Privacy Policy

Android:documents and your Essentials metadata are stored in the app’s private sandbox. Document files and the encrypted index are encrypted at rest with AES-256-GCM. The encryption key is stored in the Android Keystore and never leaves your device.

iOS:document metadata and Essentials are encrypted with AES-256-GCM. Document files are stored in the app’s sandbox (and, when iCloud sync is on, in your personal iCloud Drive under “Docrux” so they appear in the Files app). iOS protects those files with its sandbox and Data Protection; Docrux does not double-encrypt individual document files on iOS.

We never collect your real device identifier, name, or email address. The app generates a random anonymous ID (a UUID) used only for aggregate analytics counts. Support requests use an app-generated code (e.g. DRX-a1b2c3d4) with no link to your real identity. These codes are random strings stored on your device. We cannot trace them back to you.

The app may request access to your camera or photo library to scan documents. Images are processed entirely on-device using Apple Vision (iOS) or ML Kit (Android). Image data is not transmitted to Docrux servers. Raw images are discarded once OCR extraction is complete; only the extracted text and the resulting document file are saved locally.

Docrux can lock when you leave the app. Unlock uses Face ID, Touch ID, fingerprint, your device passcode, or an optional app PIN you set in Settings. The biometric check is performed by the operating system; Docrux never receives or stores biometric data.

Sensitive Essentials fields (passport numbers, licence details, etc.) stay masked until you unlock the app or tap to reveal a field temporarily.

iOS: iCloud sync is opt-in (off by default). When enabled, your encrypted metadata and document files sync to your personal iCloud account (container iCloud.app.docrux.docrux). Documents appear in the Files app under iCloud Drive > Docrux. You can also place your own files in that folder; Docrux will not delete files it did not create.

Android:Google Drive sync is opt-in. Your encrypted metadata, Essentials, and document files are stored in a “Docrux” folder in your own Google Drive. The app works fully without Drive.

Several optional features use AI to improve accuracy: automatic document naming, essentials field extraction, and checklist matching. When you use these features, the app sends a portion of the OCR text already extracted on your device to the Docrux backend, which forwards it to Google Gemini. This processing is transient. Document text is processed in memory and immediately discarded. Nothing is logged or stored on our servers. No document files are ever sent. Only plain text.

AI features are opt-in and can be set to on-device only or fully manual in Settings. On-device AI (Apple Intelligence on supported devices) never sends data off your phone.

AI training: Docrux uses the Google Gemini API under terms that prohibit Google from using submitted content to train or improve its AI models. Your document text is not used to train any AI model.

The app uses PostHog for anonymous usage analytics (screen views and feature usage counts, never names, emails, or document content) and Sentry for crash reporting (stack traces, device model, OS version). A PII scrubber strips document names, extracted text, notes, and file paths from all crash reports before they leave your device. Both services are fire-and-forget; no personally identifiable information is included in any event.

Docrux offers optional Pro subscriptions (monthly and annual) via Apple’s App Store and Google Play. Purchase transactions are processed entirely by Apple or Google. We receive only an anonymous receipt to verify subscription status. We do not receive or store your payment method, billing address, or store account ID.

Uninstalling the app removes all local data. If iCloud sync was enabled, your files remain in your iCloud Drive until you delete them. If Drive sync was enabled, delete the “Docrux” folder from your Google Drive and revoke access in Google account permissions. No further action is needed.

When you use optional AI features in the mobile app, extracted text is sent over HTTPS to our backend on Vercel, processed in memory, and discarded. These endpoints are HMAC-authenticated and rate-limited. No document files are accepted.

A private admin area uses Google Sign-In to authenticate the operator only. It shows aggregate install and usage counters, not user documents or profile data.

Our hosting provider (Vercel) automatically records standard web server logs (IP address, request path, response code, timestamp) for a limited retention period. These logs are used only for debugging and security. We do not use them to build profiles or track behaviour.