Privacy Policy

Last updated: September 25, 2026

DocuTracker ("the app") is a personal document tracking application for iOS and Android. This policy explains what data the app handles, where it is stored, and the limited circumstances in which information leaves your device.

1. Data Stored on Your Device

All documents, photos, entity profiles (people, families, companies, houses), expiry dates, notes and app settings are stored locally in the app's private storage on your device. DocuTracker does not operate its own servers and does not create user accounts. We never see, collect, or transmit your data to ourselves.

2. Google Drive Backup (Optional)

If you choose to sign in with Google and enable backup, the app uses the Google Drive drive.file scope. This means:

The app can only read and write files that DocuTracker itself creates in your Drive. It cannot see or access any other files in your Drive.
Backups are initiated by you (manually, or via in-app settings) and restore only onto your own devices.
Sign-in is handled entirely by Google; the app never receives your Google password. OAuth tokens are managed by the operating system and Google Play services.
Your backed-up data remains in your Google account under your control, subject to Google's own privacy policy.

You can revoke the app's access at any time from your Google Account settings (myaccount.google.com/permissions) or by signing out inside the app.

3. AI Document Parsing (Optional)

When you use the smart-scan feature, the text recognized from a scanned document (OCR output — text only, not the image) is sent to the OpenAI API to extract structured fields such as the document title, number, holder name and dates. This happens only when you explicitly trigger scanning. The request is made directly from your device; document images are not uploaded. Use of the OpenAI API is subject to OpenAI's privacy policy.

4. Camera & Photos

Camera access is used solely to scan documents you choose to capture. Captured images are stored locally on your device and are not transmitted.

5. Notifications

The app schedules local, on-device notifications to remind you before documents expire. Notifications are generated locally; no push-notification server is used and no data leaves your device for this feature.

6. Biometric Lock

If enabled, app lock uses your device's built-in biometric authentication (fingerprint/face). Biometric verification is performed entirely by the operating system; the app never receives or stores biometric data.

7. Purchases & Subscriptions

Premium subscriptions are processed by the app store on your device (Apple App Store or Google Play). Payment details are handled by the store provider; the app only receives a confirmation of your entitlement status.

8. What We Do NOT Do

No analytics or usage tracking SDKs
No advertising or ad identifiers
No crash-reporting services
No sale, rental, or sharing of your data with third parties for their own purposes
No user accounts on DocuTracker servers — we have none

9. Data Deletion

Uninstalling the app removes all locally stored data. Cloud backups, if created, can be deleted by removing the DocuTracker files from your Google Drive. Revoking Google access is possible at any time via your Google Account permissions page.

10. Children's Privacy

The app is not directed at children under 13 and does not knowingly collect personal information from children.

11. Changes to This Policy

If this policy changes, the updated version will be posted at this URL with a revised "Last updated" date.

12. Contact

Questions about privacy can be sent to dr.rifas@gmail.com.