Privacy-first redaction
Scrub personal info out of your files, before cloud AI ever sees them.
Remove names, addresses, IDs, faces and barcodes from images and PDFs, entirely on your iPhone. No upload, no account, no telemetry. The file you share is the only thing that leaves the device.
100% on-device · Data Not Collected
What it does
Real redaction, not a black rectangle on top.
Scrub destroys the underlying pixels and text, so redacted content is gone from the output file, not just hidden. Everything runs on-device: Apple's on-chip Vision engine for text and faces, and on-device AI for names and addresses.
Truly destructive
Black bars, Gaussian blur, or pixelation. Each one is applied by burning pixels, so the original text or face can't be recovered from the saved file.
On-device detection
OCR reads the text, then on-device AI and pattern matching flag PII as red boxes you review before redacting: names, addresses, emails, phone numbers, card and account numbers.
Faces & barcodes
Detects faces and barcodes/QR codes too. Handy for IDs, tickets, and shipping labels that leak more than you'd expect.
Regional PII patterns
Checksum-validated patterns for the US, Canada, the UK, Australia and New Zealand: national IDs, tax IDs, and postal codes, chosen automatically by your locale.
Metadata stripped
EXIF location, device info, and PDF metadata are removed from the output, irreversibly, so hidden data doesn't ride along.
Custom terms & batches
Add your own sensitive terms (a nickname, employer, account label) for extra certainty on top of automatic detection, and process up to 10 files in one sitting.
How it works
Open, review, redact, share.
Open a file
Pick a JPEG, PNG, HEIC, TIFF, or PDF, or send it straight to Scrub from any app's share sheet.
Review the red boxes
Scrub shows every detection as an overlay. Tap to add, resize, or dismiss boxes. You stay in control of what gets removed.
Redact
Choose bars, blur, or pixelation. Scrub destroys the pixels and text underneath.
Share the safe copy
The original is never overwritten.
In the app
You stay in control of every detection.
Scrub does the finding. You decide what gets removed, what gets kept, and what it should always watch for next time, all without a single byte leaving your iPhone.
Teach Scrub the terms that matter to you.
Automatic detection catches names, addresses, and the obvious PII, but not everything is obvious. Long-press any text (a nickname, a project codename, your employer) and add it as a sensitive term. Every future scan flags it for you automatically.
Strip hidden metadata. Keep only what you choose.
Photos quietly carry EXIF data: device model, software version, even GPS coordinates. Scrub removes the pure privacy fields by default, and lets you toggle back anything you actually want to keep, like the software version or an embedded thumbnail.
The whole point
Nothing leaves your device. We mean it.
Scrub exists so you can use cloud AI without handing it your private data. That only works if Scrub itself never phones home, so it doesn't.
- All processing is on-device. No file content is ever uploaded.
- There are no analytics, no telemetry, and no crash reporter that phones home.
- You never create an account or sign in, and Scrub doesn't track you across apps or sites.
- Your custom sensitive-terms list stays on your device and is yours to delete.