HyperFastScan (“the app”) is an app for Android, iPhone, iPad and Mac for scanning documents and emailing them as PDFs, and for emailing other files as they are. It is made by Orbit Solutions d.o.o., Andrije Buvine 1, 23000 Zadar, Croatia, OIB 77310519402 (“we”, “us”). Contact: info@orbit-solutions.io.
The short version
- We have no servers for this app. We never receive your scans, emails, passwords or account details.
- Everything stays on your device, except the email you choose to send. That goes directly from your device to your own mail provider (Google, Microsoft or your SMTP server), which delivers it.
- One service processes data on our behalf: RevenueCat, and only for the lifetime unlock. It checks purchases with the App Store or Google Play and receives an anonymous ID and purchase records. It never sees your scans, emails or mail accounts.
- No ads, no tracking, no crash reporting, and no analytics about how you use the app.
What the app stores on your device
All of the following is stored only in the app’s private storage on your device. Uninstalling the app deletes it.
| Data | Why | How it is stored |
|---|---|---|
| Sending accounts (email address, display name, provider) | To send from the account you chose | App storage |
| SMTP server settings and password | To log in to your mail server | Password encrypted with the Android Keystore / Apple Keychain |
| Microsoft sign-in token | To send through your Microsoft account without signing in every time | Encrypted with the Android Keystore / Apple Keychain |
| Google sign-in | Managed by Google’s sign-in library on your device; the app only asks it for permission to send | Google sign-in on the device |
| Destinations (name, recipient and CC addresses, default subject) | So you can send in one tap | App storage |
| Scanned page images | To build the PDF | Temporary cache, cleared by the system |
| Files you drop, share or pick to send as they are (any file type) | To attach them to the email | Copied into the app’s temporary storage until sent; the sent copy is kept like sent PDFs (below) |
| Sent PDFs and files, and sent history (date, file name, page count, sending account) | So you can open, share, resend or delete past sends | App storage. Kept until you delete them, or automatically after 30 days if you turn on auto-delete |
| Outbox (emails waiting to be sent) | To send when you’re back online, and to allow “Undo” | App storage, removed once sent or discarded |
| Text recognised in your scan | To suggest a file name and subject (e.g. “Invoice 2026-10-12”) | Processed on the device by Google ML Kit (Android, iPhone, iPad) or Apple’s Vision framework (Mac). Not stored and not uploaded |
| Purchase status and free-scan counter | To unlock the app after purchase | App storage and encrypted storage; the purchase itself is also recorded by RevenueCat (see below) |
When data leaves your device
Data only leaves your device in these cases, and only to the service named:
-
Sending a scan or file. The PDF(s) or files, recipients, subject and message text go to the provider of the account you send from:
- Google (Gmail API), if you signed in with Google
- Microsoft (Microsoft Graph), if you signed in with Microsoft
- Your SMTP server, if you set one up manually
That provider delivers the email and keeps it in your Sent folder under its own privacy policy.
-
Signing in. Google or Microsoft handle the sign-in screen and give the app a permission token.
-
Buying or restoring the lifetime unlock. Payment is handled entirely by Google Play or the Apple App Store; we never see your payment details. The app checks the purchase through RevenueCat (see below).
-
Sharing a scan. If you use the share button, the PDF goes to the app you pick.
All connections are encrypted (HTTPS/TLS). The only exception is an SMTP server you configure without encryption yourself.
Purchases (RevenueCat)
To sell and verify the one-time lifetime unlock we use RevenueCat, Inc. (USA) as a data processor. When the app starts, and when you buy or restore the unlock, the RevenueCat software in the app contacts RevenueCat’s servers, which check the purchase with the App Store or Google Play.
What RevenueCat receives: a random, anonymous app user ID created on your device (not linked to your name or email address), the store purchase receipt and transaction details (product, price, currency, date, store country), technical device details (device model, operating system and app version) and your IP address.
What it never receives: your scans, PDFs, emails, recipients or mail accounts.
Why: to confirm that a purchase is genuine, to unlock the app on your devices, to handle refunds and restores, and to give us aggregated sales statistics (for example, how many unlocks were sold). The legal bases are performing our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in preventing purchase fraud and understanding sales (Art. 6(1)(f) GDPR).
RevenueCat processes this data under a data processing agreement with us. Data transferred to the USA is protected by the EU Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework. RevenueCat’s privacy policy: https://www.revenuecat.com/privacy.
If you never buy the unlock, RevenueCat only receives the anonymous ID and device details needed to check whether you have one.
Google user data
If you sign in with Google, the app asks for one permission only: “Send email on your behalf” (https://www.googleapis.com/auth/gmail.send).
- It is used only to send the emails you start in the app.
- The app cannot read, search, modify or delete any email in your Gmail account.
- No Google user data is stored on any server or shared with anyone, and it is never used for advertising or to train AI models.
HyperFastScan’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke access at any time at https://myaccount.google.com/permissions.
Microsoft user data
If you sign in with Microsoft, the app asks for Mail.Send (send email as you) plus the standard sign-in permissions (openid, profile, email, offline_access) to show which account you’re using and to stay signed in. It cannot read your mailbox. You can revoke access at https://account.live.com/consent/Manage (personal accounts) or https://myapps.microsoft.com (work or school accounts).
Camera
The camera is used only to scan documents while you’re using the scanner. Images are not uploaded anywhere except as part of an email you choose to send. On a Mac, scans come from your own iPhone or iPad through Apple’s Continuity Camera and go straight to the app.
Your rights (GDPR)
Apart from the purchase records RevenueCat keeps for us (see above), we hold no personal data about you from this app. Everything else is on your device and under your control: delete scans, remove accounts in Settings, or uninstall the app. To access or delete your purchase records, email us. Since the ID is anonymous, include the date of your purchase and the store order number so we can find them. For data held by Google, Microsoft or your mail provider, contact them directly.
If you have questions, email info@orbit-solutions.io. You can also complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (AZOP), https://azop.hr.
Children
The app is not directed at children under 16.
Changes
If we change this policy, the new version will be published here with a new effective date. If we ever start collecting more data, for example crash reports, we will update this policy before that version of the app is released.