Last updated: 2026-09-05
Cabinet Scan is a document organiser for iPhone. It is built to keep your documents on your device. Two optional, independent settings can send data off the device: “Use AI analysis” (for summaries, the LifeGraph and Ask) and “Cloud Sync” (an account that backs your documents up and syncs them to your other devices and the web). Both are off by default. This policy explains exactly what each one sends and what happens to it.
Venkata Veeravasarapu, Industriehof 3, 60487 Frankfurt am Main, Germany. Contact: support@orgme.guru. Full provider details are in the Impressum. There is no Data Protection Officer; the controller can be reached at the address above.
Camera — used to scan documents, and (if you enable Photo Notes) to photograph a whiteboard or a page of notes. Document scans are processed on your device and are never sent anywhere. Photo Notes captures are sent to the analysis service only when that feature is on and you take a photo in it.
Text recognition — Apple’s on-device Vision OCR (English and German), entirely offline.
Your documents, PDFs and notes — scans, imported PDFs, PDFs the app creates, and hand-written notes (stored as editable text files) live in the app’s storage on your device and, for the History, are protected by iOS file protection and excluded from device and iCloud backups. Delete any entry at any time; deleting the app removes all of it. “Erase everything” in Settings removes every document, the LifeGraph and all to-dos in one step.
Your LifeGraph — the connected picture of people, organisations, addresses, accounts, policies, vehicles and agreements drawn from your documents is assembled and stored on your iPhone. Building or updating it requires “Use AI analysis” (see below); once built it stays on the device.
A folder you choose — if you pick a destination folder (for example one in iCloud Drive or Google Drive), finished PDFs and notes are copied there using the standard iOS file provider. From that point the copy is governed by whoever runs that folder and their own privacy policy. Cabinet Scan uses no Google API and has no access to your Google account.
This setting is off by default. Turning it on in Settings enables written summaries, the LifeGraph, Ask, the domain experts, and the “For you” feed, and sends data to Cabinet Scan’s analysis service, which the developer operates on Google Cloud Run in the European Union. Specifically:
| Feature | What is sent |
|---|---|
| Naming & summaries | the recognised text of a scanned or imported document, or the text of a note you write. Page images are not sent. |
| Photo Notes | the photo you capture, downscaled. Only when you take a photo in this mode. This is the one mode where an image leaves the device. |
| LifeGraph | the recognised text of each new document, plus a label-only list of entities already in your graph, so the same person or company is recognised across documents. |
| Ask & domain experts | your LifeGraph (entities, relationships, obligations, events — names, addresses, amounts, dates, reference numbers), a compact index of your documents (name, type, date, area, a short summary), your open to-dos, and your question. |
| “For you” review | the same LifeGraph, document index and to-dos, plus today’s date. |
The domain experts additionally run web searches to ground their answers. These searches use general terms only — your name, address, employer, amounts, IBANs and reference numbers are never placed in a search query.
For the optional analysis service and for Cloud Sync the developer is the data controller. The legal basis is your consent, given by turning the relevant setting on (and, for Cloud Sync, creating an account), together with performance of the service you asked for. Analysis processing takes place in the European Union on Google Cloud (the Azure OpenAI region is set by the developer’s Azure resource); Cloud Sync document storage is in the EU, with the account identity store in the US (see the Cloud Sync section above).
Under the GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to withdraw consent at any time (Art. 7(3)) without affecting processing already carried out. In practice:
Right to lodge a complaint. You may complain to a data protection supervisory authority. The authority responsible for the controller is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit (Postfach 3163, 65021 Wiesbaden, Germany; datenschutz.hessen.de). You may also contact the authority in your EU country of residence or workplace.
No analytics SDKs, no advertising, no third-party trackers, and no linking of your activity to data from other apps or websites. The per-install identifier described above is used only for first-party load and cost measurement of the optional service.
The Cabinet Scan pages are static files served by two hosts:
When you open a page, the host’s servers automatically process standard access data — your IP address, the requested file, date and time, the referring page, and your browser and operating system — to deliver the page and keep the service secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating a secure website). Each host acts as a processor under its data-processing terms; as US providers, transfers rely on Standard Contractual Clauses and EU–US Data Privacy Framework certification (see the Firebase privacy documentation and the GitHub Privacy Statement).
The pages set no cookies, use no analytics, and load no fonts, scripts, images or other content from third-party servers — everything is served from each page’s own origin. No consent banner is required because nothing beyond what is strictly necessary to deliver the page is stored on or read from your device.
This setting is off by default and separate from “Use AI analysis”. Without it, Cabinet Scan has no account and stores nothing about you off your device. Turn it on and:
Legal basis: your consent (Art. 6(1)(a) GDPR), given by turning Cloud Sync on and creating an account, together with performance of the service you asked for (Art. 6(1)(b)). Withdraw it any time by signing out or turning Cloud Sync off.
Deleting your account and cloud data. Settings → Cloud Sync → Delete account permanently removes your Firebase Authentication user and everything stored under your account in Firestore and Cloud Storage. Documents on the device itself are not affected by that action; use “Erase everything” for those. You can also request deletion by email at support@orgme.guru.
Retention: cloud data is kept until you delete it or your account. Daily backups of the database are kept for 7 days and then discarded. Deleted content is removed from live storage immediately and purged from backups within that window.
Sub-processor: Google LLC / Google Firebase (Authentication, Firestore, Cloud Storage, App Check). Google is a US company; the document data is stored in the EU, the authentication identity store in the US; transfers rely on the Google Cloud Data Processing Addendum, its Standard Contractual Clauses and EU–US Data Privacy Framework certification.
Cabinet Scan is not directed at children and does not knowingly collect information from anyone.
If this policy changes, the updated version will be posted at this URL with a new “last updated” date.
Questions about this policy, or requests concerning the optional analysis service: support@orgme.guru