Itqan and privacy

Privacy Policy

How we handle your privacy and service data

Hands sealing a confidential folder to protect a private document — Itqan Privacy Policy

Privacy introduction

This policy is provided by the Itqan (Itqan Tools) platform at www.itqantools.com, operated from Amman, Jordan in Jordan — the same identifier as in the Terms of Use and About. It applies to the website and to the Itqan Tools mobile app for Android and iOS (together, “the service”); app-specific practices are described in the “Mobile app” section below. It explains how we collect, use, and protect your personal data. For cookies and similar tracking, see the Cookie Policy; for how files are transferred and deleted after processing, see Security. The terms govern use of the service; this page governs personal data. If a summary in the terms conflicts with this policy on personal data, this policy is the reference for that topic.

Controller and governing law

The controller of personal data for this platform is the operator of the Itqan site on the domain above, from Amman, Jordan. Until we publish details of a formally registered entity, that identifier remains as in the terms.

Processing of data and operation of the service are governed by the laws of the Hashemite Kingdom of Jordan, including Personal Data Protection Law No. 24 of 2023 where it applies. Any dispute relating to this policy or the service is submitted to the competent courts in Jordan, unless a mandatory legal rule provides otherwise — the same wording as in the terms.

If you are in a country that grants you mandatory privacy or consumer rights (including the EU GDPR or Brazil’s LGPD if they actually apply to you), those statutory rights remain as that law provides. We are not an EU establishment, and the GDPR is not the platform’s primary operating law. In practice we offer access, correction, deletion, and cookie/ad consent and withdrawal as described below and in “Advertising and regional consent.” The Arabic version of this page is the legal reference if it conflicts with other translations, to the extent the law allows; the English version is provided for international readers and AdMob / store listings.

Data we collect

We collect very limited data:

Data you provide directly:
  • Account data: name, email, password (stored so it is not readable as plain text)
  • Contact data: phone number if you choose to provide it
  • Support inquiries: messages you send when contacting us, and any file you send to diagnose a fault, kept only as long as needed for testing, then deleted, as in the terms
  • Subscription and payment: what is needed to complete a paid plan via PayPal on the website (such as the email tied to payment), or via Google Play in the Android app (the purchase token, order ID, subscription state and renewal date Google sends us for verification). We do not store the full card number on our servers and do not receive your card details from Google
Data collected automatically:
  • Device information: browser type, operating system, IP address
  • Usage information: pages viewed, time spent
  • Cookies: language, session, and consent preferences — see the Cookie Policy
  • Analytics: aggregated usage statistics (only with your consent, if enabled)
  • Mobile app: device model, operating-system and app version, language, app usage events (such as screens opened and tools used), crash and error reports, and — for ads — the device advertising identifier, as described in the “Mobile app” section below

Important: Uploaded files are processed temporarily only to complete the task you chose, then temporary copies are deleted automatically. We do not keep file contents as a permanent archive, sell them, or use them to train targeted advertising models from the file text — as in the terms and the Security page. Keep an original copy; the result page is not a lasting backup.

How we use your data

We use data only for the following purposes:

  • Service delivery: process requests and improve performance under the terms
  • Communication: necessary messages (verification, security, billing, material policy changes) as in the terms
  • Subscription: plan management and collection via PayPal (website) or Google Play (Android app) when you choose a paid plan
  • Improvement: understand usage to improve the service
  • Security: detect and prevent suspicious or unlawful activity
  • Support: respond to questions and resolve issues

What we will not do:

  • We will not sell your file contents or personal data for third-party marketing
  • We will not use file contents to train targeted ads from the file text

Advertising: We may show ads on the website via Google AdSense and/or other advertising partners, and in the mobile app via Google AdMob (see the “Mobile app” section). Those partners may use cookies or similar identifiers and the device advertising ID to serve personalized or non-personalized ads, measure performance, and fight fraud. We do not send your file contents to ad networks. You can manage website ad preferences via our Cookie Policy or the consent bar, and in-app ad preferences via Google’s consent form and the in-app privacy settings where shown. See also “Advertising and regional consent” below.

Data sharing

We may share user data only in the following cases:

  • Service operators: hosting, email, and PayPal or Google Play when you pay — only as needed to deliver what you requested. We do not store the full card number on our servers.
  • Google or Dropbox: only if you choose import or save via their buttons, under the section below and your agreement with that provider.
  • Ads and analytics: advertising or analytics partners when you consent to non-essential cookies and those services are enabled, as in the Cookie Policy.
  • Google (mobile app): Firebase Analytics, Firebase Crashlytics, and Google AdMob receive the app data described in the “Mobile app” section, acting as our service providers.
  • Legal or security duty: if we are required to disclose, or to prevent fraud, abuse, or harm, as in the terms.

Cookies

We use cookies and similar Trackers to run the site and remember your preferences. On your first visit, a consent bar at the bottom lets you accept all, accept essential only, or manage ads and analytics separately. Advertising and analytics cookies stay denied by default until you choose.

Change your choice anytime via the Cookies footer link or the “Manage cookie preferences” button on the Cookie Policy page. For full details on types, durations, and third parties, see the Cookie Policy.

CategoryExamplesConsentTypical duration
EssentialPHPSESSID, itqan_lang, itqan_consentNot requiredSession / up to 365 days
AnalyticsGoogle Analytics (if enabled)Requires consentPer provider
AdvertisingAdvertising partners (when enabled)Requires consentPer partner
Optional cloudGoogle Drive, DropboxWhen you use the servicePer provider

Protecting user data

Infrastructure and deletion details are on the Security page. In short:

  • Transit: the site is served over HTTPS / TLS.
  • Files: temporary processing, then automatic deletion after the request completes; no permanent archive of file contents. Keep your original copy.
  • Access: we do not open files for day-to-day review of their substance. Limited technical access may occur to fix a fault, investigate abuse, or comply with a binding legal request, as in the terms.
  • Account: you are responsible for keeping access confidential. Password recovery is on the sign-in page. If we later offer extra protection, you can enable it where shown.

Your rights

Under Jordanian law, and as we offer in practice to account holders and visitors where it applies, you may:

Right of access

Request a copy of the personal data we hold about you

Right to rectification

Correct inaccurate or incomplete personal data

Right to erasure

Request deletion of certain personal data (“right to be forgotten”)

Right to object

Object to certain processing activities

Right to data portability

Request transfer of your personal data to another provider

Right to obtain a copy

Receive a usable copy of certain personal data

You may also withdraw your consent to non-essential cookies at any time via the Cookie Policy or the consent bar.

We may ask you to verify your identity before acting on an account-data request. Some rights may not apply if we no longer hold the data (for example, file contents already deleted after processing). To exercise these rights, write to support.itqantools@gmail.com or use the contact form.

Data retention

  • Account data: kept while your membership is active; deleted within 30 days after account deletion
  • File contents: processed temporarily, then deleted automatically after the request, under this policy and the Security page; no permanent archive of file contents
  • Access logs: kept for 90 days for security purposes
  • Analytics: retained for up to 2 years, then deleted
  • App crash reports: kept for up to 90 days
  • Files kept in the app: stay on your device until you delete them or uninstall the app

Deleting your account

You can delete your Itqan account and its associated data at any time, without contacting us:

  • In the app: while signed in, open Settings and tap “Delete account” at the bottom of the page.
  • On the website: sign in, then open Account settings → Delete account.
  • Deletion page: full instructions at Delete account.
  • By email: write to support.itqantools@gmail.com from the address on the account and we will delete it.

Deletion removes your profile, settings, usage history, and saved sign-in sessions; remaining account data is erased within 30 days. We may keep limited billing records where the law requires it, and security logs for up to 90 days. Uninstalling the app does not delete your account, and deleting your account does not cancel a subscription billed by an app store — cancel it in that store’s subscription settings.

Mobile app (Android and iOS)

The Itqan Tools app offers the same tools as the website. Files you choose are sent over an encrypted connection to Itqan servers for processing and deleted as described above. Documents you scan or save in “My files” are stored only on your device.

Permissions — all optional

You can decline any permission and keep using the other tools, and revoke it at any time in your phone settings or in Settings → App settings inside the app.

  • Notifications: requested once on first launch, with an explanation and a “Not now” option. Used only to show a “Processing in the background” status when you leave the app while a tool is running, and to alert you when processing finishes. We do not send advertising or marketing notifications. E-signature alerts are sent by email and do not need this permission.
  • Camera: requested only when you open the document scanner or take a photo inside a tool. The camera is never used in the background.
  • Photos and files: chosen through the system picker, so the app only receives the file you select; we do not request access to your whole photo library. An image is saved to your gallery only when you tap “Save to gallery”.
  • Foreground service (Android): while a file is processing, an ongoing “Processing” notification keeps the task running if you leave the app. It stops automatically when processing finishes or is canceled.
  • Fingerprint / Face ID: optional, only to lock the app. Verification is handled entirely by your phone’s operating system; we never receive or store biometric data. An app-lock PIN or pattern is stored on the device in hashed form.
Analytics and crash reports

The app uses Google Firebase Analytics to count app usage (screens opened, tools used, app version, device type, approximate country) and Firebase Crashlytics to receive crash and error reports so we can fix bugs. This data is not used to identify you personally, not combined with your file contents, and not sold. See Firebase privacy.

Ads in the app

The app may use Google AdMob to show interstitial and banner ads at natural stopping points after an operation is completed, when you open a result, or on tool screens. Signed-in users may also choose to watch rewarded ads for an extra operation; a reward is granted only after the ad is completed and verified by the server. Guests receive 10 free operations per day; the base limit increases to 15 after registration, with up to 5 additional operations per day through rewarded ads. Pro and Enterprise subscribers do not see in-app ads.

AdMob may use the device advertising identifier, IP address, ad-interaction data, and similar technologies to serve and measure ads and fight abuse. Where the law requires it — including the European Economic Area (EEA), the United Kingdom, and Switzerland — the app shows Google’s User Messaging Platform (UMP) consent form before personalized ads are requested. You can change that choice later under Settings → Privacy and ad options in the app when that option is shown, and you can reset or limit the advertising identifier in your device settings. We do not send the contents of your files to advertising networks and do not show ads while you are scanning or editing a document. See how Google uses data in ads and the Google Privacy Policy.

On-device text recognition

Some scanner features use Google ML Kit text recognition, which runs on your device; the scanned image is not sent to Google for that step.

AI-assisted tools

Some Itqan tools use automated or AI-assisted processing to produce a result you requested. Examples include PDF summarize and translate, headline suggestions, logo generation, math problem explanations, background removal, OCR, and speech-related tools. These features are optional — you choose when to run them.

  • What is sent: Only the text, image, audio, or document needed for that request (or an extracted subset, such as page text for summarization).
  • Where it runs: Processing may happen on Itqan servers and, when configured, via third-party model providers such as Hugging Face Inference, a local Ollama instance on our infrastructure, or another cloud LLM API. Provider availability can change; we do not publish API keys or internal endpoints here.
  • Retention: Request payloads and outputs are handled as temporary processing data and deleted under the same file-retention rules as other tools. We do not use your uploads to train our own advertising models.
  • Accuracy: AI outputs can be incomplete or incorrect. You remain responsible for reviewing results before relying on them for legal, medical, financial, or academic decisions.
  • Not offered: We do not operate a public “AI content detector” product on this site.

Related: Security · AI PDF summarize & translate guide · How we handle your files.

Google Drive and Dropbox

Itqan tools include optional buttons that let you import files from Google Drive or Dropbox, and sometimes save processed results back to your account with either provider. These features are entirely optional; you can always upload from your device or download results locally without using them.

How these features work
  • Import: When you click the Google Drive or Dropbox button, you sign in with that provider (Google or Dropbox) and choose the file(s) you want to process on Itqan.
  • Save: On result pages, a button may let you save the output file to Google Drive or Dropbox after you approve the provider’s consent screen.
  • Authentication: Uses the provider’s official OAuth interfaces in your browser. We never ask for, and never store, your Google or Dropbox password.
What we access — and what we do not
  • We only access files that you explicitly select or that you approve for saving through the site buttons.
  • We do not browse your entire Google Drive or Dropbox account, and we do not use these services for marketing or to sell your data.
  • An imported file is processed temporarily on Itqan servers to complete your request (for example convert, compress, or merge), then deleted under the retention rules above — the same approach as files uploaded from your device.
  • Access tokens are used only temporarily to complete the import or save you requested; we do not use them later to access your account without a new action from you.
Your control and revoking access
  • You can stop using the cloud buttons at any time and rely on local upload/download only.
  • You can revoke Itqan’s access from your Google Account (Security → Third-party apps) or from connected apps settings in Dropbox.

Your data with those providers is also governed by their own policies. See:

Note: Using Google Drive or Dropbox via the site buttons means you agree to exchange the selected file with that provider solely to complete the import or save you requested.

Third‑party services

We may use external services such as:

  • Google AdSense and website ad partners: website ads when enabled — requires your consent via the cookie bar. Details in the Cookie Policy and “Advertising and regional consent”.
  • Google Analytics: site traffic analysis (with your consent, if enabled) — see the Cookie Policy
  • Google Drive: optional file import or saving results to your account via site buttons — see the section above and the Google Privacy Policy.
  • Dropbox: optional file import or saving results to your account via site buttons — see the section above and the Dropbox Privacy Policy.
  • CDN / fonts: loading public libraries (e.g. cdnjs, jsDelivr) and web fonts to run the interface
  • AI model providers: Hugging Face, local Ollama, and optionally other LLM APIs when enabled — see “AI-assisted tools” above
  • PayPal: subscription and invoice payments when you choose a paid plan (see checkout flow)
  • Google Play Billing: Pro subscriptions in the Android app; Google processes the payment and sends us the subscription status so we can verify and activate it
  • Email delivery: transactional mail (account, support, security notices) via our configured mail providers
  • Google Firebase (Analytics, Crashlytics): app usage statistics and crash reports — see the “Mobile app” section and Firebase privacy
  • Google AdMob: ads in the mobile app, with consent where required — see the “Mobile app” section and Google Privacy Policy
  • Google Play and Apple App Store: app distribution and, where used, app-store billing — under their own privacy policies

Please review the privacy policies of those providers. We are not responsible for their practices.

Advertising and regional consent

This policy covers the website and the mobile app together. Here is how ads and consent work by region:

  • Website: ads via Google AdSense and/or other partners when enabled, with a cookie consent bar (accept all / essential only / manage). Non-essential ads and analytics stay off until you consent.
  • App: ads via Google AdMob, with Google’s User Messaging Platform (UMP) where required by law, and a “Privacy and ad options” entry in app Settings when required for your account or region.
  • EEA, United Kingdom, and Switzerland (GDPR and equivalents): we show a certified consent form before personalized ads whenever possible through Google’s tools. You may consent, refuse purposes, manage options, or later withdraw consent as described above. Ad technology providers are disclosed through Google’s consent UI and the partners list in the form.
  • Brazil (LGPD): if Brazilian data-protection rules apply to you, you may object to certain processing and exercise access, correction, and deletion rights via support.itqantools@gmail.com. Ads for Brazilian traffic may be limited to Google-certified providers, and non-personalized ads may be served depending on Google’s settings and your choices.
  • International transfers: when we use Google services (AdSense, AdMob, Firebase, Analytics), technical or advertising data may be processed on servers outside Jordan under Google’s policies and applicable data-processing terms.
  • Withdrawing consent: on the website via the Cookie Policy; in the app via Privacy and ad options or your device advertising-ID settings; for other requests, email support.

These disclosures describe our practices with Google’s current tools. They are not legal advice and not a formal certification of compliance. See also how Google uses data when you use partners’ sites or apps.

Children’s privacy

The service is intended for people who can enter into a contract, as in the terms. If a minor uses it, responsibility sits with the parent or the person supervising the account. The website and app are not directed at children under 13, and we do not knowingly collect their data.

If we learn we collected personal data from a child under that age without an appropriate basis, we will delete it. Tell support if you know of a child’s account.

External links

Our site may include links to other websites. We are not responsible for their privacy practices.

Please read the privacy policy of any external site before submitting personal data.

Policy updates

We may change this policy for regulatory or technical reasons or because the service changes, in the same way as we change the terms. We will try to announce a material change on the site or to the account email, with an effective date. Continuing after that date is acceptance of the new version. If you reject the change, stop using the service. The “last updated” date at the bottom of the page identifies the version shown.

Contact us

If you have questions or concerns about this policy or data handling practices, contact us:

Privacy officer: support.itqantools@gmail.com
General support: support.itqantools@gmail.com
Website: https://www.itqantools.com
Address: Amman, Jordan
Country: Jordan
Response time: within 24–48 hours

For questions about using the service rather than personal data alone, see the Terms of Use or Contact.

What we commit to in practice

We collect data transparently for the purposes above, protect it with the practices on Security, and honor requests for access, correction, deletion, and cookie/ad consent or withdrawal where applicable. This describes the platform’s practices from Jordan for the website and mobile app. It is not a claim of GDPR, LGPD, ISO, or SOC certification.

✓ Last updated: 17 October 2026