Privacy Policy
Effective: 20 September 2026 · Last updated: 1 October 2026
In short
Arxa collects, stores and transmits no personal data. The app has no internet permission, so it cannot send anything to us or to anyone else. The documents you scan stay on your phone. There is no account to create and no sign-in. No advertising, analytics or tracking software is included.
1. Scope
This policy covers the Android application Arxa
(package name com.evgtechworks.arxa), developed by
EVG Techworks (owner: Ergun Volkan Guven), and this
website at evgtechworks.com.
2. Data we collect
None. Arxa does not ask for or collect your name, email address, phone number, location, contacts, device identifiers or usage statistics. The app contains no analytics, no crash reporting, no advertising network and no third-party tracking code.
This is more than a commitment. Arxa's Android manifest does not declare
the INTERNET permission, and the operating system does not
allow an app without it to open a network connection. The app therefore
cannot transmit your data, even by mistake.
Your documents are never used to train any AI model. That is not a promise but an impossibility: because your documents never leave your phone, neither we nor anyone else can reach them. Text recognition also runs on your phone, using a fixed model bundled with the app; it does not change with your use, does not learn, and reports nothing back.
3. Permissions the app requests
- Camera (Arxa has no camera permission)
- The scanning screen is the document scanner of Google Play services on your phone; it opens the camera and hands the scanned page back to Arxa only. That is why Arxa itself does not request the camera permission. The page is processed on the phone, temporary files are deleted once the PDF has been created, and camera images are not archived separately.
- Biometric authentication (
USE_BIOMETRIC,USE_FINGERPRINT) - Used only if you have turned on the app lock yourself. Android performs the check; Arxa receives nothing beyond "succeeded" or "failed". Your fingerprint or face data is never made available to the app.
- Play Billing (
com.android.vending.BILLING) - For the Arxa Pro purchase. Payment is handled entirely by Google Play; your card details never reach Arxa and are never visible to it.
The app requests no other permissions. You can verify this list yourself in the "Permissions" section on Google Play before installing, or afterwards under Settings → Apps → Arxa → Permissions on your phone.
4. Where your documents live
The PDFs you scan are kept in the app's private storage on your phone, which other apps cannot read. No copy is uploaded to any server and nothing goes to a cloud backup.
If you switch phones using Android's own phone-to-phone transfer (cable or nearby device), your documents may move to the new phone as well. That transfer happens directly between your two phones and does not pass through any server.
Text recognition (OCR) runs on the phone using a model bundled inside the app. The recognised text is written into the searchable PDF itself; no separate search file or index is written to disk. When you search inside the app, the text is held in memory only for that moment.
5. When you share a document
When you use "Share" or "Open" to send a document to another app (a messenger, email client, cloud storage service or PDF viewer), the document passes into that app's care and that app's privacy policy applies. Arxa cannot control the document beyond that point. This always happens at your own initiative and with your confirmation.
6. Deleting your data
You can delete any document from inside the app. When you uninstall Arxa, Android removes the app's private storage together with every document and setting it contained.
Because we hold no records about you, there is no data for you to request access to, correction of, or deletion of.
There is no retention period, because nothing is retained. Cloud-based scanners upload your document to their servers and keep it there for a while before deleting it. With Arxa that step never happens: the document does not leave the phone.
7. Your rights
Under the EU General Data Protection Regulation (GDPR) and Turkey's Personal Data Protection Law No. 6698 (KVKK), you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form.
Because Arxa collects no personal data from you, no record exists for those rights to apply to — there is nothing we could send you, erase or transfer. You are still welcome to exercise these rights or simply confirm the position by writing to destek@evgtechworks.com. You also retain the right to lodge a complaint with your national data protection authority in the EU, or with the Personal Data Protection Authority in Turkey.
8. Children
Arxa is not directed at children, and it collects no personal data from any user regardless of age.
9. This website
evgtechworks.com consists of static pages. It sets no cookies,
does not track visitors and contains no analytics or advertising code.
Every file, including fonts and libraries, is served from our own domain;
no request is sent to any third-party server when the pages load.
The free PDF, image and calculator tools (every tool under
/araclar/) run entirely inside your browser. The files you choose and the amounts you
enter in the calculators are never sent to any server; processing happens on your device and is cleared from the
browser's memory when you close the page.
The contact form takes only the name, e-mail address, topic and message you enter. They are delivered to us as a single e-mail through Cloudflare's infrastructure and are not stored on the site, in a database or in any log file. Your IP address is not included in the e-mail. This information is used only to reply to you, is not processed for any other purpose and is not shared with third parties. The correspondence is deleted once it is no longer needed; you can ask for its deletion at any time at destek@evgtechworks.com. The legal basis is responding to your request (GDPR Art. 6(1)(b) and (f); KVKK Art. 5/2-c and f).
The site is hosted on Cloudflare, which may keep its own server logs in order to operate the service and prevent abuse.
10. Changes
If this policy changes, the "last updated" date above will be revised and the change will be published alongside a new version of the app. Since data that was never collected cannot be collected retroactively, changes apply going forward only.
11. Contact
For any privacy question: destek@evgtechworks.com
EVG Techworks · Ergun Volkan Guven · Türkiye