Doco — Documents & Cards
Last updated: 17 August 2026
The short version. Doco keeps your documents on your device. Your cards, IDs and files are stored encrypted on your phone and are never uploaded to us — there is no option that sends them to our servers. Backups go to your own iCloud or to a file you save yourself. We don't sell your data, and we don't use your documents to target ads.
This Privacy Policy explains what information the Doco mobile app ("Doco", "the app", "we", "us") collects, how it is used, and the choices you have. Doco is provided by Asad Javed (the "developer"), acting as the data controller. If you have any questions, contact us at asadjaved.work@gmail.com.
The core of Doco works entirely on your device. When you scan or import a document or card, the following is stored locally on your phone:
This data is encrypted at rest on your device using AES-256 encryption, with the encryption key held in the device Keychain and protected by your device passcode / Face ID. This on-device data is not transmitted to us and is not accessible to us. If you delete the app, this local data is removed with it.
You can use all of Doco without an account. If you choose to sign in — which is only needed to carry a Doco Pro subscription across your devices — we create an account using Sign in with Apple or Sign in with Google. In that process we receive and store:
We use this only to create and secure your account and to link a Doco Pro subscription to you. Authentication and account records are handled by our backend provider, Supabase, on our behalf. Your documents are never sent there.
Doco does not operate a cloud for your documents, and there is no setting that uploads them to us. Backup is free for everyone and works two ways, both of which keep your data out of our hands:
.doco file that you save wherever you choose — Files, another device, or your own storage. Only you hold it.Because the encryption key for a backup is held in your Keychain, a backup is only useful to you.
To let you search inside your documents, Doco reads the text on each page using Apple's on-device Vision framework. This happens entirely on your phone, and the recognised text is stored with the document in the same encrypted local storage. Nothing is sent anywhere for processing.
Doco is free to use and supported by ads for users who are not subscribed to Doco Pro. Ads are provided by Google AdMob. We have configured AdMob to serve non-personalized ads — meaning ads are not based on a profile built from your interests, and we do not use the contents of your documents for advertising in any way.
To serve ads and measure them, Google's advertising SDK may collect limited technical information such as device type, coarse location derived from IP address, and advertising/diagnostic identifiers. Doco does not track you across other companies' apps and websites, and does not present the App Tracking Transparency prompt, because we do not perform that kind of tracking. For install measurement, the app uses Apple's SKAdNetwork, which reports conversions to Google in a privacy-preserving, aggregated way.
Ads are not shown for the first 7 days after you install Doco, and are never shown to Doco Pro subscribers. Learn more about how Google uses data in its partner policy and privacy policy.
Doco Pro is sold as an auto-renewing subscription through the Apple App Store. Payments are processed by Apple — we never receive or store your card or payment details. We receive only confirmation of whether your subscription is active, so we can unlock Pro features.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Account sign-in & subscription status | Email, name, account ID. No documents. |
| Google AdMob | Non-personalized advertising | Device & diagnostic identifiers, coarse location from IP |
| Apple | Sign-in and subscription payments | Sign-in identifier; payment handled entirely by Apple |
We do not sell your personal information, and we do not share your documents with advertisers.
On-device data is kept until you delete the item or remove the app. Account information is kept while your account exists and is deleted when you delete your account. We hold no copy of your documents to retain.
You are in control of your data:
You can also request deletion by emailing asadjaved.work@gmail.com.
We take reasonable measures to protect your information, including on-device AES-256 encryption, Keychain-protected keys, optional Face ID / passcode app lock, and encrypted (HTTPS) connections for any data in transit. No method of storage or transmission is 100% secure, but we work to protect your information using industry-standard practices.
Doco is not directed to children under the age of 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them.
Your information may be processed and stored on servers located outside your country of residence. Where required, we rely on appropriate safeguards for such transfers.
Depending on where you live (for example under GDPR or the CCPA), you may have the right to access, correct, or delete your personal information, to object to or restrict certain processing, and to opt out of the "sale" or "sharing" of personal information. Doco does not sell your personal information. To exercise any of these rights, contact us at asadjaved.work@gmail.com.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app.
Questions about this policy or your data? Email asadjaved.work@gmail.com.