The short version. Pageora collects nothing about you and has no server of its own. Your scanned documents are saved as ordinary PDFs in your own iCloud Drive, where Apple holds them for you and I cannot see them. The only exception is the one purchase, which Apple handles, and which is described below.
Nothing. There is no account, no sign-in, no analytics, no advertising identifier, no crash reporting service and no third-party SDK of any kind. I never receive your documents, the text inside them, their titles, their tags, or any record that you scanned anything at all. The App Store privacy label for Pageora reads Data Not Collected, because that is the truth rather than a summary of it.
Each finished document is written as a normal PDF into your own iCloud Drive, in a folder named Pageora that you can open in the Files app. That folder is yours. Apple stores and syncs it for you under Apple's terms, the same as any other file you keep in iCloud Drive, and it stays there if you delete the app.
The app also keeps working material on the device itself: the original page images from each scan and a small file recording where recognised words sit on the page, which is what makes search and redaction possible. This material is local to the device, is never uploaded by the app, and is removed when you delete the document or the app. If you have iCloud device backup switched on, it is included in that backup the same way any other app's local data is, under Apple's terms rather than mine.
If you are signed out of iCloud, everything stays on the device and the app tells you so on the library screen.
The camera is used for one thing, photographing the pages you choose to scan, and iOS asks your permission the first time you tap Scan. Camera frames are processed on the device and are not sent anywhere. Pageora does not use the microphone, your location, your contacts, your calendar or your photo library.
Reading the words on your pages, and suggesting a title and tags for a new scan, both happen on your device using the recognition and on-device intelligence built into iOS. The contents of your documents are not sent to me, to Apple, or to any other service for this. Where a device cannot run the on-device model, the app falls back to naming the scan from its date and its first line of text, which is also computed locally.
So that your Home Screen search can find a document by words inside it, the app adds those words to your iPhone's own Spotlight index. That index belongs to your device and to iOS. It is not sent to me. Documents you put in the locked folder are removed from it.
There is no server behind Pageora, so nothing you scan is sent to me. The app touches the network in exactly two places, both of them Apple's: the App Store, to show the price of the purchase, to complete it, and to check whether you already own it; and iCloud Drive, to store and sync your own documents. Everything else the app does works with no connection at all.
One small thing also travels through Apple's iCloud key-value storage, and it is fair to name it: a single yes-or-no marker recording that the app has already asked you to rate it, so that reinstalling or picking up a second device does not produce a second request. It carries no information about you and nothing about your documents, and it reaches Apple's iCloud rather than any server of mine.
Pageora Unlimited is sold and processed by Apple. I never see your name, your payment details or your Apple Account. What the app receives back from Apple is a signed receipt saying whether the purchase has been made, and that is the only thing it uses to unlock the paid features. I cannot tell who bought it, and I hold no record of it.
Apple provides aggregate sales reporting, the same as for any App Store product, counting purchases by country and period without identifying anybody. Apple's handling of your purchase is covered by Apple's privacy policy.
The Face ID locked folder hides documents from the library, from search, from Spotlight and from Siri until you authenticate. That is a visibility control. The PDF itself remains a normal readable file in your own iCloud Drive folder, so somebody with access to your iCloud Drive can still open it. The app says this in the same words before you lock anything for the first time. It is not encryption, and I do not describe it as encryption.
Apple asks developers to declare why they use certain system interfaces. Pageora declares two, and both are in the privacy manifest that ships inside the app: reading and writing its own settings, and checking how much free space the device has before writing a backup of your library. Neither is used to identify you or your device.
The app is rated 4+ and collects no data, so there is nothing to disclose under children's privacy rules. It does contain one purchase, which on a child's account requires a parent's approval through Apple's Ask to Buy.
If this policy ever changes, the new version will be posted at this address with a new date at the top. Since the app collects nothing, any change would be a clarification rather than a new use of data.
| Data | Who sees it |
|---|---|
| Your scanned PDFs | You, in your own iCloud Drive. Never me. |
| The text recognised on your pages | Your device, and your device's Spotlight index |
| Original page images and word positions | Only your device |
| Titles and tags suggested for a scan | Computed on your device, kept on it |
| Payment details and Apple Account | Apple only, never me |
| Whether the purchase was made | Your device, from Apple's signed receipt |
| That the rating request has been shown once | Your device and your own iCloud, never me |
| Analytics, advertising identifiers, crash reports | Nobody, none are collected |
Questions about this policy: hello@no.spam.invalid.handfulapps.com