Privacy Policy

MonOCR is built on a foundation of local-first privacy. We reject cloud-based surveillance and ensure your data remains under your absolute control.

1. Local Processing

All OCR recognition runs entirely on your local hardware via WASM or WebGPU. Your images are processed in the browser's memory and are never uploaded to our servers for processing.

2. Device Permissions and Data Access

To provide core OCR functionality, our applications (iOS and Android) may request the following device permissions:

Camera Access: Required to capture photos of physical documents or text for live scanning. Images captured via the camera are processed strictly locally on your device and are never uploaded to our servers unless explicitly submitted by you as a Voluntary Contribution.
Photo Library and File Access: Required to allow you to select existing images or PDF documents from your device for text extraction. We only access the specific files you select.

3. Zero Default Collection

We do not use telemetry, analytics, or trackers. We do not know who you are, and we do not track how you use the application.

4. Voluntary Contributions

You may choose to share corrected text (Feedback) or new documents (Contributions) to help improve the Mon language model. This is strictly opt-in and handled anonymously via secure synchronization.

5. Data Retention

Local history is stored on your device and can be cleared at any time. Anonymized contributions shared with our dataset are retained for model training and cannot be individually identified or removed once pooled.

6. Dataset Framework

Contributions are synchronized anonymously via pre-signed, short-lived URLs directly to our secure Cloudflare R2 storage. No personal identifiers (IPs, names, accounts) are associated with these uploads.

Consent is managed per-contribution. Revoking consent stops all future synchronizations but does not affect data already contributed to the anonymized research pool.

7. Global Compliance

Our architecture aligns with the **General Data Protection Regulation (GDPR)** and the **California Consumer Privacy Act (CCPA)** by providing users with full access and erasure rights over their local data.