Privacy Policy
Paperlight is a document scanner for Android and iOS, made by Cosvire.
The short version
- Your scans stay on your phone. We have no server and never receive your documents, page images or the text read from them.
- There is no account. Paperlight does not ask you to sign up or sign in.
- Text recognition runs on your device. Nothing is uploaded to read it.
- We collect anonymous usage and crash data through Google Firebase, so we can fix problems and see which features are used.
- You share a document only when you choose to, through your phone's own share sheet.
- Deleting the app deletes your scans. There is nothing left with us to delete.
1. Who we are
Paperlight is published by Cosvire ("we", "us"). For anything in this policy, write to support@cosvire.com.
2. What stays on your device
Everything you scan is stored in Paperlight's private folder on your phone, which other apps cannot read:
- Page images, both the original photo and the cleaned-up version
- Document titles, dates and folders
- Text that Paperlight reads from a page, so you can search it
- Your settings, such as the camera mode and share format
None of this is sent to us or to anyone else. Documents you put in the Vault are additionally kept behind your phone's screen lock or biometrics.
3. Permissions, and why
| Permission | Why it is needed |
|---|---|
| Camera | To photograph the page you are scanning. The camera is used only while a scan screen is open, and images are saved to the app's own folder. |
| Photos & media | Only when you choose Import, so you can pick existing photos to turn into a document. Paperlight reads the photos you select and nothing else. |
| Biometrics / screen lock | To unlock the Vault. Your fingerprint or face is handled entirely by your phone; Paperlight only receives a yes or no. |
| Internet | For the anonymous usage and crash reporting described below, and to check the app's settings. It is not used to send your documents anywhere. |
4. Text recognition
Paperlight reads the text on your pages with Google ML Kit, which runs on your device. Page images are not uploaded for this. The first time it runs, Google Play services may download a language model to your phone; that download tells Google which model was requested, not what your document says.
5. What we do collect
We use Google Firebase, which acts as our data processor, for three things:
| Service | What it collects, and for how long |
|---|---|
| Firebase Analytics | Anonymous events such as "a scan was saved", the number of pages in it, and whether it was a document or an ID card. Also your device model, operating system version, language and country, and a random app instance identifier. No document content, file names or recognised text. Google retains this for up to 14 months. |
| Firebase Crashlytics | If the app crashes: the error and where in the code it happened, your device model and operating system version, and the app version. Retained for up to 90 days. |
| Firebase Remote Config | Asks our settings file which features are switched on. Sends the app instance identifier and your app version. Nothing personal. |
We use this only to fix crashes and to understand which features are worth improving. We do not sell it, and we do not use it for advertising or profiling.
Google may process this data outside your country. Google's own handling is covered by the Firebase privacy documentation and the Google Privacy Policy.
6. Sharing a document
When you tap Share, Paperlight builds a PDF or image files and hands them to your phone's share sheet. Where they go from there — email, a messaging app, your cloud drive — is your choice, and that app's privacy policy applies from that point on. Paperlight does not upload anything by itself.
7. Features that are not switched on yet
Paperlight is built with two features that are off in this release. If we turn them on, they stay optional and we will update this policy first:
- Google Drive backup. If you sign in with Google and switch it on, your scans are copied to the hidden application folder of your own Google Drive. Only Paperlight can read that folder, and we never receive the files or hold a copy. We would see your name, email address and profile picture only inside the app on your phone, to show which account is signed in.
- Paperlight Pro. A subscription handled entirely by Google Play or the Apple App Store. We never see your card or payment details, only whether a subscription is active.
Paperlight contains no advertising SDK and no third-party trackers beyond Firebase.
8. Children
Paperlight is not directed at children under 13, and we do not knowingly collect personal information from them.
9. Your rights
Because your documents never leave your phone, you are in control of them at all times:
- Delete a document in the app, or clear the app's data, or uninstall it. That removes your scans completely.
- Stop the anonymous data by uninstalling the app, which ends all collection.
- Ask about your data. Under laws such as the GDPR and India's Digital Personal Data Protection Act you may ask what we hold, ask for a copy, or ask us to delete it. Write to support@cosvire.com and we will reply within 30 days. Please say which device you use, so we can find the matching crash reports.
10. Security
Scans live in the app's private storage, which the operating system keeps away from other apps. The Vault adds your screen lock on top. Anything sent to Firebase travels over an encrypted connection. No system is perfect, but since your documents stay on your device, there is no server of ours that could be breached.
11. Changes to this policy
If we change this policy, we will update the date at the top, and for anything significant we will say so in the app before the change takes effect.
12. Contact
Cosvire
support@cosvire.com