Privacy Policy | Doxentra

1. Our Core Principle: Zero Data Collection

Doxentra was built with privacy as its foundational architecture. We do not require you to create an account, we do not utilize external cloud servers to process your documents, and we do not collect, transmit, or sell your personal data. Everything you scan stays exclusively on your device.

Your documents are processed entirely on your device's processor. They never leave your phone.

2. Device Permissions & Usage

To provide our core functionality, Doxentra requests specific on-device permissions. Here is exactly how each is used — and how it is not:

Camera Access — Used strictly to capture images of documents, receipts, and ID cards. The camera feed is never recorded, transmitted, or analyzed outside your device.

Storage Access (All Files Access) — Used exclusively to save exported PDFs, JPEGs, and ZIP files to your local Downloads folder. We do not read, index, or access any other files on your device.

Biometrics (FaceID / Fingerprint) — Used solely to lock and unlock your secure ID Vault. Authentication is handled by your device's native OS. Doxentra does not have access to your biometric data at any point.

3. On-Device Processing (OCR & ML Kit)

Doxentra uses Google's ML Kit for document edge-detection and Optical Character Recognition (OCR) to automatically name your files and extract text. This machine learning processing happens 100% locally on your device's processor. Your images and text are never sent to Google, our servers, or any third party for processing. ML Kit's on-device models are downloaded once and run entirely offline after that.

4. Data Security & AES-256 Encryption

Documents managed within the app are stored in an isolated, sandboxed local database. You can apply AES-256 cryptographic encryption to any PDF, setting independent Owner and View passwords with granular permission controls.

The passwords you set are never transmitted to us or stored anywhere outside your device. If you forget your Owner Password, we cannot recover or decrypt your document. This is by design — it means no third party can either.

5. Data Retention & Deletion

Because we do not host your data, you are in complete control of your data at all times. There is no account to delete, no server-side data to request removal of.

How to delete your data

Use the in-app "Move to Trash" and "Permanently Delete" functions to remove individual documents.

To erase all data at once, uninstall Doxentra or clear its app data in your device's Settings. This is immediate and irreversible.

6. Third-Party Services

Doxentra does not embed third-party tracking pixels, analytics SDKs (e.g. Firebase Analytics, Google Analytics), or advertisement networks. The app is entirely ad-free and tracker-free.

Google ML Kit is used for on-device OCR and edge detection. Per Google's documentation, on-device ML Kit APIs process data locally and do not send your content to Google's servers. The only network request ML Kit may make is the one-time download of its on-device model file when first used.

7. Children's Privacy

Doxentra is not directed at children under 13 years of age. We do not knowingly collect personal information from children. Because the app collects no personal data from any user, it is inherently safe for use by all age groups, but the app is intended for general adult and professional use.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. Because we do not collect email addresses or contact information, we cannot notify you directly of changes. We encourage you to review this page periodically. Continued use of the app after a policy update constitutes acceptance of the revised terms.

9. Contact Information

If you have questions or concerns about this Privacy Policy or about how your data is handled on your device, please reach out to our support team. We aim to respond within 48 hours.

support@doxentra.com