1. Overview & Core Privacy Principles
This Privacy Policy describes how Docly ("Docly", "we", "us", or "our", developed by RedRope) treats information collected through the Docly: PDF Scanner & Secure Document Vault mobile application for Android.
Our core philosophy is simple: Your documents, scans, extracted texts, and profile details stay strictly on your device. We do not operate remote databases to store your scanned files, nor do we sell, rent, monetize, or track your personal information.
100% Free • No Mandatory Account Creation • No Remote Server Uploads • No Ad Networks • No Hidden Trackers • On-Device Machine Learning OCR.
2. Data We Do NOT Collect
Unlike conventional cloud scanning apps, Docly does not collect or transmit any of the following to external company servers:
- No Document Uploads: Scanned images, cropped documents, and generated PDF files never leave your device unless you explicitly share them via the system share sheet or configure personal Google Drive backup.
- No Identity or Profiling: We do not ask for or collect your real name, phone number, address, or location coordinates.
- No Advertising Trackers: The application contains no third-party marketing SDKs or ad monetization networks.
- No Telemetry of Document Contents: Text extracted through OCR (Optical Character Recognition) is never sent to our servers.
3. Information Stored Locally on Your Device
When you use Docly, the following data is saved exclusively in your device's private, sandboxed app storage directory:
- Scanned Document Files: Image captures and compiled PDF files.
- Document Metadata: Document title, tags, assigned category (e.g., ID, Receipt, Document, Medical, Education), file size, creation dates, and extracted OCR text strings.
- Vault Profile & Preferences: Your chosen Vault Profile Name, theme setting (Dark, Light, System), auto-detect toggle state, and app lock preference.
4. Device Permissions Requested and Why
Docly requests minimum Android runtime permissions strictly necessary to perform its utility functions:
5. On-Device OCR & Machine Learning Processing
Docly uses Google ML Kit for on-device document scanning, edge detection, perspective transformation, and Optical Character Recognition (OCR).
All machine learning inference runs 100% locally on your smartphone's hardware. Your scanned pages, images, and transcribed texts are not sent over the network to external AI processing APIs.
6. Direct Cloud Backup & Sync (Google Drive)
Docly includes an optional personal Google Drive sync integration. When you connect your Google Account:
- Data is transferred directly between your mobile device and your personal Google Drive storage using official Google APIs (Google Drive API v3).
- No intermediary servers, proxy servers, or third-party cloud services have access to your OAuth tokens or backup files.
- You retain complete control over your backup folder and can disconnect or revoke access at any time from your Google Account settings.
7. Biometric Protection & Security Architecture
Docly leverages Android's hardware-backed biometric authentication (Android BiometricPrompt & Keystore).
- Zero Biometric Data Access: The app never reads or stores your biometric raw data (fingerprints or facial scan models). Authentication verification is handled completely by the Android Operating System.
- Sandboxed File Storage: Files are stored in the application's internal private storage directory, isolated from other installed apps.
8. Data Retention, Loss Notice & Deletion Rights
Because your files are stored locally on your device:
- Immediate In-App Deletion: You can delete any individual document or clear the entire vault at any time by navigating to Settings → Clear All Vault Documents.
- Uninstalling the App: Uninstalling Docly or clearing application storage from Android App Settings will permanently erase all documents stored inside the local vault.
- Notice: Docly operates as an offline emergency tool and private vault. We recommend keeping independent backups of irreplaceable original records.
9. Children's Privacy (COPPA & GDPR)
Docly does not knowingly collect, solicit, or maintain personal identifiable information from children under the age of 13 (or under 16 in the EEA). Because all data is processed strictly offline without user accounts or server storage, children's privacy is inherently respected.
10. Contact the Developer & Founder
If you have questions, inquiries, or feedback regarding this Privacy Policy or Docly's data protection practices, please contact us: