvements.
When you email us
If you contact us by email, we process your email address, the content of your message and anything you choose to include (for example your device model, iOS version or screenshots) only to answer your request.
Legal basis: Art. 6(1)(b) GDPR where your request concerns the app you use, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering inquiries). We delete your messages once your request has been dealt with, unless statutory retention obligations require us to keep them longer.
No tracking, no selling
Clapiscan contains no analytics, advertising or tracking SDKs and does not track you across apps or websites. We do not sell or share personal data.
Processing that happens only on your device is not processing by Clapilot GbR: we have no access to it. The only personal data we process ourselves is what you send us by email (see “When you email us”).
Deleting your data
- Deleted documents go to Recently Deleted and are removed for good after 30 days, or right away with Delete Now / Delete All.
- Settings offers Delete Saved Signatures and Forget Remembered Passwords; the QR history can be cleared in the QR scanner.
- Deleting the app removes its documents and data from your device. Use Forget Remembered Passwords first, because iOS can keep Keychain entries after an app is deleted.
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing based on our legitimate interests (Art. 21). Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3)).
To exercise your rights, email luca@clapilot.com.
Your data in Clapiscan is stored on your device (and, once you enable it, in your own iCloud Drive). We cannot see, export or delete it for you; you can do this yourself in the app or in your device settings.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de
Children
Clapiscan is not directed at children. The app does not collect personal data from anyone, including children.
Changes to this policy
If the app or this policy changes, we will publish the updated version on this page and update the date.
Last updated: 6 October 2026
Contact
Questions about privacy in Clapiscan? Email luca@clapilot.com.
This policy covers the Clapiscan app. The clapilot.com website is covered by the separate website privacy policy (in German). Terms of use: Apple’s standard Licensed Application End User License Agreement.