Doco — Documents & Cards
Last updated: 16 July 2026
The short version. Doco is built to keep your documents on your device. Your cards, IDs, and files are stored encrypted on your phone and are not uploaded to us unless you choose to turn on cloud backup with Doco Pro. We don't sell your data, and we don't use your documents to target ads.
This Privacy Policy explains what information the Doco mobile app ("Doco", "the app", "we", "us") collects, how it is used, and the choices you have. Doco is provided by Asad Javed (the "developer"), acting as the data controller. If you have any questions, contact us at asadjaved.work@gmail.com.
The core of Doco works entirely on your device. When you scan or import a document or card, the following is stored locally on your phone:
This data is encrypted at rest on your device using AES-256 encryption, with the encryption key held in the device Keychain and protected by your device passcode / Face ID. This on-device data is not transmitted to us and is not accessible to us. If you delete the app, this local data is removed with it.
You can use most of Doco without an account. If you choose to sign in — which is required for Doco Pro and cloud backup — we create an account using Sign in with Apple or Sign in with Google. In that process we receive and store:
We use this only to create and secure your account, to link a Doco Pro subscription to you, and to enable cloud backup. Authentication and account records are handled by our backend provider, Supabase, on our behalf.
Cloud backup is an optional feature available to Doco Pro subscribers. If you enable it, a copy of your vault is uploaded to our cloud backend (provided by Supabase) so you can restore it. Your data is transmitted over encrypted connections (HTTPS) and stored in access-controlled infrastructure tied to your account. If you never enable cloud backup, none of your documents leave your device. You can stop using cloud backup and delete your backed-up data at any time (see Deleting your data).
Doco is free to use and supported by ads for users who are not subscribed to Doco Pro. Ads are provided by Google AdMob. We have configured AdMob to serve non-personalized ads — meaning ads are not based on a profile built from your interests, and we do not use the contents of your documents for advertising in any way.
To serve ads and measure them, Google's advertising SDK may collect limited technical information such as device type, coarse location derived from IP address, and advertising/diagnostic identifiers. Doco does not track you across other companies' apps and websites, and does not present the App Tracking Transparency prompt, because we do not perform that kind of tracking. For install measurement, the app uses Apple's SKAdNetwork, which reports conversions to Google in a privacy-preserving, aggregated way.
Ads are not shown for the first 7 days after you install Doco, and are never shown to Doco Pro subscribers. Learn more about how Google uses data in its partner policy and privacy policy.
Doco Pro is sold as an auto-renewing subscription through the Apple App Store. Payments are processed by Apple — we never receive or store your card or payment details. We receive only confirmation of whether your subscription is active, so we can unlock Pro features.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Account authentication & optional cloud backup | Email, name, account ID, and (only if you enable backup) your vault data |
| Google AdMob | Non-personalized advertising | Device & diagnostic identifiers, coarse location from IP |
| Apple | Sign-in and subscription payments | Sign-in identifier; payment handled entirely by Apple |
We do not sell your personal information, and we do not share your documents with advertisers.
On-device data is kept until you delete the item or remove the app. Account information and any cloud backup are kept while your account exists, and are deleted when you delete your account.
You are in control of your data:
You can also request deletion by emailing asadjaved.work@gmail.com.
We take reasonable measures to protect your information, including on-device AES-256 encryption, Keychain-protected keys, optional Face ID / passcode app lock, and encrypted (HTTPS) connections for any data in transit. No method of storage or transmission is 100% secure, but we work to protect your information using industry-standard practices.
Doco is not directed to children under the age of 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them.
Your information may be processed and stored on servers located outside your country of residence. Where required, we rely on appropriate safeguards for such transfers.
Depending on where you live (for example under GDPR or the CCPA), you may have the right to access, correct, or delete your personal information, to object to or restrict certain processing, and to opt out of the "sale" or "sharing" of personal information. Doco does not sell your personal information. To exercise any of these rights, contact us at asadjaved.work@gmail.com.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app.
Questions about this policy or your data? Email asadjaved.work@gmail.com.