Privacy policy
This policy is the public version of how DocVault handles data. It matches the in-app Privacy screen.
Your documents stay on this phone
DocVault is a PDF scanner and toolkit. Scans, page images, recognised text, signatures, annotations and the library database are stored encrypted in app-private storage on your device. Capture, edge detection, filters, text recognition, PDF tools, redaction, PDF-to-Word and reading all run on the phone.
There is no DocVault account, no sign-in, no cloud sync and no DocVault server. Nothing you scan, open or convert is uploaded by DocVault. Nothing about you is sent to Nuvora Labs except as described below for ads (free version) and Play purchases.
Android backup is switched off for this app. If you make a backup inside DocVault, it is a file you choose, encrypted with a password only you know. Crash reports stay on the phone unless you share them yourself.
Files on your phone
DocVault includes a file manager. If you use it, DocVault asks for All files access (on Android 8–10, the storage permission), only from the Files tab and only after explaining why. With it, DocVault lists, searches and opens the documents on your phone and, when you ask, renames, copies, moves or deletes them. Your files are never uploaded, analysed or shared.
To make search fast, DocVault keeps an index of file names and details only (name, type, size, dates, folder, favourite, last opened) in its encrypted database on your phone. The index never contains the contents of a file, is not included in backups, and you can clear it in Settings. If you decline the permission, DocVault works only with the files and folders you pick.
Files you open in DocVault, from the file manager or from another app, are shown on the phone. DocVault never changes a file another app sent it. When a viewer needs a temporary copy, it keeps it in DocVault’s private storage and deletes it when you close the file. DocVault’s viewers have no internet access: they never load pictures or fonts from the web and never run macros or scripts, not even in web pages you open. A link in a document opens in your browser only after you confirm it. The usage reporting built into Android’s web view, which some viewers use, is switched off in DocVault.
Ads (free version)
The free version may show ads from Google. Google’s Mobile Ads SDK can collect:
- Advertising ID and app-set ID
- Approximate location derived from IP address
- App interactions
- Diagnostic information
Google uses that for advertising, analytics and fraud prevention. Document content is never sent to the ad SDK. Ads are not placed on screens that show a document.
If you buy DocVault Pro or Remove ads, the ad SDK is not started. Where Google requires it, a consent form (User Messaging Platform) may appear. You can open privacy options again from Settings → Privacy.
Payments
Purchases go through Google Play. DocVault only stores whether Pro or Remove ads is unlocked, encrypted on the phone. We do not store your payment card details.
Text recognition
On-device ML Kit. Images and text are not sent to Google. Pattern detection for Redact & Secure (email, phone, PAN-format and similar) also runs only on this phone. Usage telemetry from Google’s recognition and billing libraries is switched off in DocVault. DocVault has no analytics of its own.
Permissions
- Camera — to scan pages and codes
- Biometric / fingerprint — optional app lock
- Internet / network state — ads (free) and Play Billing
- Advertising ID — ads (free)
- All files access (Android 11+) or storage (Android 8–10) — the file manager, only if you allow it (see Files on your phone)
DocVault never reads other apps’ private data. Without file access it sees only the files and folders you pick with the system picker. You can withdraw the permission at any time in Android settings; DocVault then falls back to the picker and clears its index.
Deleting data
Deleting a document removes it from this phone after 30 days in the recycle bin, or straight away if you empty the bin. Uninstalling DocVault removes everything it keeps in its own storage; backups and files you saved elsewhere stay where you put them. Advertising identifiers are controlled in Android settings. DocVault does not hold a copy of your documents off the device, so there is nothing to delete from a server.
Contact
Questions about this policy: support@qrscanner.site
Changes to this policy will be dated at the top. The in-app Privacy screen always matches this page.