Privacy-first redaction
Scrub personal info out of your files — before AI ever sees them.
Remove names, addresses, IDs, faces and more from images and PDFs — entirely on your iPhone. No upload, no account, no telemetry. The file you share is the only thing that leaves the device.
What it does
Real redaction, not a black rectangle on top.
Scrub destroys the underlying pixels and text — redacted content is gone from the output file, not just hidden. Everything runs on-device using Apple's on-chip Vision engine and a bundled detection core.
Truly destructive
Black bars, Gaussian blur, or pixelation — applied by burning pixels, so the original text or face can't be recovered from the saved file.
On-device detection
OCR finds text-based PII — emails, phone numbers, card and account numbers — and flags it as red boxes you review before redacting.
Faces & barcodes
Detects faces and barcodes/QR codes too — handy for IDs, tickets, and shipping labels that leak more than you'd expect.
Regional PII patterns
Checksum-validated patterns for the US, Brazil, Great Britain, Mexico and Canada — national IDs, tax IDs, postal codes and more, chosen automatically by your locale.
Metadata stripped
EXIF location, device info, and PDF metadata are removed from the output — irreversibly — so hidden data doesn't ride along.
Custom terms & batches
Add your own sensitive terms (your name, employer) to catch them every time, and process up to 10 files in one sitting.
How it works
Open, review, redact, share.
Open a file
Pick a JPEG, PNG, HEIC, TIFF, or PDF — or send it straight to Scrub from any app's share sheet.
Review the red boxes
Scrub shows every detection as an overlay. Tap to add, resize, or dismiss boxes — you stay in control of what gets removed.
Redact
Choose bars, blur, or pixelation. Scrub destroys the pixels and text underneath — for good.
Share the safe copy
The original is never overwritten.
The whole point
Nothing leaves your device. We mean it.
Scrub exists so you can use cloud AI without handing it your private data. That only works if Scrub itself never phones home — so it doesn't.
- All processing is on-device — no file content is ever uploaded.
- Zero analytics, zero telemetry, zero crash reporters that phone home.
- No account, no sign-in, no tracking across apps or sites.
- Your custom sensitive-terms list stays on your device and is yours to delete.