Privacy Policy

Your documents stay on your device.

Last updated: June 2026 · Effective immediately

The short version

  • PaperKeep keeps your scanned documents on your device. There is no PaperKeep server, no analytics pipeline, and no marketing database. Apple's App Store privacy label shows "Data Not Collected" because that is accurate.
  • Scanning, the on-device text and date reading, PDF split/merge, and image processing all run on your device using Apple's frameworks. The document content is never sent to us.
  • You can use the app without an account, sign-up, email address, or any identifier.
  • Optional iCloud sync stores your documents in your own private iCloud account (Apple's CloudKit) so they appear on your other devices. They go to your iCloud, never to a PaperKeep server, and we cannot read them. Sync is off until you turn it on.
  • Secure folders and locked documents are gated behind Face ID / Touch ID / your passcode. Every save requires a document type, chosen by you or pre-selected by on-device recognition for you to confirm. When the type is Payment card, PaperKeep stores only the expiry date, the card brand and bank name, the card colour, and at most the last 4 digits; the photo and the full number are never saved.
  • Reminders are local notifications scheduled on your device. The optional "Add to Calendar" feature writes only the reminder events you choose to your own Calendar.
  • Apple processes the subscription payment. We never see your payment details.

1Who we are

PaperKeep is an iOS app developed and operated by Esprizzle Inc. ("Esprizzle", "we", "us", "our"). This Privacy Policy describes how PaperKeep handles information when you use the PaperKeep app for iPhone and iPad and the paperkeep.esprizzle.com website.

You can contact us at any time about this policy at contact@esprizzle.com.

2What we don't collect

PaperKeep is built so that the question of "what we collect" mostly does not apply. PaperKeep does NOT collect, store, or transmit any of the following to any server operated by Esprizzle:

  • Your name, email address, phone number, or any other contact information.
  • Your location, IP address, or device identifiers (other than the Apple-provided receipt confirming your subscription).
  • The images, pages, or PDFs of the documents you scan or import.
  • The text or dates that the app reads from your documents on-device.
  • Your folder names, document names, notes, important dates, or reminder settings.
  • The contents of any QR code you generate.
  • Usage analytics, crash logs, app-open events, or feature-engagement data.
  • Third-party tracking identifiers, advertising IDs, or attribution data.

The App Store privacy nutrition label confirms this with the line "Data Not Collected." That status reflects the truth: there is no PaperKeep backend, no analytics service, no log server, and no ad network in the app.

3What stays on your device

Everything PaperKeep needs to work lives on your iPhone or iPad. It is never transmitted to us. (If you turn on iCloud sync, a copy also goes to your own iCloud; see Section 5.)

Scanned and imported documents

When you scan a document with the camera or import a PDF or photo, PaperKeep saves the page images inside the app's private sandbox (a storage area only PaperKeep can read on your device). When you export or print, PaperKeep builds the PDF or image on-device. We never receive your document files.

On-device text and date reading

To suggest an expiry or renewal date for a document (for example on a passport or insurance card), PaperKeep uses Apple's on-device Vision text recognition to read the document and find a likely date. This recognition happens entirely on your device. The extracted text and dates are used to fill in the date field (and, for payment cards, to suggest the brand, the bank name, and the last 4 digits for you to confirm) and are not sent anywhere. The full card number is never stored; see Section 9.

Folders, names, dates and settings

Your folders, document names, important dates, reminder choices, sync preference, and other settings are stored locally in the app's sandbox.

QR codes

QR codes you generate (link, text, Wi-Fi, or contact) are created on your device. PaperKeep does not transmit the QR contents anywhere. A QR code you save to your library is stored locally like any other document.

4Camera, Photos, and Files access

Camera

PaperKeep requests camera access so you can scan documents. The camera is used only while you are actively scanning, using Apple's document-scanning system. Captured pages are saved to PaperKeep's local sandbox. No frame is sent to us.

Photos

When you choose to import images, PaperKeep uses Apple's photo picker. We access only the specific images you select. PaperKeep does not browse your wider photo library.

Files

When you import a PDF, PaperKeep uses the standard iOS document picker. We access only the specific files you choose. PaperKeep does not browse your file system or iCloud Drive on its own.

5Optional iCloud sync

PaperKeep includes an optional iCloud sync feature, which is off by default. When you turn it on in Settings, PaperKeep uses Apple's CloudKit to keep your documents in sync across the Apple devices signed in to your Apple Account.

  • Your documents are stored in your own private iCloud database under your Apple Account. They are not stored on, and never pass through, any server operated by Esprizzle.
  • We have no access to your iCloud data. We cannot read, copy, or retrieve your documents.
  • The data handled by iCloud is governed by Apple's iCloud terms and the Apple Privacy Policy. Apple manages the storage, encryption in transit and at rest, and access controls.
  • If you turn sync off, PaperKeep stops mirroring new changes to iCloud. Documents already in your iCloud remain there until you delete them in the app or remove the app's iCloud data from your Apple Account settings.

In short: iCloud sync moves your documents between your devices through your iCloud, not to us.

6Face ID, Touch ID, and secure folders

PaperKeep lets you lock folders and individual documents so they can only be opened after authentication. This uses Apple's LocalAuthentication framework (Face ID, Touch ID, or device passcode). PaperKeep never receives or stores your face or fingerprint data; that biometric data is held and verified by iOS in the device's Secure Enclave, and the app only learns whether authentication succeeded.

While a folder or document is locked, PaperKeep hides its contents from the app's own previews. Locked items are also kept out of search and on-device indexing while locked.

7Important dates, reminders, and notifications

You can attach an important date (such as an expiry or renewal) to a document and ask PaperKeep to remind you before it lapses. Reminders are delivered as local notifications scheduled by your device through Apple's UserNotifications framework. They are computed and scheduled on-device; no reminder data is sent to us.

PaperKeep requests notification permission only at the moment you set a reminder, so the prompt is tied to a feature you are actually using.

8Optional Calendar integration

When setting reminders, you can optionally enable "Also add to Calendar." If you do, PaperKeep asks for calendar access and writes a calendar event for each reminder date you chose, titled with the document name and what it relates to, into your default calendar.

  • PaperKeep only creates, updates, or removes the events it added for your reminders. It does not read your other calendar events for any purpose beyond locating its own events to keep them in sync.
  • If you turn the option off, change the date, mark the item renewed, or delete the document, PaperKeep removes the events it created.
  • Calendar events you create may then sync through whatever calendar account you use (for example your iCloud calendar), according to that provider's own practices. PaperKeep does not transmit your calendar to us.

9Sensitive documents and the card rule

PaperKeep is often used for identity documents, insurance papers, and financial cards. We treat that content with care:

  • We do not read, analyze, or transmit the content of your documents to ourselves. The only on-device reading we do is the optional date detection described in Section 3, used solely to suggest a reminder date.
  • Credit and debit cards: saving a scan always requires you to choose its document type, and your choice controls how the scan is stored. When you choose Payment card, PaperKeep stores only the expiry date, the card brand, the bank name you confirm, the card's average colour (sampled on-device so the app can draw a stand-in card in your library), and at most the last 4 digits of the number (prefilled when readable; you can edit them or leave them blank). The page photo is discarded and never written to storage, the full card number is truncated in memory and never saved, and the security code is never read. If iCloud sync is on, the stored card fields go to your private iCloud with CloudKit field-level encryption. On-device recognition may pre-select the Payment card type and prefill the digits for you to confirm or change; the type selected when you save decides. If you save a card under a different document type, the photo is kept like any other document.

You decide what to scan and keep. For anything sensitive, including payment cards, please keep it in a Secure folder (Section 6) and delete it when you no longer need it.

10Payments and subscription

PaperKeep offers a 14-day free trial and, after that, an auto-renewing subscription to PaperKeep Pro (yearly or monthly), processed entirely by Apple through standard In-App Purchase. We never see or store your credit card number, billing address, or other payment details. The only purchase-related data the app reads is the Apple-signed entitlement confirming your subscription status; it is processed on-device and is not transmitted to us.

You manage or cancel your subscription in your Apple Account settings. Refund requests for App Store purchases are handled directly by Apple at reportaproblem.apple.com.

11Children's privacy

PaperKeep is a productivity tool for organizing documents and is not directed to children. It does not offer accounts, social features, or any sign-up. Because PaperKeep does not collect personal information from any user, it does not collect personal information from children under 13 (United States Children's Online Privacy Protection Act, COPPA) or under 16 where applicable. If you believe a child has provided personal information to us, contact contact@esprizzle.com.

12European Union (GDPR)

Because we collect no personal data on any server we operate, the legal bases under Article 6 of the General Data Protection Regulation (GDPR) generally do not apply to PaperKeep. Where data is processed on your device to run the app's features, the basis is your consent, given by installing the app and granting iOS permissions (camera, photos, calendar, notifications) as you choose.

If you enable iCloud sync, that processing is performed by Apple as part of your own iCloud account, governed by Apple's privacy terms. If you are an EU/EEA or UK resident, you may exercise your rights of access, rectification, erasure, restriction, portability, and objection to the extent any personal data is held by us (which, by design, is normally none). Contact contact@esprizzle.com.

13Other jurisdictions

PaperKeep is compliant by design with the California Consumer Privacy Act (CCPA/CPRA), the Australian Privacy Act 1988, the UK Data Protection Act 2018, Canada's PIPEDA, Brazil's LGPD, and equivalent frameworks. Because we do not collect personal information, the substantive disclosure, opt-out, sale, and access-request obligations of these statutes have no underlying data held by us to apply to. We do not sell or share personal information. We will respond to any verifiable consumer request within the applicable timeframes.

14Third-party services

PaperKeep intentionally avoids third-party SDKs that perform tracking, analytics, advertising, or crash reporting. The services PaperKeep interacts with are Apple's own, used for the limited purposes below:

Apple App Store & StoreKit Distribution and subscription payment processing. Governed by Apple's privacy policy.
Apple iCloud (CloudKit) Optional only. Syncs your documents within your own private iCloud account. We have no access. See Section 5.
Apple VisionKit & Vision On-device document scanning and text/date recognition. No data transmitted off-device.
Apple PDFKit On-device PDF building, split, and merge. No data transmitted.
Apple EventKit Optional only. Creates calendar reminder events you choose. See Section 8.
Apple UserNotifications Schedules local reminder notifications on your device.
Apple LocalAuthentication Face ID / Touch ID / passcode checks for Secure folders. No biometric data reaches the app.

15Data retention

The data PaperKeep creates lives on your device (and, if you enable sync, in your own iCloud). Its retention is controlled by you:

  • Documents, folders, names, and notes: kept until you delete them in the app, or delete the app.
  • Important dates and reminder settings: kept until you change or remove them, or delete the document.
  • Calendar events PaperKeep created: removed when you turn the option off, change the date, mark renewed, or delete the document.
  • iCloud copies: kept in your iCloud until you delete the documents in the app or remove PaperKeep's iCloud data from your Apple Account settings.
  • Apple subscription entitlement: kept by iOS in association with your Apple Account; we do not control or retain a separate copy.

Deleting the PaperKeep app removes its on-device sandbox and all local data.

16Security

Because we operate no server and store no personal data off-device, the principal security boundaries for PaperKeep are the iOS app sandbox, the Secure Enclave for biometric checks, and (when you enable sync) Apple's iCloud. We do not store cryptographic keys, API secrets, or user credentials on any system we operate.

No internet-connected system is perfectly secure. If we ever become aware of a security incident that could affect users, we will post a notice at paperkeep.esprizzle.com and, where we have a means to reach you, notify you.

17International data transfers

Because PaperKeep operates no servers and stores no personal data off your device, we perform no international data transfers. If you enable iCloud sync, your device communicates with Apple's iCloud in accordance with Apple's own data-handling and data-location practices.

18Changes to this policy

We will update this Privacy Policy when our practices change. The "Last updated" date at the top reflects the most recent change. For material changes that affect how the app handles data, we will post a prominent notice in the app and at paperkeep.esprizzle.com at least 14 days before the change takes effect, so you have time to review.

19Contact us

For any privacy-related question, request, or concern, please reach out at:

Esprizzle Inc.
Email: contact@esprizzle.com
Web: www.esprizzle.com
Subject line: "PaperKeep Privacy"

We aim to acknowledge privacy emails within one business day.