Privacy policy

Effective [date: to be filled in]

Dokulo is a PDF toolkit and scanner that works on your phone. Your files stay on your phone: we don't upload them, we can't see them, and we don't have an account system or a server that could hold them.

Who is responsible

[controller name: to be filled in], [postal address: to be filled in]. Questions about privacy: [email: to be filled in].

What Dokulo does on your phone only

• Your files, scans and edits. Opening, scanning, converting, compressing, signing, redacting, OCR and every other tool run on your phone. Results are saved where you choose. Nothing is sent anywhere.
• AI features (summaries, questions about a PDF, translation, Smart Split) run on your phone with models you download. Your documents are not sent to any AI service.
• The locked folder is encrypted on your phone; its key is kept in your phone's secure storage (Keychain / Keystore) and opened with Face ID, your fingerprint or your PIN. We never receive it.
• Find documents in photos looks through your photos on your phone, only after you turn it on. Nothing is uploaded.
• Settings and the list of files you used recently are kept on your phone.

What uses the internet, and only when you start it

Dokulo works in airplane mode. Three things use the internet:

1. Downloading an AI or language model you choose (for example the summary model or a translation pack). Your phone requests the file from the server that hosts it (currently Hugging Face and Mozilla's model storage on Google Cloud). Like any download, that server sees your IP address and the file requested. No document content is sent.
2. Web page to PDF. When you enter a web address, Dokulo loads that page from the internet, as a browser would, and turns it into a PDF on your phone. The website you load sees the request like any visit.
3. Buying or restoring Pro. The purchase is handled by the App Store or Google Play under their privacy policies. We receive no payment details; your phone only learns that Pro is unlocked.

No tool sends your files anywhere while it works.

What we don't do

• No ads. Dokulo shows no advertising and contains no ad SDK.
• No analytics or tracking. We don't measure how you use the app, build profiles, or use advertising identifiers.
• No account. You don't sign up, and we hold no data about you.
• No selling or sharing of data: we don't have it to share.

Crash reports: off unless you turn them on

If you turn on "Keep crash reports" (Settings → Privacy), Dokulo keeps a short log of crashes on your phone: the error code, the time, the kind of error and the place in Dokulo's code. It never contains file names, folder paths, text or images from your documents, or anything that identifies you. It leaves your phone only if you choose "Send report by email": your mail app opens with the report, and you decide whether to send it. If you do, we use the email and the report only to fix the problem, and delete them when that is done, at the latest after 12 months.

Permissions

Dokulo asks for a permission only when you first use the feature that needs it, and works without it otherwise:

• Camera: to scan. Images stay on your phone.
• Photos: to import photos you pick (no permission on recent systems) and, if you turn it on, to find documents in your photos.
• Add to Photos: to save images you export.
• Notifications: to tell you when a long job has finished.
• Face ID / fingerprint: to open the locked folder and the app lock.

Children

Dokulo is a general-purpose tool and collects no data from anyone, children included.

Your rights

Because we don't collect personal data, there is nothing we hold about you to access, correct or delete. If you emailed us a crash report, you can ask us at [email: to be filled in] to delete it; you can also complain to a data protection authority.

Changes

If what Dokulo does with data changes, we update this policy and the date above before the new version of the app is released.