Nahl Scan Privacy Policy

Effective 23 October 2026 · Nahl Group Inc.

Nahl Scan is a free document scanner. It works without an account, shows no ads and contains no analytics or tracking. This policy explains what happens to your data.

1. Scans stay on your phone

Pages you scan or import, the PDFs made from them, and your settings are stored only on your device. We do not receive them unless you choose to send a document to a Telegram group. Deleting a document in the app, or uninstalling the app, removes them.

The camera is opened by your phone's own document scanner (Apple VisionKit on iPhone, Google ML Kit through Google Play services on Android), which processes images on the device. Nahl Scan only receives the finished pages.

2. Sending to Telegram

When you link a Telegram group, the app sends the group's code to our server, which returns a secret key that is kept in your phone's secure storage (Keychain / Android Keystore).

When you tap Send, the app uploads the PDF, its file name and the caption you chose (document type, load number, note) to our server over HTTPS. The server passes them straight to Telegram for posting in that group. The file is held in memory only for the time this takes and is never stored on our server.

Once delivered, the document is in the Telegram group, visible to its members and handled under Telegram's privacy policy. Deleting it there is up to the group.

3. What our server keeps

• Linked groups: the Telegram group ID, its title, its current group code, and whether our bot is in it.
• Device keys: stored only as one-way hashes, so they cannot be read back.
• Send times: the time of each send per key, used for rate limiting and deleted after one hour.
• Server logs: IP address, time and requested path, used to keep the service running. Logs are overwritten automatically and kept for a short time only.

We do not collect names, phone numbers, email addresses, contacts, location or advertising IDs. We do not sell or share data with anyone, and we do not use it for advertising.

4. Your choices and deleting your data

• Remove a group in the app (Settings → Telegram groups) to delete its key on your phone and revoke it on our server.
• A group admin can type /newcode in the group to disconnect every phone linked to it.
• Removing our bot from a group stops all sending to it.
• To have a group's record deleted from our server, contact us (below) from that group or with its ID. We delete the group, its code and all device keys linked to it within 30 days.

Send times are deleted automatically after one hour and server logs are overwritten automatically. Documents are never stored on our server, so there is nothing to delete there.

5. Security

All traffic between the app and our server uses HTTPS. The Telegram bot token lives only on our server, never in the app.

6. Children

Nahl Scan is a business tool and is not directed at children under 13. We do not knowingly collect data from children.

7. Changes

If this policy changes, we will update this page and the date above.

8. Contact

Questions or deletion requests: info@nahl-group.com.