Privacy policy

Last updated 8 November 2026

Short version: Paperchute collects no data about you. There is no account with me, no server, no analytics and no tracking. Your scans go from your iPhone directly to your own Google Drive.

Who is responsible

Paperchute is made by Jorijn Schrijvershof, Oosterhout, the Netherlands. Questions about privacy: jorijn@jorijn.com.

What the app does with your data

• Camera. Used only to scan documents with Apple’s document scanner. Images are not stored anywhere except in the PDF you save.
• Scans. Each scan becomes a PDF on your iPhone and is uploaded to the Google Drive folder you chose. As soon as Google confirms the upload, the copy on your iPhone is deleted. A scan that could not be uploaded yet stays on your iPhone until it can, or until you discard it.
• Text recognition. The text in a scan is recognised on your iPhone (Apple’s Vision framework) and stored invisibly in the PDF so you can search it. This happens on the device; nothing is sent anywhere for it.
• File names. On iPhones with Apple Intelligence, Apple’s on-device language model reads the recognised text of the first page and suggests a file name. This runs entirely on your iPhone; Paperchute does not use Private Cloud Compute or any other online service for it.
• Your destinations. The names and folders you set up are stored on your iPhone only, so the app and its widgets can show them.

Google account and Google Drive

To upload to Google Drive, you sign in with Google on Google’s own sign-in page. Paperchute never sees your password.

• Paperchute asks for one permission: see, edit, create and delete only the specific Google Drive files you use with this app (drive.file). That is the narrowest Drive permission Google offers. The app cannot see the rest of your Drive; it only knows the folders you pick in Google’s folder picker and the files it uploads itself.
• Through that same permission, the app reads the email address of your Google account, only to show which account a destination uses. It is stored on your iPhone and nowhere else.
• The sign-in tokens are stored in the iPhone’s Keychain, on that device only. They are not synced and not sent to me or anyone else.
• The app talks to Google’s servers directly. There is no server of mine in between, so I never receive your files, your folder names or your account details.

Paperchute’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used only to upload your scans to the folder you chose. It is not used for advertising, not sold, not transferred to anyone, and not read by any person.

What is not collected

No analytics, no crash reporting service, no advertising identifiers, no location, no contacts. Paperchute contains no third-party SDKs. If you share crash reports with developers in your iPhone settings, Apple may pass anonymous crash data to me through App Store Connect; that is Apple’s mechanism and setting, not something the app adds.

Removing your data

• Tap Disconnect in the app to delete the sign-in tokens from your iPhone.
• Revoke access at any time in your Google Account under Security › Third-party apps & services.
• Deleting the app removes everything it stored on your iPhone.
• Files already uploaded are in your Google Drive and are yours; delete them there if you want.

This website

paperchute.app has no cookies, no analytics and no tracking. It is hosted on Cloudflare, which processes standard request data (such as IP addresses) to deliver the site.

Changes

If this policy changes, the new version will be on this page with a new date.