Privacy Policy
Last updated: 7 October 2026
This policy covers ChronoTwain: the Windows application, the ChronoLite Mobile phone app, and the relay service that connects them. ChronoTwain is made by ChronoScan Capture S.L., Azuela 31, 28400 Collado Villalba, Madrid, Spain (“we”). For anything about your data, write to chronoscan@chronoscan.org.
The short version
- Documents sent from a phone are end-to-end encrypted: only the PC that owns the inbox can open them. Our server stores sealed data it cannot read.
- The pages are deleted from our server as soon as your PC has downloaded them.
- We do not sell data, show ads, or use tracking or analytics in the apps.
Documents
When a phone sends a document to an inbox, the phone encrypts every page and the document's details (sender name, note, optional GPS position) with that inbox's key before uploading. The key is created on the PC that owns the inbox and never leaves it; the invite QR code carries what the phone needs to encrypt for that PC.
Our relay server keeps the encrypted pages only until the PC downloads them, and then deletes them. Pages a PC never collects are deleted after 3 days (ChronoTwain Free) or 15 days (Professional), and the phone is told. A small record of each submission (its status, page count and encrypted details, no page content) is kept so the phone can show what happened to it; the PC owner can choose to delete these records as soon as documents are processed.
On the PC, documents stay in ChronoTwain's folder until you deliver, save or discard them; you control how long delivered documents are kept (Settings). Documents from scanners, files and screen captures never leave the PC.
Account and device data
| What | Why |
|---|---|
| E-mail address of the PC owner's account | To link PCs and inboxes to an owner and to recover access. |
| ChronoScan license number (only if you register with one) | To apply the plan included with ChronoScan maintenance. |
| Device and station identifiers, PC name, app versions | To deliver documents to the right PC and show whether it is online. |
| Monthly usage counters (documents and megabytes sent from phones) | To apply the limits of your plan. |
| The name a phone user types for themselves (optional) | Shown to the PC owner with each document; travels encrypted. |
| The IP address a document was sent from, and the phone's random install id | Recorded by our server when a phone uploads, and passed to the PC owner with the document, so they know where it came from. Kept with the submission record. |
Phone users do not create accounts: a phone joins an inbox through its invite.
Phone permissions
- Camera: to photograph documents and to scan invite QR codes.
- Location (only when an inbox asks for it): to attach the position where a document was sent. It is encrypted with the document; you can refuse the permission and still send.
- Notifications: to tell you when an upload finished or what happened to a document.
Document edge detection on Android uses Google's ML Kit document scanner, which runs on the phone.
Where data is processed
The relay service runs on Microsoft Azure in the European Union (Sweden Central). We share data with no one else, except where the law requires it.
Your rights
Under the GDPR you can ask to access, correct, export or delete your data, or object to its processing, by writing to chronoscan@chronoscan.org. Unlinking a PC and deleting its inboxes removes their data from the relay service. You may also complain to the Spanish Data Protection Agency (aepd.es).
Children
ChronoTwain is a business tool and is not directed at children under 16.
Changes
If this policy changes we will publish the new version on this page and update the date above.