PageBeamPageBeam Privacy Policy
2026-10-17
Scanning and OCR run on your device. Optional subscription features—cloud backup, document conversion, AI and share links—send selected documents to servers.
1. Information stored on your device
Scanned photos, the PDF documents and previews you create, the searchable text read by text recognition, saved signature images, and display, language and scan settings are stored only on your device. Scanning and text recognition run on your device; photos and text are not sent anywhere.
2. Camera and photos
The camera is used only to scan documents. Importing photos uses the operating system photo picker, so the app does not access your whole photo library; only the photos you choose are passed to the app. You can turn off the permission in device settings.
3. Sign-in and information stored on our server
If you sign in with Apple (Google on Android) to use cloud backup and sync, your account identifier and email (if the provider shares it) are stored with our authentication service (Supabase). Signing in is optional and is not needed to scan, use the PDF tools, or buy a subscription. Signing in is required only for Word/Excel to PDF conversion, so that the daily limit can be applied.
4. Cloud backup
If you are a signed-in PRO subscriber and turn on sync, your PDF documents, preview images, signature images, document titles, folders, page counts and searchable text are stored on our server (Supabase) and synced to your other devices. Password-protected PDFs are uploaded as encrypted files, without previews or searchable text. If you turn sync off or do not sign in, your documents are not sent to a server.
5. Document conversion (Word/Excel to PDF)
Only when you choose Word / Excel to PDF and agree to the upload prompt, the selected .doc, .docx, .xls or .xlsx file is sent over an encrypted connection to our conversion server, which runs on Google Cloud. The server uses the file only to create the PDF, returns the PDF to your device, and deletes the file immediately after conversion. We do not store, share, analyze or use the file or its contents for any other purpose, and file names and contents are not written to logs. To apply the daily limit we record, per account, the date, file type (Word or Excel) and file size of each conversion for up to 35 days. This feature requires sign-in and PRO. You can withdraw your upload consent at any time on the conversion screen.
6. AI tools (summary, questions, translation, tables, Word)
Only when you choose an AI tool on a document and agree to the consent prompt, the text of that document (or, for table recognition and Word conversion, images of the pages you choose) is sent over an encrypted connection to our server, which passes it to an AI service provider (Anthropic) to produce the result and returns the result to your device. We do not store the document content or the result on our servers or write them to logs, and the provider processes them only to return the result. To apply the daily limit we record, per account, the date, tool type and page count for up to 35 days. These tools require sign-in and PRO, and you can withdraw your consent at any time on the AI screen.
7. Share links
If you create a share link, the PDF you choose is uploaded to our server (Supabase storage), and anyone who has the link can download it until it expires (1 to 30 days) or you turn the link off. We keep the file and the link's title, expiry and view count only for that period; expired and turned-off links and their files are deleted automatically within about two days, and all of them are deleted when you delete your account. Share links require sign-in and PRO. Do not post links publicly if the document is confidential.
8. Notifications
If you sign in and allow notifications, we store your device notification token, app language and time zone on our server and send notices about subscription end and scheduled cloud backup deletion through Google (Firebase Cloud Messaging). You can turn notifications off in system settings at any time, and the token is deleted when you sign out or delete your account. The retention and deletion rules above do not depend on whether a notification reaches you.
9. Subscriptions and payments
Apple App Store or Google Play handles payments; we do not receive card details. We process product, order ID, expiry and purchase status to verify purchases and provide features. Google Play server notifications may record a purchase-token hash and cancellation status even without sign-in. Signing in links purchases to your app account. Account deletion removes that user link; transaction hashes, products, order IDs and cancellation status are retained to prevent regranting refunded purchases. Raw Google purchase tokens are not stored in the transaction ledger.
10. Crash information
If the app crashes, an error report (device model, operating system version, app version, error details and a random installation ID) is sent to Firebase Crashlytics to help us fix the problem. It does not include document content, titles or photos. Development builds do not collect it.
11. Ads and tracking
There are no ads. Firebase Analytics measures screen and feature use, purchase events, app installation identifiers, device information and approximate location derived from IP. Document content, names and search text are not included in analytics events. Advertising identifier collection and ad personalization are disabled.
12. Retention and deletion
Documents on your device are removed when you delete the app or a document. Server data (documents, signatures, subscription records) is deleted when you choose Settings → Account & backup → Delete account while signed in; if you used Sign in with Apple, the link to Apple is revoked too. If you cannot open the app, you can request deletion by email as described on the delete-account page. If your subscription ends, we keep your cloud backup for 6 months from the day it ends and notify you in the app (and by email when we have an address) 30 days before we delete it. We delete only after that 30-day notice has been given; if the notice never reaches you, we delete the backup 12 months after your subscription ended. Subscribing to PRO again before then resets the retention period. Even after a subscription ends, deleting a document on your device also deletes its server copy. Conversion usage records (date, file type and size only) are deleted automatically after 35 days and when you delete your account.
13. Service providers
Supabase provides authentication and server storage, Google (Firebase) provides crash reporting, and Apple and Google process payments. We do not sell your information or share it with anyone else. The conversion server runs on Google Cloud.
14. Children and changes
PageBeam is for general users and does not knowingly collect children's personal information. If this policy changes, we update the effective date on this page.