Privacy Policy
Effective date: 14 May 2026
Last updated: 14 May 2026
This Privacy Policy describes how the Duna AI Scan mobile application ("Duna AI Scan", "the App", "we", "us", "our"), published by Duna Labs, handles information when you use the App.
We built Duna AI Scan to be on-device first. The vast majority of your data — including scanned documents, OCR text, and AI extractions — never leaves your device.
1. Information we DO NOT collect
We do not collect, store, transmit, or have access to any of the following:
- Your scanned documents (images or PDFs)
- Text recognized by on-device OCR
- Tags, fields, or any metadata extracted by on-device AI (Apple Intelligence /
NaturalLanguage) - Your photo library content
- Your email address, phone number, or postal address
- Your contacts
- Your precise location
- Your microphone or audio recordings
- Your health, fitness, or financial data
2. Information processed on your device only
The following data is processed entirely on your device and never transmitted to Duna Labs or any third party:
| Data | How it is used |
|---|---|
| Camera frames | Captured to scan documents. Frames are processed and discarded in real time. |
| Photo library access | Optional, used only to save exported PDFs or pick existing scans you choose to import. |
| Face ID / Touch ID biometrics | Used only to authenticate access to your encrypted vault. Biometric template never leaves Apple's Secure Enclave. |
| OCR text | Extracted on-device using Apple's Vision framework. |
| AI-extracted fields | Computed on-device using Apple Intelligence Foundation Models (on supported devices) or regex / NaturalLanguage. |
3. Information you choose to sync
If you sign in with Sign in with Apple and have iCloud enabled, the App syncs your documents and metadata via Apple's iCloud Private Database (CloudKit) under your own Apple ID.
- All synced data is stored in your own iCloud account under the container
iCloud.com.duna.scanner. - Duna Labs never accesses, reads, or stores this data. We do not operate a backend server for document storage.
- You can revoke sync at any time by removing the App in iOS Settings → Apple ID → iCloud, or by signing out.
4. Information collected by third parties
4.1 Google AdMob (banner advertisements)
When the App displays banner ads, Google AdMob may collect:
- Your Advertising Identifier (IDFA), only if you grant permission via the App Tracking Transparency (ATT) prompt.
- Coarse location inferred from IP address.
- Aggregated ad interaction data (impressions, clicks).
Data handling is governed by Google's Privacy & Terms: https://policies.google.com/privacy
If you deny the ATT prompt, AdMob will serve non-personalized ads and will not track you across apps or websites.
4.2 Sign in with Apple (account)
Apple may share with us only the opaque user identifier (Apple userIdentifier) and, if you choose to share it, your name. We store the identifier in your device's Keychain — it does not leave your device. We never receive your real Apple ID email.
4.3 BizConnex Gateway / your own webhook (optional, user-initiated)
If you enter a webhook URL in Settings → Gateway and explicitly tap "Send to Enterprise" on a document, the App sends a deterministic JSON payload to the URL you provided. Duna Labs is not the receiver, does not see, log, or proxy the payload. You are responsible for the privacy practices of any webhook destination you configure.
5. Sensitive Documents Vault
When you enable the vault on a document:
- The document is encrypted on-device using AES-256-GCM (industry-standard authenticated encryption).
- The encryption key is either derived from a device key stored in iCloud Keychain (so the vault unlocks on your other Apple devices) or derived from a passphrase you choose using PBKDF2-HMAC-SHA256 with 210,000 iterations.
- The plain-text version of the document is securely deleted from device storage.
- Decryption is gated by Face ID, Touch ID, or your passphrase.
Duna Labs has no access to encryption keys or passphrases. If you forget your passphrase, encrypted documents cannot be recovered.
6. Children's privacy
The App is rated 4+ and is suitable for general audiences. We do not knowingly collect any personal information from children under the age of 13 (or 16 in the EEA). If you believe a child has provided personal information, please contact us so we can act accordingly.
7. Your rights (GDPR / CCPA)
You have the right to:
- Access — request a copy of any data we hold about you. (In most cases, we hold none.)
- Delete — delete the App from your device, which removes all locally stored data. Synced iCloud data can be removed via iOS Settings → Apple ID → iCloud → Manage Storage → Duna AI Scan.
- Object — opt out of personalized advertising via the ATT prompt or iOS Settings → Privacy & Security → Tracking.
- Portability — export documents as PDF from the App at any time.
To exercise any of these rights, email hoainam8x@gmail.com.
8. Security
- All on-device data is stored in the App's sandboxed container, protected by iOS file protection (
NSFileProtectionComplete). - Vault documents are encrypted with AES-256-GCM as described in §5.
- All network communication uses TLS 1.2 or higher.
- Biometric authentication uses Apple's Secure Enclave; raw biometric data never reaches the App.
9. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Continued use of the App after a change constitutes acceptance.
10. Contact
Duna Labs
Email: hoainam8x@gmail.com
Website: https://hoainam8x.github.io/ai-scanner