Papyr — PDF Document Scanner

Published by Nordic Node · Effective 3 July 2026 · Last updated 3 July 2026

This Privacy Policy explains how Nordic Node ("we", "us", "our") handles information in connection with the Papyr mobile application (the "App"), available on Google Play. Papyr is a document scanner that turns paper into searchable PDFs.

The short version. Your documents stay on your device. Scanning and text recognition (OCR) run entirely on-device — your scans, images and recognized text are never uploaded to us or anyone else. We do not require an account and we do not track the contents of your library.

The App does show ads and uses standard app diagnostics. Those features rely on Google services that may collect limited technical and advertising data, and only after you have made a choice in the consent prompt where the law requires one. The details are below.

1. Who we are

The App is developed and operated by Nordic Node. For any privacy question or request, contact us at nordicnode26@gmail.com. For the purposes of the EU/UK General Data Protection Regulation (GDPR), Nordic Node is the data controller for the limited processing described in this policy.

2. Your documents stay on your device

Papyr is designed to be private by default. The core features work fully offline:

Scanning. Document capture uses the Google Play Services document scanner. The App itself does not request camera permission; captured pages are handed back to the App and stored locally.
Text recognition (OCR). Converting your scans into selectable, searchable text is performed on-device. The text of your documents is never sent to us or to a cloud service.
Storage. Your scans, PDFs, page images, document names and library organization are stored locally on your device in the App's private storage and local database. We have no access to them.
No account. There is no sign-up, login, or user profile. We do not collect your name, email address, or contacts through use of the App.

Because your library is stored only on your device, we cannot recover it if the App is uninstalled or the device is lost. Device-to-device backup of scans is disabled by design so a restore never leaves you with document entries whose images are missing. Please export or share files you want to keep.

3. Information collected automatically

To keep the App free, show ads, and fix crashes, we use Google services that may automatically process limited technical information. This information does not include the contents of your documents.

Purpose	Service	Examples of data processed
Advertising	Google AdMob	Advertising identifier, IP address, general device and app information, ad interaction data. Used to serve and measure ads (personalized only with your consent — see Section 4).
Analytics	Google / Firebase Analytics	Aggregate, non-identifying app-usage and device information. Disabled by default and only enabled after you consent where consent is required.
Crash diagnostics	Firebase Crashlytics	Crash stack traces, device model, OS version and diagnostic state at the time of a crash, to help us fix bugs.
Purchases	Google Play Billing	Purchase token and product identifier for the one-time upgrade. Payment is handled entirely by Google Play — we never see your card or payment details.

4. Consent and ad personalization

When required by law (for example for users in the European Economic Area, the United Kingdom and Switzerland), the App shows a consent message using Google's User Messaging Platform (UMP) before serving personalized ads or enabling analytics.

Analytics and advertising storage start in a denied state (Google Consent Mode v2). Nothing personalized is collected until you make a choice.
If you decline, the App may still show non-personalized ads, which use only limited, non-identifying data to display an ad. Ads help keep Papyr free.
Where you have provided consent, you can withdraw or change it at any time from within the App's settings, which re-opens the consent options.

5. Papyr Pro (one-time purchase)

Papyr offers an optional one-time in-app purchase ("Papyr Pro") that removes ads and unlocks additional features. Purchases are processed by Google Play Billing under Google's terms and privacy policy. We receive a purchase token from Google to confirm and restore your entitlement; we do not receive or store your payment method. Purchasing Pro removes ads and therefore stops ad-related data collection through AdMob.

6. Permissions

Papyr keeps device permissions to a minimum. Document capture runs through Google Play Services, so the App does not require the camera permission for itself. Any permission the App does request (for example, an optional device-lock/biometric prompt to protect your library, if you enable it) is used only on your device for that stated purpose and is not transmitted to us.

7. Legal bases for processing (GDPR)

Where GDPR applies, we rely on the following legal bases:

Consent (Art. 6(1)(a)) — for personalized advertising and analytics, obtained through the UMP consent message.
Legitimate interests (Art. 6(1)(f)) — for serving non-personalized ads, basic crash diagnostics, security, and preventing fraud/invalid traffic, balanced against your rights.
Performance of a contract (Art. 6(1)(b)) — for processing your in-app purchase and maintaining your entitlement.

8. Data sharing

We do not sell your personal information. We do not share the contents of your documents with anyone. The limited technical data described in Section 3 is processed by Google as our service provider (and, for advertising, as an independent controller for its own purposes). Please review Google's privacy resources:

Google Privacy Policy: policies.google.com/privacy
How Google uses information from apps that use its services: policies.google.com/technologies/partner-sites
AdMob & advertising: support.google.com/admob/answer/6128543

We may also disclose information if required to do so by law or valid legal process.

9. Data retention

Your documents and library remain on your device until you delete them or uninstall the App; we do not hold copies. Technical data processed by Google (ads, analytics, crash reports) is retained according to Google's applicable retention policies.

10. International transfers

The Google services used by the App may process data on servers located outside your country, including outside the EEA. Where applicable, Google relies on legal transfer mechanisms such as the EU Standard Contractual Clauses. We do not ourselves transfer your document content anywhere — it stays on your device.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to processing, to data portability, and to withdraw consent. Because your documents live only on your device, you exercise deletion of that content directly by deleting items in the App or uninstalling it.

EEA/UK users: you may change or withdraw ad/analytics consent at any time via the App's settings, and you may lodge a complaint with your local data protection authority.
California users (CCPA/CPRA): we do not sell or "share" personal information for cross-context behavioral advertising beyond what your consent choice permits, and you have the right to know and to opt out.
For any request, contact us at nordicnode26@gmail.com. You can also manage your advertising identifier in your device's system settings.

12. Children's privacy

Papyr is a general-audience productivity app and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will address it.

13. Security

Your documents are stored in the App's private, sandboxed storage on your device and are not backed up off-device by default. We use reputable service providers (Google) for the technical functions described above. No method of storage or transmission is completely secure, but we take reasonable measures to protect the limited data we handle.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the App after an update means you accept the revised policy.

15. Contact us

Nordic Node
Email: nordicnode26@gmail.com
App: Papyr — PDF Document Scanner (nl.nordicnode.papyr)