Privacy policy
For the website hoverscan.dev and the hoverscan app for iOS. Last updated: 4 November 2026
This is a translation. The German version is binding.
In short
- The website sets no cookies, uses no analytics or advertising services and loads nothing from other servers.
- The app sends us no data. Camera images, text recognition and reading shop, date and total all stay on your iPhone.
- Finished PDFs go only to the server you enter in the app, for example your Nextcloud.
1. Controller
hansenexus GmbH, Eidelstedter Weg 2, 20255 Hamburg, Germany
Managing Director: Lennard Finsterbusch
Email: support@hoverscan.dev, phone: +49 40 57307846
2. Website
Hosting and server logs
The website runs on our own servers in data centres of Hetzner Online GmbH in Germany, under a data processing agreement. On every request the server processes technically necessary data: IP address, date and time, the address requested, status code, amount of data sent, referrer and browser identifier. We need it to deliver the page and to spot errors and attacks. The logs are deleted automatically after 7 days. The legal basis is our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).
The domain is managed through Cloudflare (Cloudflare, Inc., USA). Cloudflare only answers the DNS lookup for the server's address; the page request itself goes straight to our server, not through Cloudflare.
Cookies, fonts, analytics
We set no cookies and store nothing in your browser. Fonts, scripts and the 3D model are served from our own server; no content is loaded from third parties. There is no audience measurement and no advertising, which is why there is no cookie banner.
Email and phone
If you write or call us, we process your details to answer your request (Art. 6(1)(b) GDPR for questions about a purchase, otherwise (f)). Email runs through our own mail server in Germany. We delete messages once the request is settled and no statutory retention period applies.
Links to shops
When you follow a link to Etsy or Printables, you leave our website, and those providers' privacy policies apply.
3. The hoverscan app
The app needs no account and contains no analytics, advertising or tracking components and no third-party software. We receive no data at all from the app. Its App Store privacy label therefore reads "Data Not Collected".
Camera
The app uses the camera to photograph receipts under the rig. The live image is analysed only on the iPhone, to detect motion, where the receipt lies and the right moment to shoot. Live images are neither stored nor transmitted.
Text recognition and AI
Text recognition (Apple Vision) and reading shop, date and total (Apple's on-device language model, Apple Intelligence) run entirely on your iPhone. The text of your receipts is not sent to us, to Apple or to any other service. Without Apple Intelligence, a simpler reader inside the app extracts the fields, also on the device.
Voice prompts
Prompts such as "slide receipt left" are spoken by the built-in iOS speech synthesis, on the device.
Upload
The app uploads finished PDFs to the server you enter in its settings (currently Nextcloud via WebDAV). The transfer goes straight from your iPhone to that server, not through us. Whoever runs that server is responsible for the data there; for your own Nextcloud, that's you. The app stores the server address and user name on the device and the app password in the iOS keychain, on this device only. We have no access to any of it.
Data on the device
Settings and scans waiting for upload are kept only inside the app on your iPhone. Deleting the app removes them.
In-app purchases
You buy the unlock through the App Store. Apple handles the payment; we receive no personal data, only Apple's aggregated sales reports. Apple's privacy policy applies.
Crash reports
If you allowed sharing with app developers in iOS (Settings → Privacy & Security → Analytics & Improvements), Apple passes anonymous crash reports on to us. We use them only to fix bugs. You can turn this off there at any time.
4. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to support@hoverscan.dev.
You can also complain to a data protection supervisory authority, for example the one responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.
5. Changes
If the website or the app changes in a way that processes other data, we update this policy. If a shop on this website or more upload targets in the app are added, it will say so here before they go live.