Privacy Policy

Documents, photos, and scans

Document preparation, photo conversion, scanning, PDF previews, and print preparation take place on your device. Our account and licensing backend does not receive or store the documents, scans, or printer content you prepare in PrintRight.

Saved scans and imported files remain in app storage until you delete them or remove the app. Temporary working files may remain in device caches. Operating-system or cloud backups may retain app data under your backup settings. Files you export or share, and copies retained by printers or other recipients, are outside the app's control.

Printers, network access, and permissions

The app uses printer names, network addresses, service identifiers, capabilities, and connection status to discover printers, run diagnostics, and submit jobs on your local network. Printer preferences and discovery history are stored on your device. Selecting a printer or operating-system print service sends it the chosen content and settings. Some local printing protocols are not encrypted; use a trusted network for sensitive documents.

Camera permission enables scanning. Local-network permission enables discovery and communication. File and photo selection gives access to items you choose under your platform's permission controls. Change permissions in device settings; features depending on denied access may not work.

Accounts and secure sessions

PrintRight requires registration with email and password. We store your email, an account UUID, and a password hash rather than a readable password. Email ownership is not verified during registration. Accounts are separate for each app hosted by SteadfastApps.

The backend processes login/session tokens, session timestamps, request IP addresses, browser or device request information, and security events to authenticate accounts and enforce one active app login plus one independent website session per app. Native tokens are stored using the device's secure storage. The website uses encrypted, secure, HttpOnly session cookies and security cookies, including protection against cross-site request forgery.

The app contacts the backend to validate account access and feature availability before print and scan actions. Password resets use an expiring reset token and an email link. We do not send your document content with these requests.

Subscriptions and store payments

Apple or Google processes in-app payments. We do not receive your full payment-card details from those stores. RevenueCat helps verify purchases, restore access, and maintain subscription state. Processing includes app-scoped customer UUIDs, product and transaction identifiers, purchase receipts or tokens, subscription status, expiry and renewal information, and related app, device, and network request information. See RevenueCat's privacy policy.

We use purchase information to provide access, restore purchases, reconcile store updates, and prevent misuse. Account deletion, uninstalling the app, or redeeming a promotion does not cancel store renewal. Store cancellation and refund controls remain subject to the applicable store.

If you choose to connect an AppSumo purchase, AppSumo handles checkout and provides an OAuth authorization code and license details. We exchange the temporary code to verify the license, then store its encrypted license key, a one-way lookup hash, status, tier, event timestamps, and the PrintRight account UUID to link and provide the lifetime plan. The OAuth code and access token are used transiently and are not retained. AppSumo webhook events update license status; support lookups and key-related changes are audited. AppSumo controls its payment, refund, and license deactivation processes.

Promotional codes and resellers

Website redemption records which account used a code, the promotion campaign, plan granted, redemption time, and any expiration or revocation. Administrative actions affecting access are audited.

For reseller campaigns, administrators may generate batches of unique codes and repeatedly export a CSV containing codes, plan, code expiration, redemption URL, campaign, seller, and current coupon usage/status. These exports do not contain customer emails, passwords, or document content. We retain code hashes for validation and encrypted code values for authorized repeat exports and reseller records. Archiving disables unused coupons without deleting them. Coupons with any redemption history are retained for the record, including after expiration. Export access and administrative changes are password-confirmed and audited. Protected backups may retain historical records under backup retention.

Websites, infrastructure, and support

Opening a shared webpage in the app's preview contacts that website and its embedded services, which may receive request details or cookies under their own policies. Exporting through a share sheet sends data to the destination you select.

SteadfastApps uses hosting, Cloudflare proxy/security services, and email infrastructure. Website and API operation may process IP addresses, requested paths, timestamps, user-agent information, security logs, and error records. Our public information pages load their styles and images from SteadfastApps rather than Google Fonts and do not require an account.

If you contact support, we receive your email, message, and anything you choose to attach. We use these to respond and investigate problems. Do not send account passwords, payment-card details, or sensitive documents.

Purposes, sharing, and international processing

We process information to provide accounts and app functions, deliver licensed access, support customers, secure services, prevent fraud, and meet legal obligations. Where applicable, the legal basis may be performance of the service you request, legitimate interests in security and support, legal obligations, or consent when required. Device permissions do not replace legally required consent.

Service providers process information necessary for hosting, security, email, subscriptions, and AppSumo license verification. Information may also be disclosed when required by law. Providers may process data outside your country; applicable transfer-safeguard requirements apply. We do not sell personal information or use document content for advertising or cross-context behavioral advertising.

Retention, deletion, and security

Local documents and settings remain under your device and backup controls. Account, security, support, purchase, promotion, and AppSumo license records are retained as needed for service operation, fraud prevention, support, disputes, and legal obligations. AppSumo license keys remain encrypted for account-link support; deletion removes the account link, while the license and minimal event/audit record may remain. Expiring sessions and reset tokens have bounded lifetimes; logs and protected backups follow operational retention schedules.

You can delete your account in the app or from the website account settings after confirming your password. This revokes sessions and removes the active email/password account. RevenueCat profile deletion is queued when store integration is configured. Minimal non-personal audit and redemption counts may remain. Backup copies may persist until their normal expiry. Store and AppSumo purchase, refund, and license records are governed by those providers; account deletion does not cancel store subscriptions.

We use access controls, password hashing, HTTPS, encrypted session and credential storage, and protected backups. No storage or transmission method is completely secure.

Your rights and policy changes

Depending on your location, rights may include access, correction, deletion, portability, restriction or objection, and withdrawal of consent where applicable. You may complain to your local data-protection authority. Contact support@steadfastapps.net; we may need to verify your identity. We cannot retrieve files stored solely on your device.

PrintRight is a general-purpose utility, not directed at children. Contact us if you believe a child provided personal information without legally required consent. We may update this policy as services or legal requirements change and will provide notices where required.