Armadillo Scan — Scanning done right · Last updated 15 September 2026
Photographs you capture or import are processed entirely on your iPhone. Detecting the page, flattening it, adjusting colour and building the PDF all run locally. Your documents are never uploaded, transmitted, or shared with the developer or anyone else.
Saved PDFs live in Armadillo Scan's own private storage on your device (and, if you have turned on iCloud sync, in your own iCloud account — see below). Only you and the app can read them. Deleting a scan in the app removes it permanently, and deleting the app removes all of them. If you choose to share a scan, it goes only where you send it.
None. Armadillo Scan does not collect personal information, usage statistics, device identifiers, diagnostics, or location. The app contains no third-party analytics and no advertising, and we operate no server that your documents pass through or rest on.
Armadillo Scan can sync your documents so that your other devices, and the web version at armadilloscan.com, can open them. This is off unless you switch it on in Settings, and an update will never switch it on for you.
When it is on, your documents are copied to your own iCloud account, in its private database, under your Apple Account. They are covered by Apple's iCloud terms and privacy policy. We have no access to them: there is no server of ours in the path, and the developer cannot read, list or recover your documents. Turning sync off stops any further copying; documents already in your iCloud remain there until you remove them, which you can do from your Apple Account.
With sync off, the app makes no network requests at all.
You can use the web version without an account of any kind. A PDF or photo you open there is read by your own browser and never uploaded: the editing, signing, redaction and export all happen on your device, in the page.
Documents you open are kept in your browser's own storage so they are still there when you come back. They stay on that device, in that browser. Clearing your browser's site data for armadilloscan.com removes them, and so does deleting a document inside the app. We cannot see them, and they are not sent anywhere.
If you also use the iPhone app with iCloud sync switched on, you can sign in with your Apple Account to work on that library here instead. That is optional, it is the same private iCloud database described above, and signing in is the only thing that sends a document anywhere. The web app loads its PDF and font libraries from public CDNs (cdnjs.cloudflare.com), which is an ordinary request for program code and carries none of your document content.
Camera — used only to photograph the document you are scanning, while you are scanning it. Photo library — used only to read a photo you explicitly pick. Neither permission sends anything off your device, and both can be revoked in iOS Settings.
Armadillo Scan is suitable for all ages and collects no data from anyone, including children.
If this policy ever changes, the revised version will be posted on this page with a new date.
Questions about privacy or the app: [email protected]