Tablify — Privacy Policy
- App: Tablify: Scan to Spreadsheet (iOS, Android) and Tablify Web (§12)
- Effective Date: 2026-10-10
- Last Updated: 2026-10-10 (§12.2 and §12.3 aligned with the product; added §12 Tablify Web; earlier: AI processing moved from the Gemini API to Gemini on Google Cloud Vertex AI)
- Operator: Eodin.app
- Contact: official@eodin.app
1. The Short Version
- Tablify has no account and no sign-in. We do not ask for your name or email.
- When you scan a page, the image is sent to our server and on to an AI model that reads the table. We do not keep your images or your tables on our servers.
- Your scan history stays on your phone.
- No ads and no tracking. We measure how the app is used with app analytics tied to a random ID, not to you (§3.1). We do not sell or share your data for advertising, and we never use your device's advertising ID.
- We do not use your images or tables to train AI models.
- Tablify is built and run by Eodin's AI team: AI agents, overseen by people at Eodin. Replies to your emails may be written by an AI agent.
2. What Happens When You Scan
- You take a photo, pick an image, or open a PDF. Tablify prepares the page on your phone.
- The page image is sent over an encrypted connection (HTTPS) to our processing service on Google Cloud (Cloud Functions).
- Before it accepts the request, the service checks with Firebase App Check that the request comes from the real Tablify app (Apple App Attest on iPhone, Google Play Integrity on Android). This stops others from misusing the service.
- The service sends the image to Google's Gemini AI model through Google Cloud Vertex AI (a paid business service). Gemini returns the rows and columns of the table.
- The service sends the table back to your phone and does not store the image or the table.
The table then lives only on your phone, in Tablify's scan history, until you delete it or delete the app. When you export, you choose where the .xlsx or .csv file goes, for example Files, email or a cloud drive. That destination's own privacy policy applies.
3. Data We Process
| Data | What exactly | Why | Where it goes |
|---|---|---|---|
| Page images | The photo, image or PDF page you scan | To read the table (the app's main feature) | Our Google Cloud service, then Gemini on Google Cloud Vertex AI |
| Scan history | The tables you scanned and edited | So you can open them again | Only on your phone |
| Free-document marker | A flag saying the one free document was used (iPhone: Keychain; Android: app storage and Android backup) | So the free preview is given once per device | On your phone (and in your own Android backup) |
| Service logs | For each scan: platform (iOS or Android), whether it was the free document or a subscriber's scan, the AI model used, the number of rows, and AI usage counts. Google Cloud also records standard request data such as IP address and time | To run the service, control AI costs and stop abuse | Google Cloud Logging |
| App integrity tokens | A short-lived token from App Attest or Play Integrity | To confirm requests come from the real app | Google (Firebase App Check) |
| Purchases | Whether you have an active subscription | To unlock exporting and further scans | Handled by the App Store or Google Play. We never see your card details |
| App analytics | Which screens and features are used (for example "scan started", "export", "subscription started" with plan and price), counts such as rows in a table, error categories, a random app-install ID, session ID, device model, OS version, language and app version. Google Analytics also derives an approximate city/region/country from your IP address | To understand which features work and improve the app | Eodin Analytics (operated by Eodin.app) and Google Analytics for Firebase |
| Emails you send us | Your email address and message | To answer you | Our email inbox |
We do not collect: your name, email (unless you write to us), contacts, precise location, advertising identifier (IDFA / Android Advertising ID), or the contents of your tables or files in analytics. Analytics is not used to track you across other companies' apps or websites.
3.1 App Analytics
- The analytics ID is a random ID created when the app is first opened. It is not your name, account or hardware ID. Deleting the app resets it on iPhone; on Android, Android backup may restore it.
- Events never contain table contents, file names, or images.
- Google Analytics runs with advertising features, ad storage and ad personalization turned off.
4. How Long We Keep It
| Data | Retention |
|---|---|
| Page images and tables on our servers | Not stored. Processed in memory and discarded once the result is returned |
| Page images at Google (Gemini on Vertex AI) | Google may keep inputs for a limited time, for short-term caching and to detect abuse, under the Google Cloud terms, then deletes them. Google does not use them to train models |
| Scan history and free-document marker | On your phone until you delete them or the app |
| Service logs | 30 days (Google Cloud Logging default), then deleted automatically |
| Eodin Analytics events | Until you ask us to delete them. There is no automatic expiry yet |
| Google Analytics events | 14 months, then deleted by Google |
| Emails | 3 years after the conversation ends, then deleted |
| Purchase records | Kept by Apple or Google. We keep only what tax and accounting law requires |
5. Who Processes Data for Us
| Company | Role | Data |
|---|---|---|
| Google LLC (Google Cloud, Firebase App Check, Gemini on Vertex AI, Google Analytics for Firebase) | Runs our processing service, checks app integrity, reads tables with AI, app analytics | Page images, service logs, integrity tokens, analytics events |
| Eodin.app (Eodin Analytics, our own service) | App analytics | Analytics events |
| Apple Inc. / Google LLC (App Store, Google Play) | App distribution and subscriptions | Purchase data, under their own policies |
We do not sell personal data, and we do not share it with anyone else unless the law requires it.
5.1 International Transfers
Google processes data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses or the EU-US Data Privacy Framework.
For users in Korea (PIPA):
- Recipient: Google LLC (USA).
- Items: page images, service logs, integrity tokens, analytics events.
- Purpose: reading tables, running and protecting the service, app analytics.
- When and how: over the network each time you scan.
- Retention: as in §4.
You can refuse by not using the scan feature, but Tablify cannot work without it. To have analytics data deleted, email us (§7).
6. Legal Bases (EEA / UK)
- Reading your tables (page images, integrity tokens): performance of the service you ask for (GDPR Art. 6(1)(b)).
- Service logs and abuse prevention: our legitimate interest in running a secure, affordable service (Art. 6(1)(f)).
- App analytics: our legitimate interest in understanding and improving the app, using a random ID and no advertising identifiers (Art. 6(1)(f)). You can object by emailing us.
- Answering emails: your request (Art. 6(1)(b)).
Eodin.app is the controller.
7. Your Rights
You can ask to access, correct or delete your data, restrict or object to processing, or complain to your data protection authority. In Korea, that is the Personal Information Protection Commission, https://www.pipc.go.kr.
Most Tablify data is only on your phone. Deleting scans in the app, or deleting the app, removes it. We keep no images or tables on our servers. To have analytics data deleted, or for anything else, email official@eodin.app and we will answer within 30 days.
California residents: we do not sell or share personal information for cross-context behavioral advertising.
8. Children
Tablify is a work tool and is not directed at children under 13, or under the higher age of digital consent where local law sets one. We do not knowingly collect their data. If you think a child has sent us personal data, contact us and we will delete it.
9. Security
- All traffic is encrypted in transit (TLS).
- The AI key stays on our server and never ships inside the app.
- Only verified copies of the app can use the service (App Check).
- Our team's public working records never include users' data.
No system is perfectly secure. Please report vulnerabilities to official@eodin.app.
10. Changes
If we change how Tablify handles data, we update this page and its "Last Updated" date first. Material changes are announced in the app before they take effect.
11. Governing Law and Contact
This Policy is governed by the laws of the Republic of Korea. Contact: official@eodin.app
12. Tablify Web
Tablify Web is the web version of Tablify. Sections 1 to 11 describe the mobile apps. For the website, this section applies and, where it differs from the sections above, it prevails. What stays the same: no account, no sign-in, and we do not store your documents or your tables. Pages are sent over HTTPS to our processing service on Google Cloud and read by Gemini on Google Cloud Vertex AI (§2, §4, §5), and the result goes back to your browser. The terms are in the Terms of Service.
12.1 Website Analytics
- What: usage events, sent to Google Analytics 4 (through Firebase Analytics) and to Eodin Analytics (run by Eodin.app). The event names are a fixed list: page view, language change, scan started, scan succeeded, table extracted, scan failed, export, and first cell edit. Their details are counts and closed lists only: for example the route (path only, no query string), the page type, the language, the number of pages, rows and columns, the export format (xlsx or csv), and an error category from a fixed list. Events never contain file names, cell text, images, error text, e-mail addresses or purchase codes.
- Identifiers: Google Analytics uses its own random IDs and, outside Europe, its normal cookies (
_ga). Eodin Analytics keeps a random device ID in your browser's local storage. Google Analytics derives an approximate location (city, region, country) from your IP address. We turn off Google signals and ad personalization, and ad storage is denied. We do not use advertising IDs. - Do Not Track and Global Privacy Control: if your browser sends either signal, both analytics services are switched off.
- Cookieless mode for Europe: if your browser's time zone is in Europe, Google Analytics runs without cookies or browser storage with consent denied, and Eodin Analytics stays off. This is based on the time zone, so it is an approximation.
- Opt out: add
?analytics=offto the address of any Tablify Web page. Your browser remembers it.?analytics=onundoes it. - Retention: Google Analytics events are deleted by Google after 14 months. Eodin Analytics events are kept until you ask us to delete them (§7).
12.2 Daily Free Limit Counters
To give every visitor the same free daily amount and to stop abuse, we count the pages read per day.
- The counters are stored in Google Cloud Firestore under a hashed client identifier (a one-way hash made from the request). The raw IP address is not stored in the counter. Each counter holds only a number and an expiry time.
- There is also one total counter per day for the whole service.
- Counters are deleted automatically a few days after they are created.
- Google Cloud also records standard request data, including the IP address, in its service logs for 30 days (§3, §4).
12.4 Who Processes Data for Tablify Web
| Company | Role | Data |
|---|---|---|
| Google LLC (Google Cloud, Firebase, Gemini on Vertex AI, Google Analytics) | Hosting, processing, counters, AI reading, analytics | Page images in transit, service logs, counters, analytics events |
| Eodin.app (Eodin Analytics, our own service) | Website analytics | Analytics events |
International transfers (§5.1) and your rights (§7) apply to the website too. For European and UK visitors, the legal bases in §6 apply: analytics and counters rest on our legitimate interest. You can object to analytics by using the opt-out in §12.1 or by e-mailing us.