DocuPDF — Data Safety & Security

SYSTEM_PROTOCOL: ZERO_TELEMETRY_&_CRYPTOGRAPHIC_DECLARATION

Google Play Data Safety & Apple Privacy Manifest Specification

This document specifies the exact security architecture and data practices of DocuPDF by UJ Studio in compliance with Google Play Data Safety and Apple App Store Privacy Nutrition requirements.

1. Data Collection & Sharing: ZERO (0%)

DocuPDF does not collect, upload, share, or transmit any user data off-device:

Personal Info (Name, Email, Phone): Not Collected

Financial & Payment Info: Not Collected

Location (EXIF GPS Stripped): Not Collected

Camera & Photos: Processed Locally Only

Scanned PDFs & E-Signatures: Private Local Sandbox

App Activity & Crash Logs: Not Collected

Device or Advertising IDs: Not Collected

On-Device OCR Text: Indexed Locally in SQLite

2. Cryptographic & Sandbox Standards

Hardware-Level Network Stripping: Release builds include tools:node="remove" for android.permission.INTERNET and enforce cleartextTrafficPermitted="false".
Salted SHA-256 App Lock: Optional 4-digit PIN protection uses a 16-byte random salt (Random.secure()) + SHA-256 digest, a 5-attempt 30-second brute-force lockout cooldown, and automatic lock on app lifecycle resume.
AES-256 PDF Encryption: Documents locked through the Protect PDF tool are encrypted locally in background Dart isolates.

AUDITED: OCTOBER 2026