DocZeno Privacy Policy
Last updated October 7, 2026
This policy explains what data the DocZeno app (“the app”) uses, where it goes, and the choices you have. DocZeno is made by RichLabs, an independent developer (“we”, “us”).
Contact: admin@richlabs.online.
The short version
- Your documents stay on your device. Scans, PDFs, recognised text, extracted receipt and invoice data, signatures and passwords are processed on the device. They are never uploaded to us. We don’t run servers that receive your documents.
- No account. You don’t sign up and we don’t know who you are.
- No analytics or crash reporting of our own.
- Ads in the free version. The free version shows ads from Meta Audience Network, which receives device and advertising data, never your documents. DocZeno Pro removes ads entirely.
- Purchases are handled by Apple or Google and validated by RevenueCat, using an anonymous ID.
Data that stays on your device
| Data | What it’s for |
|---|---|
| Scans, imported photos and PDFs | Your documents, stored in the app’s private storage. |
| Text recognised in documents (OCR) | Search, copy and searchable PDFs. Recognition uses Google ML Kit, which runs on the device. |
| Smart Extract results (merchant, totals, tax, items, contact details from business cards) | Shown and edited in the app. Exported only when you export them. |
| Names, folders, tags, favourites | Organising your documents. |
| Private Vault documents | Encrypted with AES-256. The key is stored in the device’s secure storage (Keychain or Keystore) and never leaves the device. |
| Settings and app preferences | Remembering your choices. |
Your data leaves the device only when you share, export, save a copy or open a document in another app. The app you choose then handles it under its own policy.
Backups. Android excludes documents and the database from Google cloud backup. On iOS, the app’s documents are included in your iCloud or computer backup like other app data, except the Private Vault, which is excluded from backups.
Data shared with third parties
Advertising: Meta Audience Network (free version only)
The free version shows ads served by Meta Platforms (“Meta Audience Network”). When ads load, Meta’s SDK may collect:
- Device identifiers:
- the Android advertising ID;
- on iOS, the advertising identifier (IDFA) only if you allow tracking in Apple’s prompt.
- Usage data:
- IP address and approximate location derived from it;
- device model, operating system and app version;
- ad interactions (views, clicks);
- diagnostics.
These are used to serve, measure and personalise ads, and to prevent fraud. Your documents and their contents are never sent for ads. Ad requests carry no document text.
- DocZeno Pro users: the ads SDK is not started at all.
- iPhone: you are asked once whether DocZeno may track you across other companies’ apps and websites. You can change this any time in iOS Settings → Privacy & Security → Tracking. Declining changes only ad personalisation; every feature works either way.
- EEA, UK and Switzerland: the app asks before any ad is shown. If you don’t allow ads, no ads are shown.
- Elsewhere: in Settings → Ad privacy choices you can choose Limit. Meta then applies its Limited Data Use where US state privacy laws require it.
Meta’s policy: Meta Privacy Policy.
Purchases: Apple, Google and RevenueCat
Purchases of DocZeno Pro are made through the App Store or Google Play. We never see your payment details.
RevenueCat, Inc. validates purchases and tells the app whether Pro is active. It receives:
- an anonymous app user ID created by RevenueCat;
- purchase history and receipts;
- basic device information (for example, OS version and store country).
Policies:
Text recognition: Google ML Kit
Text recognition runs on your device with Google ML Kit. Your images and text are not sent to Google. ML Kit may send Google limited diagnostic and usage information about the SDK itself, such as performance and API usage, without document content.
On Android, Google Play services may also be used. See ML Kit terms and the Google Privacy Policy.
Permissions
| Permission | Why |
|---|---|
| Camera | Scanning documents. Only when you start a scan. |
| Photos | Importing photos you choose, or saving images you export. iOS lets you pick only specific photos. |
| Face ID, Touch ID or fingerprint | Opening App Lock and the Private Vault. Biometric data never leaves the system and is never seen by the app. |
| Internet | Ads (free version) and purchase validation. |
| Advertising ID (Android) | Ads in the free version. |
How long data is kept
- On your device: documents and app data stay until you delete them, or until you delete the app, which removes them.
- With third parties: Meta and RevenueCat keep data under their own retention policies.
- With us: we receive no app data, so we keep none. If you email us, we keep the conversation only as long as needed to help you.
Your rights and choices
Depending on where you live (for example under the GDPR in the EEA and UK, or California and other US state laws), you may have the right to:
- access or delete personal data;
- correct it;
- object to or restrict processing;
- withdraw consent;
- opt out of targeted advertising.
Your choices in the app:
- Buy DocZeno Pro to remove ads.
- Change Settings → Ad privacy choices.
- Change iOS Tracking permission.
- On Android, reset or delete your advertising ID in Android Settings → Privacy → Ads.
To delete everything on the device, delete the app. For data held by Meta or RevenueCat, use their privacy contacts, or email us and we’ll pass on your request where we can.
Our legal bases (EEA/UK):
- Performance of the service: app features and purchases.
- Consent: personalised ads in the EEA, UK and Switzerland.
- Legitimate interests: fraud prevention and keeping the app working.
Children
DocZeno is not directed at children under 13, or under 16 in the EEA. We don’t knowingly collect children’s data.
Security
- Documents are stored in the app’s private storage.
- The Private Vault uses AES-256 encryption with a key held in the device’s secure hardware-backed storage.
- App Lock can require Face ID, fingerprint or your passcode.
- Data sent by the SDKs is encrypted in transit (HTTPS/TLS).
International transfers
Meta, Google and RevenueCat may process data in countries other than yours, including the United States, under their own safeguards (such as standard contractual clauses).
Changes
If this policy changes, we’ll update this page and the date at the top. Significant changes will also be noted in the app’s release notes.
Contact
RichLabs: admin@richlabs.online