Privacy Policy

Summary: By default, PAAR keeps your documents on your iPhone. Scanning, OCR, classification, and search run on-device. We do not run analytics SDKs or advertising networks.

Optional PAAR Pro adds end-to-end encrypted cloud sync. If you turn sync on, only ciphertext is sent to our API and storage; we cannot read your document titles, text, or files. That path is opt-in and requires an account plus recovery-phrase enrollment.

What we do on your device (always)

• When you scan or import a document, Apple's on-device frameworks process it locally: Vision for scanning and OCR, Natural Language for entities, and Foundation Models on supported devices for richer classification.
• Extracted text and metadata are stored in your app's private sandbox. Files use file protection where applicable.
• Documents may be indexed into on-device CoreSpotlight so you can search from iOS. Spotlight data stays on your device.

Optional PAAR Pro cloud sync (opt-in)

If you subscribe to PAAR Pro and enable cloud sync in Settings:

• You authenticate with Sign in with Apple or email/password to our API.
• You complete a 24-word recovery phrase. A key derived from that phrase wraps your account key on the device before upload.
• Each document is encrypted with a per-document key before upload. We cannot decrypt your library if you lose the recovery phrase and device access.
• Sub-processor (sync only): Amazon Web Services (AWS) may store ciphertext and minimal account metadata. Apple is involved only for Sign in with Apple. We do not sell personal data.

What we don't do

• We do not sell your documents or use them for advertising.
• We do not include third-party analytics or cross-app tracking SDKs.
• We do not run server-side OCR or AI on your document plaintext.

Vault and encrypted sharing (on-device)

Vault documents are encrypted on-device from your Vault PIN and Keychain material. Unless you separately enable Pro cloud sync, vault packages are not uploaded by PAAR.

Permissions

• Camera — scan paper documents.
• Photo Library — when you choose to import.
• Face ID / Touch ID — when you enable App Lock or open protected documents.

Data retention and deletion

Deleting items in the app removes local data. Erase All Data in Settings wipes the local library. With cloud sync enabled, account deletion removes server-side ciphertext per product behavior.

Children

PAAR is not directed at children for collection purposes.

Changes

We will update this policy if features materially change. Significant changes will be reflected here and in-app.

Contact

Questions: contact Cognivance via the PAAR App Store listing or join our waitlist for product updates.