Doctropy
App privacy policy
Save as PDFThis policy covers the Doctropy app. For the doctropy.com website, see the website privacy policy.
In short
The app processes your documents exclusively on your device. There is no server that receives content, no user account, no sign-in, no analytics and no advertising identifiers. We collect no personal data through the app.
Because the app sends no data to us, there is nothing we could hand over, lose or evaluate.
Controller
Markus Gildenhard
c/o IP-Management #11573,
Ludwig-Erhard-Straße 18, 20459 Hamburg, Germany
Email: dev@doctropy.com
What the app processes — and where
| Data | Purpose | Where |
|---|---|---|
| Photos of your documents | capture and filing | on the device, encrypted |
| Recognised text | full-text search | on the device, encrypted |
| QR codes of the dividers | assignment to a binder | on the device, encrypted |
| Your passphrase | key derivation | not stored |
| Language setting | user interface | on the device |
None of this leaves your device unless you explicitly choose cloud storage as the location (see below).
Text recognition
Text recognition runs on the device (Google ML Kit, included as a local library in the app or in Google Play services). Your photos are not transmitted to Google or to us. The recognition model itself may be fetched by Google Play services on first use — that downloads the model, it does not upload your document.
Permissions
| Permission | What for |
|---|---|
| Camera | photographing documents and dividers. Images are processed immediately and stored encrypted. |
| Storage / file access | only the archive directory you selected |
| Internet | solely to synchronise with a cloud storage location you chose. Without cloud storage the app opens no network connection. |
You can revoke any permission in your system settings. The corresponding function then stops working; the rest of the app continues to run.
Encryption
Your archive is encrypted with AES-256-GCM. The key is derived from your passphrase using Argon2id and exists only in memory while the archive is open. The passphrase itself is never stored.
This also means: we cannot reset your passphrase and cannot recover your archive. If it is lost, the data is irrecoverably unreadable. Keep it safe.
Cloud storage (optional)
Instead of device storage you may choose a cloud location (for example Google Drive in your own account). In that case, additionally:
- The files remain encrypted there. Your provider sees file names, sizes and timestamps, but no content — Google included.
- It is your account and your contract with that provider. Their privacy policy applies in addition; we are not involved and have no access.
- You establish the connection yourself through that provider's sign-in. We receive no credentials.
What the app does not do
- No analytics or crash reporting, no Firebase, no Google Analytics.
- No advertising, no advertising ID, no profiling.
- No user account and no registration.
- No sharing with third parties — there is nothing to share.
Distribution via Google Play
If you install the app from the Google Play Store, Google processes data as the store operator (such as your Google account and installation data). We have no influence on this; Google's privacy policy applies. That processing happens in the store, not in the app.
Legal basis
Insofar as the app processes personal data at all, it does so locally on your device and on your instruction in order to perform the usage agreement (Art. 6(1)(b) GDPR). No transmission to us takes place.
Deletion
Your data is in your hands: delete the archive directory or uninstall the app. If the archive is in cloud storage, delete it there. No request to us is necessary — we have stored nothing.
Your rights
You have the rights under Art. 15 to 21 GDPR (access, rectification, erasure, restriction, portability, objection). In practice they come to nothing, because we hold no data about you — you are welcome to ask anyway, at the address above. You may also lodge a complaint with a data protection supervisory authority, usually the one where you live.
Changes
If the way the app works changes, this policy changes with it. The current version is always at this address.
published: 22.08.2026