Privacy notice

Controller and contact

Emanuel Appuhamy
Ackerstraße 31
40822 Mettmann
Germany

Email: info@elyon-web.de
Phone: +49 179 1501865

This notice applies to the ScanCierge iPhone app. Effective: 9 November 2026. The separate privacy notice published on our website applies when you visit that website.

The essentials

ScanCierge recognizes documents directly on your iPhone. It uses Apple's on-device Vision text recognition and, where available on your device, Apple's on-device Foundation Model for interpretation. You do not need an account. We operate no document server, use no external AI or OCR service, and the app does not transmit your documents to us. The app contains no advertising, analytics SDK, or tracking. A task or calendar event is kept only after your confirmation. ScanCierge can make mistakes; verify important details against the original.

Data processed by the app

On your device, ScanCierge processes images you select or capture, an optional description, recognized text and source positions, proposed and corrected details, amounts, appointments, deadlines, reminders, decisions, and completion status. It also processes settings and identifiers needed to associate its calendar events and notifications. The app stores one reduced and normalized source image per document; it does not permanently keep additional original copies. GPS and other unnecessary image metadata are removed during normalization.

Documents may contain sensitive information, including health, insurance, or financial data, and data about other people. These contents are not transmitted to Emanuel Appuhamy. Import only content you are entitled to use. The app makes no automatic payments, legal decisions, or contact with third parties.

Purposes and legal bases

Local processing is used only for the functions you request: text recognition, on-device interpretation, task proposals, storage, calendar integration, reminders, and completion. The on-device Apple model is used only where available; otherwise the app continues with its local rule-based analysis. To the extent that we act as controller for this processing, providing the app functions requested by you is based on Article 6(1)(b) GDPR.

If you contact support, we process your contact details and message to handle your request: under Article 6(1)(b) GDPR where the matter concerns a contract or pre-contractual request, otherwise under Article 6(1)(f) GDPR. Our legitimate interest is answering your request and supporting app use. Legally required retention is based on Article 6(1)(c) GDPR. Where consent is required for a specific operation, Article 6(1)(a) GDPR applies. An iOS permission is not blanket consent for unrelated processing.

Emanuel Appuhamy has no remote access to documents stored only inside your app. There is no solely automated decision producing legal or similarly significant effects within the meaning of Article 22 GDPR.

Camera, photos, calendar, and notifications

Camera: iOS requests camera access when you use the scanner. If you decline, you can still select existing images.

Photos: The native iOS picker provides only the images you choose. You can select up to ten images at once; ScanCierge processes each as a source document. The app does not request unrestricted access to your photo library and does not change your originals.

Calendar: iOS requests access when you use calendar features. Full calendar access is used to select a writable calendar, create confirmed events, detect scheduling conflicts, and verify or remove clearly associated events. The app writes the title, time, optional location, and a technical association to your selected calendar—not the document image or full recognized text. Your calendar provider may synchronize those events under its own terms and privacy notice.

Notifications: ScanCierge schedules local reminders and completion questions through iOS. No remote push notification is sent by a ScanCierge server. Notification text is general by default; a technical identifier associates your response with the right item. iOS may display notifications on the Lock Screen.

You can change permissions at any time in iOS Settings. Document analysis remains usable without calendar or notification access.

Storage, device protection, and backups

The database and source images are stored inside the protected app container. ScanCierge uses complete iOS file protection for persistent sensitive files. Protection also depends on the security state and configuration of your device; we do not claim separate encryption of every database field.

Tasks, history, OCR evidence, settings, and one source image may be included in iOS system backups because they are user data that cannot be recreated without loss. Depending on your settings, this may include an iCloud or computer backup. ScanCierge provides no proprietary cloud synchronization and cannot later remove existing system backups. Temporary work files and export files are not retained as permanent user data.

Device backups, calendar providers, and external services you select may be subject to their own privacy and transfer rules, potentially including processing outside the EEA. ScanCierge itself does not send your documents to those services.

Export, clipboard, and external links

The data export is generated locally as JSON. Document images are included only if you expressly select that option. You choose the recipient or storage location through the native share sheet; the selected service's rules then also apply. Temporary export copies made by the app are cleaned after sharing or at the next launch.

Before copying a task description, you can review and edit it. It may contain personal information. The app gives its clipboard entry a limited lifetime and marks it as local; data pasted elsewhere is governed by that destination.

Contact links open in the browser or another chosen app only at your request. Those services may receive their usual technical access data. Legal texts included in ScanCierge remain available offline.

Retention and deletion

Local data remains until you delete it in ScanCierge or remove the app and its data. Completed and declined items remain in chronological history with their status; they are not automatically deleted after a fixed period. Associated source images and OCR evidence remain available for review. In Settings, you can delete all local items, source images, temporary exports, and ScanCierge notifications. You separately decide whether clearly associated calendar events should also be removed.

This does not delete original photos in your library, exports saved elsewhere, existing backups, or events you chose to keep in Calendar. App removal and restoration are additionally governed by iOS. We do not promise forensic overwriting of every flash-storage remnant.

Support requests are deleted when the matter is resolved unless continued processing or statutory retention is required. Please do not send unredacted sensitive documents unless they are necessary for the support request.

Your rights

Where the legal requirements are met, you have rights of access, rectification, erasure, restriction, and data portability. You may withdraw consent with effect for the future. You may object, on grounds relating to your situation, to processing based on legitimate interests.

For data held only in your local app, use its correction, export, and deletion controls. Emanuel Appuhamy has no server-side copy of those documents. For data we actually received, such as a support message, contact info@elyon-web.de.

You may lodge a complaint with a data protection authority. For our establishment in North Rhine-Westphalia, this includes the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Postfach 20 04 44, 40102 Düsseldorf, Germany; www.ldi.nrw.de. Your right to contact another competent supervisory authority remains unaffected.

Changes

We update this notice if functions or processing change. The effective date is shown above. Changes to this notice do not create automatic consent to new processing.