Privacy Policy

App: Argus · Last updated: November 5, 2026

1. Who is responsible

Controller: Christos Dimakis, Peristeri, Attica, Greece.
Contact: argus@dimakis.app

2. What the app uses

• Camera (if you allow it): for scanning. The photos are stored only inside the app.
• Photos: when you pick photos to scan, Argus sees only the ones you pick, through the system picker, with no access to the rest of your library. To “Save to Photos” it asks for add-only permission.
• Files: images and PDFs that you choose to import.
• Documents: pages, PDFs, the text read from them, folders and tags are stored on the device, inside the app. They are never sent anywhere.
• Text recognition (OCR): happens on the device, with Tesseract and with Apple’s text recognition. No text or image is sent to a server.
• Translation: happens on the device with Apple’s system translation. The first time for a language, iOS may ask you to download that language from Apple.
• Face ID / Touch ID: for locked folders. iOS performs the authentication; the app only learns whether it succeeded. We have no access to biometric data.
• PDF password: the password you lock a PDF with is used only for that file and is not stored anywhere.
• Settings: your choices, your signatures and the page sizes you create are stored only on the device.
• Sharing and printing: happen only when you ask, through the system. The app or recipient you choose (e.g. Mail, Messages, a cloud service) has its own policy.

3. Internet connection

Scanning, the tools and reading Greek and English work offline: the files for these two languages are inside the app. The app connects to the internet only in the cases below. Except for pCloud, Dropbox, OneDrive, Box, Google Drive and WebDAV, which you turn on yourself and which are listed first, the requests are plain and carry no information about you or your documents:

• pCloud (optional): only if you choose, in Settings → Cloud, to connect your own pCloud account, the documents of the folder you pick are uploaded to your account and synced with your other devices, through pCloud’s servers (api.pcloud.com or eapi.pcloud.com, and my.pcloud.com for signing in). You type your password on pCloud’s own sign-in page, not in the app; the app keeps only an access token in your device’s Keychain and deletes it when you tap “Disconnect”. The developer receives nothing. pCloud has its own privacy policy. What is uploaded stays in your account until you delete it there.
• Dropbox (optional): only if you choose, in Settings → Cloud, to connect your own Dropbox account, the documents of the folder you pick are uploaded to your account and synced with your other devices, through Dropbox’s servers (www.dropbox.com and api.dropbox.com for signing in, api.dropboxapi.com and content.dropboxapi.com for files). You type your password on Dropbox’s own sign-in page, not in the app; the app keeps only access tokens in your device’s Keychain and deletes them when you tap “Disconnect”. The developer receives nothing. Dropbox has its own privacy policy. What is uploaded stays in your account until you delete it there.
• OneDrive (optional): only if you choose, in Settings → Cloud, to connect your own OneDrive account (personal, or work or school), the documents of the folder you pick are uploaded to your account and synced with your other devices, through Microsoft’s servers (login.microsoftonline.com for signing in, graph.microsoft.com for files, and the temporary addresses Microsoft gives for uploading and downloading a file, under microsoft.com, sharepoint.com or 1drv.com). You type your password on Microsoft’s own sign-in page, not in the app; the app keeps only access tokens in your device’s Keychain and deletes them when you tap “Disconnect”. The developer receives nothing. Microsoft has its own privacy policy. What is uploaded stays in your account until you delete it there.
• Box (optional): only if you choose, in Settings → Cloud, to connect your own Box account, the documents of the folder you pick are uploaded to your account and synced with your other devices, through Box’s servers (account.box.com for signing in, api.box.com and upload.box.com for files). You type your password on Box’s own sign-in page, not in the app. Box requires a secret for sign-in that can’t be stored inside an app, so the one-time sign-in code, and later the renewal token, pass through a small helper service of ours (a Cloudflare Worker, argus-box-token-proxy.ox-oken-roxy.workers.dev): it adds that secret, forwards the request to Box and stores nothing. Cloudflare, which hosts it, handles the request like any web host (it sees your IP address). Box’s response (your access tokens) goes straight back to your device. The app keeps only access tokens in your device’s Keychain and deletes them when you tap “Disconnect”. The developer never receives your files. Box has its own privacy policy. What is uploaded stays in your account until you delete it there.
• Google Drive (optional): only if you choose, in Settings → Cloud, to connect your own Google account, the documents of the folder you pick are uploaded to your Google Drive and synced with your other devices, through Google’s servers (accounts.google.com and oauth2.googleapis.com for signing in, www.googleapis.com for files). You type your password on Google’s own sign-in page, not in the app. Argus asks only for the narrow permission “See, edit, create, and delete only the specific Google Drive files you use with this app” (drive.file): it can see and change only the folders and files it created itself, never the rest of your Drive. The app keeps only access tokens in your device’s Keychain and deletes them when you tap “Disconnect”. The developer receives nothing. Google has its own privacy policy. What is uploaded stays in your Drive until you delete it there (files that Argus removes go to the Drive trash, not deleted for good). Argus’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• WebDAV (optional): only if you choose, in Settings → Cloud, to connect your own WebDAV server (for example Nextcloud, ownCloud or a NAS), the documents of the folder you pick are uploaded to that server and synced with your other devices. The app connects only to the address you type, and only over HTTPS (it refuses plain http). Your username and password are sent only to that server, as HTTP Basic authentication over the encrypted connection; the app keeps the password only in your device’s Keychain and deletes it when you remove the last cloud that uses it. We recommend an “app password” if your server offers one. The developer receives nothing. Your server’s operator has their own privacy policy. What is uploaded stays on your server until you delete it there.
• OCR languages: if you download another language in Settings, its file comes from GitHub (raw.githubusercontent.com, the tesseract-ocr project). As the server, GitHub sees your IP address.
• Our apps: the list of our apps, with names, icons and links, is downloaded from our website (dimakis.app, hosted on GitHub Pages) when you open that page.
• Privacy Policy and Terms of Use: open from dimakis.app in a Safari window inside the app.
• Contact: opens your mail app with a message to us. At its end it includes support details (app version, device model, iOS version, language, region, time zone and OCR languages), which you can see and delete before sending. Nothing is sent unless you tap “Send” yourself.

4. What we don’t do

• There is no account or sign-up.
• There are no ads and no third-party analytics or crash-reporting tools.
• We don’t track you across apps or websites and don’t use the IDFA.
• We don’t sell or share data, because we don’t collect it.

5. Your rights

Since we hold no personal data about you, there is nothing for us to correct or delete on our side. You delete your documents inside the app; deleting the app deletes all of them. You can revoke any permission (Camera, Photos, Face ID) in the Settings of your iPhone or iPad. You have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr) or the authority of your country.

6. Children

The app is not aimed specifically at children and collects no data from anyone.

7. Changes

If this policy changes, this page and the date at the top will be updated.