Privacy Policy

Last updated: October 9, 2026

The short version

Sankore converts your documents entirely on your own Mac. Your files, and the content of your files, are never uploaded, transmitted, or seen by us — not during conversion, not for any reason. This is a technical fact about how the app is built, not a promise layered on top of something that works differently.

The only things that ever leave your Mac are described in full below: a generic, anonymous check for app updates, a periodic check confirming a Premium license hasn't exceeded its device limit, a language pack you choose to download (from Sankore 1.4), and — only if you purchase Sankore Premium — your email address, handled by our payment processor and used to deliver your license.

What we never collect

• Your documents, or anything extracted from them. Document conversion (PDF, DOCX, XLSX, PPTX, and every other supported format) happens entirely on your device, using conversion engines bundled directly into the app. No document, no filename, no converted output, and no data derived from either is ever transmitted anywhere, for any reason, at any point in this process.
• Usage analytics or telemetry. Sankore contains no analytics software of any kind. Apart from the anonymous update-check count described below, we do not know how often you use the app, which features you use, how many files you convert, or anything else about your usage.
• Crash reports. Sankore does not automatically report crashes or errors to us.

What we do collect, and why

App update checks

Sankore periodically checks whether a newer version is available, both automatically in the background and when you use the "Check for Updates" option. This check is a plain, anonymous request for a small, static file listing the current version number — it does not include your email, any identifier tied to you or your device, or any other information beyond what's inherent to any request made over the internet (such as your IP address, which is visible to any server you connect to and isn't logged or retained by us beyond what our hosting provider, Cloudflare, keeps as standard infrastructure logs).

To make sure update checks are reaching us, we keep a simple count of them: the date and time of each check, and which version of Sankore made it. Nothing else is kept — no IP address, no identifier, nothing that could link a check to you or your device. This tells us roughly how many copies of Sankore are opened each day, but never who opened them or how often any one person uses the app.

This check is entirely separate from document conversion and has no access to, and never transmits, anything about your files.

If you purchase Sankore Premium

Sankore is sold as a one-time purchase, processed by Paddle, our payment processor and merchant of record. When you buy Sankore Premium:

• Paddle collects and processes your payment details and email address directly. Paddle is the legal seller of record for this transaction, and handles your payment information under its own privacy policy, which we encourage you to review: Paddle's Privacy Policy.
• Once your purchase completes, Paddle notifies our license-issuing system (a small, automated service we operate on Cloudflare) with your email address and a transaction reference number, used to generate and email your license. Your email address is used transiently, in memory, for this one task, and is never written to any database or persistent storage we control. Your transaction reference is different: once you activate a device, it's retained afterward as part of enforcing your license's device limit — see "License verification" below for what that involves.
• Your license is then emailed to you via Resend, our transactional email provider. Resend processes your email address and the license content solely to deliver that message, and retains standard delivery logs (confirming the email was sent, and whether it was delivered) as part of its own service — this is Resend's standard operational logging, governed by Resend's Privacy Policy.
• We do not otherwise retain, log, or have access to a database of who has purchased Sankore, beyond what is visible in our Paddle merchant dashboard (which reflects real transactions, not app usage) and Resend's own delivery logs.

Language pack downloads (Sankore 1.4 and later)

Scanned pages in some languages are read with a language pack. Sankore downloads a pack from dl.sankoreapp.com only when you click Download — in Settings → Languages, or when Sankore suggests a pack after converting a document that needs one. Nothing is downloaded without that click.

The request asks for one specific pack file and sends nothing else: not your documents, their contents or their names, and no identifier tied to you or your device — only what any internet request carries, such as your IP address, handled by our hosting provider, Cloudflare, as described above. We see only total download counts from Cloudflare's standard storage statistics, never who downloaded which pack. You can turn pack suggestions off, and remove any pack you've downloaded, in Settings → Languages.

License verification

Once you have a license, Sankore verifies it entirely offline, on your own Mac, using cryptographic signature verification. Sankore makes network requests for three things only: checking for app updates, periodically verifying a Premium license hasn't exceeded its device limit, and — from Sankore 1.4 — downloading a language pack when you click Download. None ever transmits your documents, their contents, or anything about what you convert.

Enforcing the device limit requires us to store your license's transaction reference and a randomly-generated device identifier (not tied to your hardware or your identity beyond the license itself) in a database we control, for as long as your license remains active. This is the only persistent record we keep of a purchase, and it never includes your email address, documents, or anything about your usage.

Third-party services we rely on

Because Sankore's paid features involve a real commercial transaction, a small number of third-party services are necessarily involved. Each operates under its own privacy policy, linked here for your reference:

• Paddle — payment processing and merchant of record
• Cloudflare — hosts our license-issuing service, our website, our app-update check, and language-pack downloads
• Resend — delivers your license via email

None of these services have any access to your documents or their contents, at any point.

Your rights

You may request details of what information we hold about you (which, for the free tier, is nothing at all, since no data is ever collected), or request deletion of purchase-related records we hold (noting that Paddle, as the transaction's legal seller, retains its own records independently, as required for tax and legal compliance). Contact [email protected] for either.