1Who we are
ScanTo Pro ("the app") is a paid, one-time-purchase document scanner published by Cait518. This policy explains how the app handles your information. In short: it doesn't collect any.
ScanTo Pro 是由 Cait518 發行的一次買斷文件掃描器。本政策說明 App 如何處理你的資訊——簡單說：不收集。
2Data we collect
None. ScanTo Pro does not collect, transmit, sell, or share any personal data. There are no accounts, no analytics, no advertising identifiers, and no third-party SDKs. The app makes no network requests and functions identically in Airplane Mode.
沒有。本 App 不收集、傳輸、販售或分享任何個人資料；沒有帳號、分析工具、廣告識別碼或第三方 SDK，也不發出任何網路請求，開飛航模式功能完全一樣。
3Your documents & scans
- All scans, PDFs, and OCR-recognized text are stored locally on your device only, in the app's private storage.
- Nothing is uploaded to any server. We — and any third party — have no access to your documents.
- Text recognition (OCR) is performed entirely on-device using Apple's Vision framework.
- When you choose to share, export, or save a file, it goes directly from your device to the destination you pick (Files, Photos, Mail, AirDrop, Messages). That action is controlled by you and handled by iOS.
所有掃描、PDF 與 OCR 文字只存在你裝置上 App 的私人空間，不上傳任何伺服器；OCR 全程在裝置上以 Apple Vision 完成。你選擇分享/匯出/儲存時，檔案才會由你的裝置直接送到你指定的目的地，由 iOS 處理。
4Permissions we request
- Camera — only when you tap "Scan Document", to capture pages. Images are processed on-device.
- Photos (add) — only when you choose "Save to Photos", to write a scan to your library.
- Face ID — only if you enable App Lock, to unlock the app. Face data is handled by iOS and never seen by the app.
Each permission is optional and requested only at the moment the related feature is used. Declining a permission simply disables that one feature.
相機（按「掃描文件」時）、照片（按「存到照片」時）、Face ID（開啟 App 鎖時）——皆為選用、僅在使用該功能當下請求；臉部資料由 iOS 處理，App 永不接觸。拒絕僅停用該功能。
5Encrypted PDF & App Lock
Optional App Lock uses Apple's LocalAuthentication (Face ID / passcode) and runs entirely on-device. Optional encrypted PDF export sets a password on the exported file using Apple's PDFKit. Passwords you set are applied locally and are never transmitted or stored by us; if you lose a PDF password, it cannot be recovered.
App 鎖使用 Apple LocalAuthentication（Face ID／密碼），全程在裝置上；加密 PDF 用 Apple PDFKit 在本機加上密碼，密碼不會被我們傳輸或保存，遺失無法復原。
6Children's privacy
Because ScanTo Pro collects no data at all, it collects nothing from anyone, including children. The app contains no ads and no external links to user-generated content.
由於完全不收集資料，對任何人（包含兒童）皆不收集；App 無廣告、無外部使用者內容連結。
7Payments
ScanTo Pro is a one-time purchase processed by Apple through the App Store. We never receive or store your payment details; those are handled solely by Apple under Apple's privacy policy.
本 App 為一次買斷，付款由 Apple 透過 App Store 處理；我們不會收到或保存你的付款資料，全由 Apple 依其隱私政策處理。
8Changes to this policy
If this policy changes, we will update the date above and post the revised version on this page. Since the app collects no data, material changes are unlikely.
政策若有變動，將更新本頁上方日期並於此頁公布；因 App 不收集資料，重大變動的可能性極低。
9Contact
Questions about this policy or the app? Email hourstag.app@gmail.com — we reply to every message.
對本政策或 App 有任何問題，請來信 hourstag.app@gmail.com，每封都會回覆。