Privacy Policy
Last updated: June 2026 · ScanMyNotes is a product of Anvix Labs
1. Who we are
ScanMyNotes is a product of Anvix Labs, based in India. We build tools that help students and professionals. ScanMyNotes is available as an Android application on Google Play and as a web application at scanmynotes.in. For any privacy-related queries, contact us at support@scanmynotes.in.
2. What data we collect
Account data: Email address, and either a password or a Google account identity, depending on how you signed up. You can create a ScanMyNotes account in two ways:
— Email and password — your password is stored as a hash by Amazon Cognito; we do not see or store your plain-text password.
— Sign in with Google — your Google account email and display name are shared with us by Google after you grant permission. We do not receive your Google password.
Uploaded content: Images of your handwritten notes that you upload for OCR processing. Images are stored in encrypted AWS S3 storage (AES-256) in the Mumbai (ap-south-1) region. Each image is associated with your account.
Extracted text and OCR output: The text and structured layout extracted from your uploads, stored in the same region and tied to your account.
Generated audio: When you use text-to-speech, we generate an MP3 file and store it in encrypted S3 (Mumbai region). Audio files are associated with your account.
Usage data: Number of scans uploaded, audio generations performed, and AI corrections requested. We use this only to enforce plan quotas.
Subscription data: Your current plan, plan status, billing period, and Razorpay subscription identifier (if you have a paid plan). We do not store your card number, UPI ID, or any payment instrument details — these are handled entirely by Razorpay.
Technical data: Standard server logs (IP address, request timestamps, error logs) retained for up to 30 days for security and debugging. For the Android app: device identifiers, OS version, and app version may be sent to Google Play services as part of standard Android telemetry.
3. How we use your data
We use your data to:
— Provide OCR, text-to-speech, and AI correction features
— Enforce plan quotas (scans, audio, corrections)
— Process subscription payments via Razorpay
— Respond to support requests
— Detect and prevent abuse, fraud, and security incidents
What we do not do:
— We do not sell your data to any third party
— We do not use your notes content for advertising
— We do not use your notes or extracted text to train AI models
— We do not share your content with anyone except the service providers listed below
4. Third-party services we use
To operate ScanMyNotes, your data passes through the following service providers:
Google Cloud Document AI — processes your uploaded images for handwriting text extraction. Images are sent to GCP servers in the asia-south1 (Mumbai) region. Per Google's terms, your content is not used to improve Google services and is not retained after processing.
Amazon Web Services (AWS) — hosts your account, stored images, extracted text, generated audio, usage records, and subscription state. All data is stored in the ap-south-1 (Mumbai) region.
Amazon Bedrock (Nova Micro) — used for optional AI grammar and spelling corrections. Text is processed in the Mumbai region. AWS does not retain prompt content for Bedrock requests.
Amazon Polly — used for text-to-speech audio generation. Text is processed in the Mumbai region and not retained by AWS after the audio is generated.
Amazon Cognito — handles user authentication and password storage.
Google Sign-in (Google Identity) — if you choose to sign in with Google, Google handles the authentication and shares your email and name with us. Google's handling of your data is governed by Google's Privacy Policy.
Razorpay — processes subscription payments. We share with Razorpay only the data needed to create and manage your subscription (email, plan choice, internal user ID). Razorpay's handling of your payment data is governed by Razorpay's Privacy Policy.
Google Play — if you installed the Android app, Google Play handles install delivery, crash reporting, and (if you use it for sign-in) authentication tokens, per Google's policies.
5. Data retention
Different types of data are retained for different periods. We retain only as long as needed for the purpose.
Uploaded scans (image + extracted text):
— Free plan: 30 days from upload
— Basic plan: 180 days from upload
— Premium plan: 365 days from upload
After the retention window, scans and their extracted text are permanently and automatically deleted from our storage. This deletion happens regardless of account status.
Generated audio files: 365 days from generation, on all plans.
Account information (email, plan, subscription state): Retained for as long as your account is active.
Server logs: 30 days.
Payment records and invoices: Retained for 7 years to comply with Indian tax and accounting laws, even after account deletion.
Important: Because retention is tied to upload date and plan, free-tier scans are deleted 30 days after upload even if you are actively using the service. Plan to download or copy any content you need to keep.
6. Account deletion
You can delete your ScanMyNotes account and associated data at any time. We provide two levels of deletion:
Delete individual scans: From the History screen in the app, long-press any scan to enter selection mode, select one or more scans, and tap the trash icon. The selected scans, their extracted text, and any generated audio are permanently removed from our servers and your device. This action cannot be undone.
Delete your entire account: Email support@scanmynotes.in from your registered email address with the subject "Account deletion request." We confirm receipt within 24 hours and complete deletion within 30 days. For full step-by-step instructions, including what data is removed and what we are legally required to retain, see our Account Deletion page.
Once your account is deleted, your scans, extracted text, generated audio, and account profile are permanently removed. Payment records are retained for 7 years to comply with Indian tax law (see Section 5).
7. Your rights
Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable laws, you have the right to:
— Access the personal data we hold about you
— Request correction of inaccurate data
— Request deletion of your account and all associated data (see Section 6)
— Export your extracted text via the in-app download feature (save scans as PDF or TXT, share via the system share sheet)
— Withdraw consent for processing (this will result in account closure)
— Nominate another person to exercise your rights in case of death or incapacity
— Lodge a grievance with our Grievance Officer (see Section 11) before approaching the Data Protection Board of India
To exercise any of these rights, email us at support@scanmynotes.in from your registered email address. We will respond within 30 days.
8. Security
We use industry-standard security practices to protect your data, including:
— TLS encryption for all data in transit between your device and our servers
— AES-256 server-side encryption for all stored files in AWS S3
— Cognito-managed password hashing and JWT-based session authentication
No system is perfectly secure. If you believe your account has been accessed without your authorisation, contact us immediately at support@scanmynotes.in.
9. Cookies and tracking
The web version of ScanMyNotes uses only essential cookies required for authentication. We do not use advertising cookies, third-party analytics cookies, or social media tracking pixels.
The Android app does not use web cookies but may receive standard device identifiers from Google Play services that are common to all Play Store apps.
10. Children's privacy
ScanMyNotes is intended for users aged 13 and above. We do not knowingly collect data from children under 13.
Under the DPDP Act, 2023, processing personal data of any individual under 18 in India requires verifiable parental or guardian consent. If you are under 18, you must obtain consent from your parent or legal guardian before creating an account. We may suspend or delete accounts where we have reason to believe the user is a minor without such consent.
If you believe a minor has created an account without proper consent, please contact us and we will investigate and remove the account.
11. Grievance Officer
In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, our Grievance Officer details are:
Name: Kamalesh Joshi
Email: support@scanmynotes.in
Response time: We acknowledge grievances within 48 hours and aim to resolve them within 30 days.
12. Changes to this policy
We may update this Privacy Policy from time to time. For material changes affecting how we use your data, we will notify registered users via email at least 14 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.
13. Contact
Anvix Labs
India
Email: support@scanmynotes.in