A multi-functional printing (MFP) includes a scan privacy tool to allow edits and changes to a scanned document image to remove or hide private information within a document. The scan privacy tool is enabled for jobs on the MFP device and launches when a job is run. The document is scanned and a scanned document image displayed on a display and edit interface of the scan privacy tool. Changes are made to the image using tools available through the scan privacy tool. The changes are applied to the scanned document image. The modified image is saved and transmitted to an engine in the MFP device to complete the job. An external input device, such as control buttons or a motion sensor device, is used to input instructions to the scan privacy tool in order to modify the scanned image.