Overview
DocAZ is a document scanning and organization app built to work fully on your device. This policy explains what information DocAZ collects, why, and what your choices are. If you don't create an account, DocAZ collects nothing about you at all.
Information we collect
If you don't sign in: nothing. DocAZ works completely locally - no account, no data sent anywhere, no analytics, no advertising IDs.
If you create an account (only needed for optional cloud backup and sync, a paid Premium feature): your email address, or your Google account's name/email if you sign in with Google. This is used solely to identify your account and let you sign in on another device.
Your documents, folders, tags, and reminders are only sent off your device if you have an active Premium subscription with cloud sync turned on. They are encrypted before they ever leave your device (see "How your data is protected" below).
Subscription status (whether you're on Premium, and which plan) is stored against your account so the app knows what you're entitled to. Payment itself is handled entirely by Google Play Billing - DocAZ never sees or stores your card details.
DocAZ does not collect: your photos or camera roll (the scanner opens Google's own document-scanning component, which DocAZ has no access to beyond the finished scan you choose to save), your location, contacts, health data, or financial account information. DocAZ does not use analytics or crash-reporting SDKs, and does not show ads.
On-device text recognition (OCR)
To make the in-app Find search work, DocAZ runs on-device text recognition on each page you scan or import. The extracted text is used only to build a local search index on your phone. It is never sent to us or to any third party, whether or not you have an account.
How your data is protected
Every document is encrypted on your device the moment it's saved, using AES-256 encryption - readable only from inside DocAZ, not by a file manager or another app. If you turn on Premium cloud sync, that same encrypted data is what's stored on our backend; we do not have a copy of your documents in plain, readable form.
Our cloud backend uses Google Firebase (Firestore, for encrypted metadata, and Authentication, for sign-in) and Cloudflare R2 (for encrypted document storage). Both act strictly as infrastructure processors for DocAZ - neither has independent access to your documents' content.
Data retention & deletion
Deleted documents, folders, tags, and reminders sit in Trash for 30 days before being permanently removed, both locally and (if sync is on) in the cloud - or you can empty Trash immediately at any time.
You can delete your account and its cloud-linked data at any time directly from inside the app, with no waiting period. Full step-by-step instructions are on our Delete Account & Data page.
Your choices
- Use DocAZ entirely without an account - the default, and always free.
- Export a local, encrypted backup of your documents at any time from Settings.
- Turn cloud sync off at any time; your documents remain on your device.
- Delete your account and cloud data at any time, from inside the app.
Children's privacy
DocAZ is not directed at children and is not intended for use by anyone under 18.
Changes to this policy
If this policy changes in a meaningful way, we'll update the date at the top of this page.
Contact
Questions about this policy: contact@docaz.app