Privacy Policy

At a glance

• Your documents never leave your phone. Photos, PDFs and recognized text are stored only on your device. We do not receive them and cannot access them.
• No account, no advertising, no audience measurement or tracking tools, no cookies.
• Purchases are processed by Apple or Google. We receive no payment data.
• A few service providers process limited technical data: Google on Android (Google Play services, for the document scanner) and Cloudflare for hosting the website and the web version.
• If you write to us, your message, routed by Cloudflare to our Google mailbox (Gmail), is used only to reply to you.
• You have rights over your data and may lodge a complaint with the CNIL.

1. Data controller

The data controller is CALCENA, a SARL registered in the Trade and Companies Register (RCS Paris 984 839 555), with its registered office at 66 boulevard Voltaire, 75011 Paris, France, the publisher of Clefdoc (hereinafter “CALCENA” or “we”).

For any question about your data: support@clefdoc.com, or by post to the address above.

CALCENA has not appointed a data protection officer, as such an appointment is not mandatory for its activities.

2. What we do not collect

• Your documents: photos, edited pages, PDFs, exported images and recognized text. They are never sent to CALCENA or to any third party.
• Your identity: Clefdoc does not require an account, a name or an email address to work.
• Your location, your contacts or your photo library (other than the images you yourself choose to import, which remain on your device).
• Browsing or usage data: the app, the web version and the website include no audience analytics tool, no advertising module and no advertising identifier.
• Cookies: neither the website nor the web version sets any.

We do not sell, rent or exchange any data. We do not carry out targeted advertising, profiling or automated decision-making producing legal effects concerning you.

Some technical processing is nevertheless necessary and is carried out by service providers; it is described in full below.

3. What stays on your device

Your documents

Captured or imported images, the settings for each page (cropping, filter, rotation), the documents generated and the recognized text are saved in the app’s storage on your phone or, for the web version, in your browser’s local storage. They remain there until you delete them, uninstall the app or clear the site data in your browser.

We hold no copy of them: deletion is permanent and we cannot restore a lost document.

Your settings

Your preferences (interface language, default filter, PDF page format, export quality, capture options) are saved in the same way, only on your device.

This storage is strictly necessary for the service you request; it is not read by us or by third parties and therefore does not require your consent (Article 82 of the French Data Protection Act).

Camera and scanning

The camera is used only during scanning, after you have granted permission. On iPhone, Clefdoc uses Apple’s built-in scanner, which runs on the device. On Android, it uses the document scanner provided by Google Play services (see section 4.3). In the web version, the image is processed by your browser, on your device.

Text recognition

In the iPhone and Android apps, text recognition works entirely offline, on the device. In the web version, the analysis also takes place in your browser: the recognition engine and its language files are built into the web version and served by the same website (see section 4.4), without involving any other service. Your images and the recognized text are not transmitted to anyone.

Export and sharing

A document leaves Clefdoc only if you export or share it yourself, to the destination of your choice (messaging app, cloud storage service, another app). The service you choose then processes the document under its own terms.

Device backups

If you have enabled a backup of your device (iCloud, Google), Clefdoc’s data may be included in it, depending on your settings. These backups are managed by Apple or Google, under your control, in accordance with their own policies.

4. Data processed by third parties

The iPhone and Android apps do not communicate with any CALCENA server. The processing described below is carried out by third parties, either on their own behalf (in which case they are responsible for it) or on ours.

4.1 Apple (App Store)

What is processed

Downloading the app, your purchases and subscriptions, their payment, their renewal and any refunds, linked to your Apple account.

By whom

Apple, on its own behalf, under its privacy policy.

What CALCENA receives

Sales reports prepared by Apple (for example: product purchased, date, country, amount), without your payment data. The validity of your purchase is verified on your device. If you have agreed, in your iPhone settings, to share analytics data with app developers, Apple may also provide us with crash reports and aggregated usage statistics.

Purpose and legal basis

Providing the access you purchased (performance of a contract), keeping our accounts (legal obligation) and fixing defects in the app (legitimate interest).

Retention period

Accounting records are kept for ten years (Article L123-22 of the French Commercial Code, Code de commerce). Other reports remain in Apple’s developer account, for the periods set by Apple.

4.2 Google (Google Play)

What is processed

Downloading the app, your purchases and subscriptions, their payment, their renewal and any refunds, linked to your Google account.

By whom

Google, on its own behalf, under its privacy policy.

What CALCENA receives

Sales reports prepared by Google (for example: product purchased, date, country, amount, transaction reference), without your payment data. The validity of your purchase is verified on your device. If you have agreed, in your device settings, to share usage and diagnostics data, Google may also provide us with crash reports and aggregated statistics.

Purpose and legal basis

Providing the access you purchased (performance of a contract), keeping our accounts (legal obligation) and fixing defects in the app (legitimate interest).

Retention period

Accounting records are kept for ten years (Article L123-22 of the French Commercial Code, Code de commerce). Other reports remain in Google’s developer console, for the periods set by Google.

4.3 Google Play services on Android (document scanner)

What is processed

On Android, the document scanner (edge detection, image capture) is provided by Google Play services, using Google’s ML Kit technology. The images are analyzed on your phone: the images are not transmitted to Google. However, Google Play services may send technical diagnostic data to Google, such as the device model, the operating system version, the app’s identifier and version, and performance metrics.

By whom

Google, under its privacy policy. CALCENA has no access to this data.

Purpose and legal basis

Offering you a reliable scanner built into Android (CALCENA’s legitimate interest); Google uses this data for diagnostics and to improve its services.

Retention period

Set by Google.

4.4 Cloudflare (hosting of the website and the web version)

What is processed

The clefdoc.com website and the app.clefdoc.com web version are hosted on Cloudflare’s network, which also manages the domain name (DNS). When you visit them, Cloudflare processes technical connection data: your IP address, the date and time, the page or file requested, information about your browser and operating system, and traffic routing data. The same applies when the web version loads the text recognition engine and its language files, which are served by the same website. Your documents are never sent to the hosting provider: the web version processes and stores them in your browser.

By whom

Cloudflare, Inc. (United States), as CALCENA’s processor, under its Data Processing Addendum, which forms part of the terms governing its self-serve plans, including the free plan. Cloudflare also uses some of this data on its own behalf, as a controller, in particular to detect and block malicious activity on its network and to improve its services. See Cloudflare’s privacy policy.

Purpose and legal basis

Displaying the pages, running the web version, keeping the website secure and preventing abuse (CALCENA’s legitimate interest).

Retention period

A limited period, set by Cloudflare according to the needs of the service and the security of its network; Cloudflare does not publish the exact period. CALCENA does not enable any Cloudflare audience measurement service and uses this data only for incident diagnosis and security.

5. Messages sent to support

What is processed

Your email address, your name if it appears, the content of your message and any attachments, and any information you choose to give us (device model, purchase reference, etc.).

Purpose and legal basis

Solely to reply to you and handle your request (CALCENA’s legitimate interest; performance of the contract where the request concerns your purchase).

Retention period

No more than three years after our last exchange, after which it is deleted. The routing log kept by Cloudflare (see below) is retained for 31 days, according to Cloudflare’s documentation.

Service providers

Messages sent to support@clefdoc.com are received by the Cloudflare Email Routing service, which immediately forwards them to CALCENA’s mailbox, hosted by Google (Gmail). Cloudflare, Inc. acts as CALCENA’s processor: it does not keep the content of messages, but maintains a routing log (sender and recipient addresses, subject, date and time, delivery result). The messages are then kept in that mailbox for the period stated above.

Please do not send us any document containing sensitive information unless it is essential to resolve your issue; as a rule, we never need it.

6. Transfers outside the European Union

Some service providers may process data outside the European Union:

• Cloudflare (United States): Cloudflare participates in the EU–U.S. Data Privacy Framework, recognized by the European Commission’s adequacy decision of 10 July 2023; its Data Processing Addendum also provides for the European Commission’s standard contractual clauses. As its network is spread around the world, your requests and the messages you send to support may be processed in data centers located outside the European Union.
• Google (Google Play, Google Play services, Gmail) and Apple (App Store): transfers are governed by the safeguards provided for by the GDPR and described in their privacy policies (EU–U.S. Data Privacy Framework, European Commission standard contractual clauses).

You can obtain further information about these safeguards by writing to us.

7. Security

Because your documents stay on your device, no CALCENA server holds them: they cannot leak from our side. Their protection depends on that of your device; we recommend that you lock it with a passcode or biometrics and keep it up to date.

The website and the web version are served exclusively over an encrypted connection (HTTPS). The website loads no external resources.

8. Minors

Clefdoc does not ask for any identifying information and does not seek to collect data about children. Purchases made by a minor are subject to the parental controls offered by Apple and Google. If a minor has written to us, their parents or legal guardians may ask us to delete their messages.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing and objection (in particular to processing based on our legitimate interest) and, where applicable, the right to data portability. You may also set out instructions regarding what happens to your data after your death.

To exercise these rights, write to us at support@clefdoc.com or by post to CALCENA, 66 boulevard Voltaire, 75011 Paris, France. We will reply within one month, which may be extended by two months for a complex request; in that case, we would let you know. We will only ask for proof of identity if we have reasonable doubts.

As your documents are only on your device, you keep direct control over them: you can view, export or delete them at any time in Clefdoc. For data processed by Apple or Google on their own behalf, please contact them directly.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL, the French data protection authority): www.cnil.fr, 3 place de Fontenoy, 75007 Paris.

10. Changes

We will update this policy if the way Clefdoc works or the regulations change. The date of the last update appears at the top of the page. In the event of a significant change, in particular if a new data processing operation were introduced, we will inform you in the app or on this website before it takes effect.

See also: terms of use and sale, legal notice, help and contact.