Privacy Policy

Privacy Policy — DocuMaster Last updated: 20 August 2026 DocuMaster ("we", "our", "the app") is a document scanner with optional AI features. This policy explains what we collect, how we use it, and who we share it with. 1. WHAT WE COLLECT • Account data: if you create an account to use AI features, we store your email address and an encrypted (hashed) password. Your display name is optional. • Device identifier: a random per-install ID used to prevent abuse and to attach usage to your device. • Usage data: which AI features you use and how often, to enforce fair-use limits and to improve the app. 2. YOUR DOCUMENTS • Scanned documents, images and generated PDFs are stored ON YOUR DEVICE by default. We do not upload them unless you use a feature that requires it. • AI features: only after you grant permission in the app, DocuMaster sends the content that feature needs to our server, which relays it to Anthropic's Claude AI. Business-card capture, translation and receipt/invoice capture send the specific page image you select. Smart naming and "Ask your document" send that document's recognised text (and, for Ask, your question). While AI permission is on, smart naming runs automatically after a scan to suggest a title. Anything sent is processed transiently to fulfil your request and IS NOT retained on our servers after processing. Scanning, on-device text recognition (OCR for search) and PDF export happen entirely on your device and never leave it. • Cloud backup (Pro, optional): if you enable backup, your documents are uploaded to our server so you can restore them on another device. You can delete individual documents or your whole account at any time, which removes them from our servers. 3. HOW WE USE DATA • To provide and secure the service, verify your email, enforce usage limits, process purchases, and provide support. • We DO NOT sell your data or use it for advertising. 4. WHO WE SHARE DATA WITH • Anthropic, PBC (AI processing): when you use an AI feature, the page image or document text that feature needs is sent to Anthropic's Claude API solely to extract, translate, summarise or answer questions about it. It is used only to perform that request, is not retained by us afterwards, and — under Anthropic's Commercial Terms — is not used to train Anthropic's models. Anthropic provides protections for this data consistent with this policy; see Anthropic's Privacy Policy (anthropic.com/legal/privacy). • Google Play / Apple: subscription billing and receipt validation. • We share data only as needed to run these features or where required by law. 5. DATA RETENTION & DELETION • Account and cloud-backup data are kept until you delete them. Delete your account in the app (Account → Delete account) or via https://docu.budgello.pro/account-deletion. Deletion is permanent and removes your login, cloud backups and usage records from our servers. • Documents kept only on your device are removed when you delete them or uninstall the app. 6. YOUR CHOICES • AI is off until you allow it. You can review or withdraw permission any time in the app (Account → AI data sharing); on-device features keep working without it. 7. SECURITY • Data in transit is encrypted (HTTPS). Passwords are hashed. Access to server data is restricted. 8. CHILDREN • DocuMaster is not directed to children under 13. 9. CONTACT • Questions or requests: support@budgello.pro