Last updated 30 July 2026.
PaperToDigital is a document assistant: you photograph a document and the app reads it, works out what kind of document it is, and gives you the text and key details back. This policy explains what we do with your data. The controller is Click Design, United Kingdom.
The short version
- We do not keep your photographs or the text taken from them.
- We keep your email address and a record of when you scanned, so we can run your account and count your free scans.
- We never sell your data or use it for advertising.
- You can delete your account, and everything personal in it, at any time.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Email address | To identify your account, sign you in, and send password resets | Until you delete your account |
| Password | To sign you in. Stored only as a salted hash (PBKDF2-HMAC-SHA512) — we cannot read it, and nobody at Click Design can tell you what it is | Until you delete your account |
| Scan records — the date, the document type (for example "receipt"), and the size of the request | To count your free scans, prevent abuse, and check our costs | Retained after account deletion, but with the document type removed and no longer linked to you |
| Subscription identifiers from Paddle | To know your subscription is active | Until you delete your account |
| A one-way fingerprint (SHA-256 hash) of your email address, with the number of free scans used in the current month | To stop the monthly free allowance being reset by deleting an account and re-registering the same address. The fingerprint cannot be turned back into your email address | Written when an account is deleted; only the current month's entry is ever read, and entries for past months are periodically removed |
Your documents
When you scan something, the photograph is sent over an encrypted connection to our server, passed straight to Anthropic's Claude AI for reading, and the result is returned to your phone. The photograph and the extracted text are never written to disk on our server — they exist only in memory for the few seconds the request takes, and are gone once you have your result. We keep no copy, and we cannot retrieve a past scan for you.
Anthropic processes the image on our behalf in order to return the result. Under Anthropic's commercial terms, data sent through their API is not used to train their models. See Anthropic's privacy policy.
Please take care when scanning documents belonging to other people, or documents holding special-category information such as medical records. You are responsible for having the right to scan what you scan.
Who else is involved
- Anthropic — reads your document photographs, as described above.
- Paddle — our payment provider and merchant of record. If you subscribe, Paddle handles the payment and holds your billing details. We never see or store your card details.
- Our email provider — delivers password reset and account emails.
Where your data is held
Accounts are stored on our server in the United Kingdom. Our suppliers above may process data outside the UK; where they do, that transfer is covered by the safeguards in their own terms, such as standard contractual clauses.
Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, or restrict what we do with it. Two of those you can do yourself, immediately:
- Delete your account — in the app under Account → Delete account, or on the web at this page. Deletion is immediate and cannot be undone.
- Change your password — Forgot your password? on the sign-in screen.
For anything else, email marketing@clickdesign.uk. If you are unhappy with our response you can complain to the Information Commissioner's Office.
Children
PaperToDigital is not intended for children under 13, and we do not knowingly create accounts for them.
Changes
If we change this policy we will update the date at the top of this page, and tell you by email if the change is significant.