Privacy Policy

Last updated October 20, 2026

Your documents never leave your phone. Scans, the text ProScan reads from them, file numbers, borrower names and your signature are stored only on your iPhone. They are never sent to us or to anyone else. They leave the phone only when you send a scanback yourself, through Mail or the share sheet.

Who we are

ProScan is made by Matter Development. Questions about this policy go to support@matterdevelopment.com.

What stays on your phone

Page images you scan, and the text read from them. Reading happens on the phone with Apple's on-device text recognition. No page and no text is uploaded.
Signings, clients and their email addresses, file-naming rules and export history.
Your name, commission state, optional commission number and saved signature, used only on your cover sheets.

This data is encrypted by iOS while your phone is locked and is kept out of iCloud backup. An optional Face ID lock protects the app; Face ID is handled by iOS and ProScan never sees your face data.

Sent signings are deleted automatically after 7 days (you can choose 1 to 30 days, or keep them). Settings → Purge all now deletes everything at once. Deleting the app deletes everything too.

What we receive

Usage counts (PostHog, EU servers). To see which features work, ProScan sends anonymous events such as "a signing was created", "16 pages were scanned", "3 pages were flagged as missing" or "an export of 7 files finished". Events carry only counts and fixed categories (for example a document type or a package type). They never carry names, file numbers, file names, email addresses or any text from your documents. Events are tied to a random identifier created on your phone, not to you, and no profile of you is built. Each event also carries the device model, iOS and app version, language and time-zone setting, and screen size. PostHog is set to discard your IP address.

Crash and error reports (PostHog). When something fails, ProScan sends the error type and the place in the app's code where it happened, with the message text removed, plus your device model, iOS version and app version.

Purchases (Apple and RevenueCat). Subscriptions are sold and billed by Apple. RevenueCat checks your purchase with Apple so the app knows whether ProScan Pro is active. It receives an anonymous app user identifier and the purchase receipt from Apple. We never see your name, Apple Account or payment details.

What we don't do

No accounts and no cloud sync.
No advertising, no tracking across other apps or websites, and no data sales.
No server-side or AI processing of your documents.

How long we keep it

Usage events and error reports are kept by PostHog for up to 12 months, then deleted. Purchase records are kept by Apple and RevenueCat as long as the law requires for billing.

Your choices

Because events are anonymous we cannot link them to you, but you can ask us anything about your data at support@matterdevelopment.com, and we will answer within 30 days. Residents of the EU, UK and California have rights of access and deletion; write to the same address.

Children

ProScan is a tool for working notaries and is not directed to children under 13.

Changes

If this policy changes, the new version is posted here with a new date.