Privacy Policy

DocRecall ("we", "us") helps you scan, organize, and find your personal documents. This policy explains what we collect, how it is protected, and who it is shared with. By using DocRecall you agree to this policy.

1. What we collect

• Your email address — used as your account identifier and to sync your vault across devices.
• Your documents — the files (images/PDFs) you scan or upload, and the details extracted from them (company, amount, dates, category, and similar fields).
• Usage counts — the number of scans you make, to apply plan limits.

We do not store your passcode. Your passcode is used on your device to derive the key that encrypts your documents; it never leaves your device and cannot be recovered by us.

2. How your documents are protected

Documents are encrypted with AES‑256 before they are stored. For accounts secured with an email and passcode, encryption is end‑to‑end — our servers only ever hold ciphertext and cannot read your documents. For accounts that sign in with Google (where there is no passcode to remember), the encryption key is held on the server so it can be released after Google verifies you; those documents are encrypted at rest but are not end‑to‑end encrypted.

3. AI extraction

To read the details from a scanned document, the document is sent to Anthropic (the Claude API) which returns the extracted fields. Anthropic processes the document to provide this service. See Anthropic's privacy practices at anthropic.com/legal/privacy.

4. Service providers we use

• Netlify — hosting and encrypted document/account storage.
• Anthropic — AI document extraction (see above).
• Google — optional sign‑in, and optional backup to your own Google Drive (files our app creates).
• Dropbox — optional backup to your own Dropbox.

Backups to Google Drive or Dropbox are optional and go into your own account, in encrypted form.

5. Data retention & deletion

Your documents remain until you delete them or delete your account. To delete your account and its stored data, contact us at the address below. You can also disconnect Dropbox or Google Drive at any time; copies already placed in those services remain in your own account until you remove them there.

6. Your rights

You may request access to, correction of, or deletion of your personal data. Contact us and we will respond within a reasonable time.

7. Children

DocRecall is not intended for children under 16, and we do not knowingly collect their data.

8. Changes

We may update this policy; material changes will be reflected by the "last updated" date above.

9. Contact

Questions or requests: simo870707@gmail.com.