Your privacy, in plain language · Effective July 26, 2026
Your Data, Your Control. Privacy First.
DocQR Tools operates under a strict local-first philosophy.
Scanning, PDF generation, notes, and utilities execute directly on your hardware. Multi-provider AI features
use zero-retention encrypted pipelines.
sys:~$All scans and documents stay on your physical
device. Zero bytes leave device.
Showing all sections
No matching sections found
We couldn't find any policy sections
matching your search query. Try searching for other terms like 'camera', 'groq', 'delete', or 'firebase'.
★
Summary & Core Guarantees
Core Guarantee
Executive Summary:DocQR Tools is built with zero
monetization of user data. Utility features do not require cloud infrastructure.
What We Never Do
• Never sell or broker document data or scan logs.
• Never upload your PDFs or OCR contents to our servers.
• Never train AI models using your prompts or files.
What We Guarantee
• All utility features function 100% offline.
• In-flight encrypted TLS 1.3 token streaming for AI tools.
• Permanent erasure of cloud records upon simple email request.
01
AI Tools & Zero Data Retention
Ephemeral Inference
Our productivity utilities include optional AI tools: PDF Summarizer, Invoice OCR
Extractor, Text Translator, and Smart Editing. When used, content is transmitted directly over HTTPS (TLS
1.3) tunnels to vetted enterprise inference endpoints: GroqCloud™ (Groq Inc.), OpenRouter, and NaraRouter.
In-Memory
Transient ProcessingPrompts exist exclusively in volatile server RAM while answers are generated.
The buffer is destroyed immediately upon completion. Zero disk caching, zero training, and zero
retention.
BYOK (Bring Your
Own Key) ProtectionPower users supplying their own OpenRouter or Gemini API keys keep those keys
encrypted strictly within hardware-backed device keystore. Custom keys never transmit to Bengal
Bytes.
02
Device Permissions Rationale
Least Privilege
Every runtime permission requested by DocQR Tools adheres to Android's principle of least privilege.
Permissions are never used in the background.
CAMERA
Used exclusively for live scanning of QR codes and barcodes.
Video feeds are analyzed locally in memory and never saved.
STORAGE / MEDIA
Required to import documents and save exported PDFs
directly to your physical file system.
MICROPHONE
Used strictly during active Speech-to-Text input. Audio is
never recorded or transmitted remotely.
NOTIFICATIONS
Dispatches local reminder alerts for utility schedules and
conversions.
03
Cloud Sync & Storage Modes
SQLite Sandbox
Guest Mode
(Default)All documents, scans, and notes exist solely in your device's SQLite
sandbox. We operate zero cloud servers for guest users.
Optional
Google Sign-InSigning in with Google synchronizes solely your virtual coin balance and
application preferences via Firebase Firestore. Documents and files are NEVER uploaded.
04
Third-Party Service Integration
Strict Isolation
We partner only with vetted enterprise infrastructure providers for authentication, rewarded ads, and AI
inference. None of these partners have access to your documents.
Used for optional Google sign-in and coin ledger persistence. Does not store your documents.
Serves non-personalized rewarded advertisements to fund free features. Has zero access to local
documents.
High-speed inference processors. All payloads are processed ephemerally with zero data logging or
retention.
GP
Google Play Data Safety Matrix
Full Disclosure
In accordance with Google Play's mandatory Data Safety declarations, the following table details every
data type interacted with by DocQR Tools:
Data Category
Collected / Shared?
Processing Mode
Purpose
Personal Info (Name, Email, UID)
Collected only if signed in
Encrypted in Transit (TLS 1.3)
Account management & coin sync
Financial Info (Virtual Coins)
Collected (Internal only)
Encrypted Firestore Ledger
App functionality (rewards balance)
Photos & Documents (PDF, Images)
Never Collected
100% Local Device Storage
Document conversion, editing, QR
Audio Recordings
Never Collected
Live in-RAM Speech-to-Text
Dictation input only
AI Prompts / Text Inputs
Not Saved (Ephemeral)
Destroyed immediately after reply
Summaries, translations, OCR
Account & Data Deletion Policy
Google Play Standard
In full compliance with Google Play Developer User Data Policies and GDPR Art. 17,
any user who registered via Google Sign-In may request immediate, permanent deletion of their account
records and cloud ledger.
Self-Service Email ErasureDispatches an instant pre-formatted
deletion ticket directly to our compliance desk. Purged within 3 business days.
1. Acceptance of TermsBy downloading or using DocQR Tools, you agree to these legal terms. If you do not
accept, discontinue use immediately.
2. AI Output VerificationAI translations, OCR receipts, and summaries are generated ephemerally and
provided "as is". Users are solely responsible for checking accuracy before relying on them for legal or
business needs.
3. Virtual CoinsCoins are promotional virtual units with no cash equivalent, transferability, or
real-world monetary value.
06
Contact & Legal Support
Direct Desk
Direct inquiries regarding GDPR privacy, CCPA
disclosures, or Google Play data erasure:
