Calipso Trade LLC

Privacy Policy

Scanner for iOS and Android · Last updated 13 September 2026

Scanner has no accounts, no advertising identifiers, and no analytics. Your documents stay on your phone. The only time anything leaves your device is when you ask for handwriting recognition.

1. Who is responsible for your data

Calipso Trade LLC, 312 W 2nd St, PMB 5670, Casper, WY 82601, United States. Contact: privacy@calipsotrade.com.

We never ask for your name, email address, or phone number, and there is no sign-up. Nothing in our records identifies you as a person.

2. What stays on your device

Every scan, page, PDF, document name, and page order is stored in the app's private storage on your phone. We cannot read any of it, and it is never uploaded as part of normal use. Deleting the app deletes all of it.

Camera — used only while the scanner screen is open, to photograph a page.
Photos and files — read only when you choose Build from photos or PDF, and only the files you select.

3. Handwriting recognition

Recognition is optional and runs only when you open a page and tap Text. That single page image is then sent over HTTPS to our server, which passes it to Anthropic to run the recognition model. The text comes back and is saved on your device.

We do not store the image. It exists in our server's memory for the duration of the request and is never written to disk. Our logs record only its size in bytes, never its contents.

Anthropic acts as our processor. Under the terms governing their API, content submitted through it is not used to train their models. Their infrastructure is in the United States, so this step transfers data outside the European Economic Area; that transfer is covered by standard contractual clauses in our agreement with them.

If you never tap Text, no image of any document leaves your phone.

4. What we hold, why, and for how long

Our server is located in the European Union.

Data	Purpose and legal basis	Retention
A random device token we generate, the platform (iOS or Android), and your remaining balance of recognitions	To provide what you paid for — performance of a contract, GDPR Art. 6(1)(b)	Until you delete your data in the app, or clear the app's data
The recognised text of recent requests	So a retry after a dropped connection returns the result you already paid for instead of charging twice — Art. 6(1)(b)	24 hours, then deleted automatically
The IP address recorded when a device first registers	To prevent one person creating unlimited free balances — legitimate interests, Art. 6(1)(f)	24 hours, then deleted automatically
A record of each request: device token, outcome, model, token counts	To return your credit when recognition fails, and to diagnose faults — Art. 6(1)(b) and 6(1)(f)	24 hours, then deleted automatically
Web server access logs, including IP addresses	Operating the service and defending against abuse — Art. 6(1)(f)	14 days
Anonymous totals: date, model, token counts	To know what the service costs to run. These rows carry no token and cannot be linked to any device or person, so they are not personal data.	Kept indefinitely

The device token is a random string we generate. It is not your device's serial number, advertising identifier, or IMEI, and it cannot be used to recognise you anywhere else.

5. Who else receives data

Anthropic — the page image, for recognition, as described above.
Apple or Google — before your first recognition, the app asks Apple's App Attest or Google's Play Integrity to confirm it is an unmodified copy of our app. They learn that the check took place, under their own privacy policies; we receive only a signed confirmation. No document content is involved.
Apple or Google again for purchases. Payment is handled entirely by the store — we never see your card details, billing address, or name. The store tells our server only that a valid purchase occurred.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California law. The current version of the app contains no advertising, requests no advertising identifier, and includes no analytics or tracking SDK. We do not use your documents to train any model.

6. Children

Scanner is not directed at children under 13, and we do not knowingly collect data from them. As we collect no identifying information, we cannot determine a user's age. If you believe a child's data has reached us, write to us and we will erase the record.

7. Your rights

Under the GDPR and UK GDPR you have rights of access, rectification, erasure, restriction, objection, and portability. Under the CCPA you have rights to know, delete, and correct, and not to be treated differently for exercising them.

To erase your data, open Settings in the app and tap “Delete my data”. This removes your device token and everything attached to it from our server immediately. It also removes any unused balance, which cannot be restored afterwards. The anonymous totals in the last row of the table above are not personal data and are not affected.

For any other request, write to privacy@calipsotrade.com. Because we hold nothing that identifies you, we cannot verify who you are, so requests are answered on the basis of the device token presented.

If you are in the European Economic Area or the United Kingdom and believe we have handled your data improperly, you have the right to lodge a complaint with your national data protection supervisory authority.

8. Changes

If we change what we collect or how long we keep it, we will update this page and the date above before the change takes effect in a released version of the app.