Zero-Data Collection Guarantee
DocuPDF by UJ Studio is engineered from the ground up as a strictly 100% offline document scanner and PDF conversion toolkit. We do not collect, store, transmit, track, or sell any of your personal data, scanned documents, ID cards, e-signatures, OCR text, or device identifiers.
1. Overview & Local-First Architecture
This Privacy Policy applies to the DocuPDF mobile and desktop applications developed and published by UJ Studio (accessible via https://ujstudio.org and https://ujstudio.org/docu-pdf).
DocuPDF provides multi-page document scanning, 4-point perspective crop, non-destructive image filters, on-device English and Hindi/Devanagari OCR, 300 DPI ID card compositing, quadratic Bézier E-Signatures, and PDF merge, split, compression, and AES-256 encryption. Every operation executes 100% locally inside your device's RAM and private application sandbox.
2. Information We Do NOT Collect
No Personal Identity
We never ask for, collect, or store your name, email address, phone number, physical address, or account credentials.
No Document or OCR Telemetry
Your scanned contracts, ID cards, handwritten signatures, PDFs, and extracted OCR text never leave your physical device.
Zero Network Permissions
The release Android manifest explicitly strips android.permission.INTERNET via tools:node="remove". The app cannot open network connections.
Automatic EXIF GPS Stripping
Captured and imported images are re-encoded locally in background isolates, stripping embedded GPS location coordinates and camera EXIF metadata by default.
3. Device Permissions & Why They Are Required
DocuPDF requests permissions strictly just-in-time when you invoke a scanning or import workflow:
- CAMERA (Android & iOS NSCameraUsageDescription): Used exclusively when you tap Scan Document or ID Card Mode to capture physical pages on-device.
- READ_MEDIA_IMAGES & READ_MEDIA_VISUAL_USER_SELECTED (Android 13 & 14+): Allows importing photos from your gallery or Android 14+ selective photo picker for PDF conversion.
- READ_EXTERNAL_STORAGE (Android 12 and below, maxSdkVersion 32): Used only on legacy Android versions to import images and PDFs.
4. On-Device OCR, Cryptography & Storage
All document records, folder structures, tags, and extracted OCR text blocks are stored inside an app-private SQLite database (Drift) within your device's sandboxed directory. When you enable the optional 4-digit App Lock, your passcode is hashed locally using a 16-byte cryptographic random salt (Random.secure()) and SHA-256.
5. Data Retention & Instant Deletion
Because no data is ever transmitted to external servers, there is zero remote data retention. Deleting a document inside DocuPDF immediately removes its database entries and underlying image/PDF files. You can clear temporary isolate scratch files at any time via Settings > Clear Temporary Cache, and uninstalling the application permanently erases all local data.
6. Children's Privacy & Global Compliance (GDPR / CCPA / COPPA)
DocuPDF does not collect personal information from any user, including children under 13. By collecting and transmitting zero data, DocuPDF inherently satisfies GDPR, CCPA, and COPPA Privacy-by-Design standards.
7. Policy Updates & Publisher Contact
EFFECTIVE_DATE: OCTOBER 2026
VIEW TERMS & CONDITIONS →© 2026 UJ STUDIO | PROTOCOL_v.4.0.2