Medical letters & referrals
Photograph a letter and ask what it means — the names and dates the scan detects are cloaked before any AI sees the text. Check the preview first: reference numbers in unfamiliar formats can go undetected.
On-device OCR scanner Scan it.
Scan it.
Cloak it first.
A photo of a letter, a screenshot of a form, a scanned invoice — the pages that most need reading are exactly the ones you shouldn't paste into a public AI. cloak-scan reads the page with on-device OCR, right in your browser: the image itself is read on this device. Before the reviewed text is offered to an AI, detected names, dates and identifiers are swapped for realistic surrogates. A value the OCR or detector misses may remain as written.
- On-device scanning — the image stays here
- Detected values replaced before sending
- On-device receipt
Drop an image here, or click to choose
PNG, JPEG, WEBP, BMP, GIF, TIFF — read entirely on your device
Or try a sample
The pages you photograph, not paste
Invoices & receipts
Scan a handwritten invoice and extract the total, dates and line items — the client name and IBAN, when the scan detects them, stay on your device.
Forms & ID documents
Read a filled-in form with the names, addresses and ID numbers the scan detects swapped for surrogates before anything reaches a model provider.
Foreign-language pages
Translate a scanned letter to English — names, dates and numbers the scan detected are put back exactly as they were, not re-guessed by the model.
The scan, in three passes
Capture — on your device
A WebAssembly OCR engine reads the text off your photo or screenshot right in the browser tab. The image is read in this tab; this OCR path does not upload the file.
Cloak — redaction bar lifts
A second on-device engine, plus a multilingual name model, looks for names, emails, phones, addresses and cards in the extracted text — across Latin, Cyrillic, Arabic and CJK — and replaces values it detects with realistic surrogates. Structured identifiers match by rule; free-form names rely on the on-device model, so an unusual one can slip past and remain as written. Review the request text before sending; the preview does not measure egress bytes. Detection sends no extracted text.
Ask — a cloaked copy travels
When you choose Ask, the reviewed text is sent through the app server to the CloakAPI gateway with a MAC over the serialized request bytes. That MAC does not prove that every value was detected or replaced. Detected values are represented by surrogates; anything the on-device engines miss may remain as written.