Doxly ("the App") processes your scanned documents only on your device. We do NOT send your document images, PDFs, or OCR-extracted text to our servers. No account is required.
2. What we do NOT collect
Scanned document images and PDFs
Text extracted via OCR
File names, folder names, and other document metadata
This data is stored only in on-device app storage and is never transmitted to our servers.
3. What third-party SDKs collect
The free version uses the following services, each of which processes data under its own policy:
Ads (AppLovin MAX mediation and connected ad networks): advertising identifier (Advertising ID), coarse device/network information, etc. Subscribing to Pro removes ads, so this collection does not occur.
Google Play Billing (payments): purchase/subscription token and order ID (handled by Google). We only check whether the subscription is active.
Google ML Kit / Google Play services (document scanning): scanning runs on the device and within Play services; scan images are not sent to our servers.
(If introduced) Anonymous usage analytics: only de-identified, aggregated events such as screen views and feature usage. Never includes document content, images, or file names.
4. Permissions
Camera: used only for scanning (capturing) documents.
Storage / document access (SAF): used only when you explicitly export.
Internet: used only for ads, billing, and (optional) anonymous analytics. Never used for your scanned documents.
5. Data retention and deletion
All documents and metadata are stored in app-private on-device storage.
Deleting a document in the app or uninstalling the app removes the associated data.
The App disables automatic cloud backup, so no copies are created in the cloud other than files you explicitly export.
You can reset or delete the advertising identifier in your device settings.
6. Subscription
Doxly Pro is a monthly auto-renewing subscription through Google Play. Payment, renewal, and cancellation are managed in your Google Play account; we do not store payment details. You can cancel anytime in Google Play.
7. Children (Families)
The App is not directed to children under 14 (Korea) / 13 (US COPPA) and does not knowingly collect children's personal information.
8. Regional rights
Korea (PIPA): you may request access, correction, deletion, and suspension of processing of your personal data.
EEA/UK (GDPR): you have rights to access, rectification, erasure, restriction, portability, and objection.
For exercising these rights and for ad-consent (EEA/UK) inquiries, use the contact below.
9. Changes
We will update this policy when SDKs or practices change and note the update date.