DocMaster Privacy Policy

Last updated: 31 October 2026

1. Who we are

DocMaster ("the app", "we", "us") is published by InnoCraft Labs. For anything about privacy, email labsinnocraft@gmail.com.

2. What DocMaster does, and where

DocMaster opens, creates, edits, converts, signs, scans, compresses and prints PDFs, Word documents, spreadsheets and presentations, and has an AI assistant for your documents. All of this happens on your phone. We don't run a server that receives your documents. DocMaster has no user accounts and never asks for your name, email address or phone number.

3. Your documents, scans and pictures

• Documents you open or create, pages you scan with the camera, and pictures you pick are read and processed only on your phone, and saved only where you choose on your phone. They are never uploaded to us or to anyone else.
• They leave your phone only when you share them (for example with the Share button), and then they go to the app or person you picked.
• On Android, DocMaster can ask for All files access so that it can list every document on your phone in one place. It uses file details (name, size, type, date) to build that list, and opens a file's contents only when you open it.
• On iPhone, DocMaster sees only the files in its own folder and the folders you connect.
• Camera scanning uses your phone's own document scanner (Google's on Android, Apple's on iPhone).

4. The AI assistant

• DocMaster's AI runs entirely on your phone. Your documents, your questions and the AI's answers are not sent to us or to any AI company.
• The AI needs model files, which you download once when you first use it (for writing and answering, reading scanned pages, and searching documents). They come from Hugging Face (huggingface.co), a public model-hosting service. Like any download, Hugging Face sees your IP address and which file was requested. It receives nothing about you or your documents.
• To answer about your documents, DocMaster keeps an index of their text on your phone. You can remove the AI files at any time under AI files on this phone.

5. Voice input

Voice input is optional. DocMaster uses the microphone only while you are speaking a request (up to two minutes), and only after you allow microphone access.

• When your phone can recognise your language by itself, your voice is turned into text on the phone.
• When it can't, DocMaster asks you first. Only if you choose Use online speech does your phone's own speech service turn your voice into text over the internet: Google's speech service on Android, Apple's speech recognition on iPhone. That audio is handled under Google's Privacy Policy or Apple's Privacy Policy. You can turn online speech off again in the voice panel.
• On iPhone, languages Apple can't recognise (such as Urdu) use a speech model that you download once from Hugging Face (about 465 MB), and only if you choose to. After that, those languages are turned into text entirely on your phone.
• DocMaster doesn't keep voice recordings. The audio is used only to produce the text, which goes into the message box for you to check. Nothing is sent until you tap Send, and then only to the AI on your phone.

6. What leaves your phone, and why

A few services we use receive limited technical information. They never receive your documents, scans, pictures, voice, AI questions or AI answers.

• Advertising — Google AdMob and its ad partners. The free version shows ads served by Google AdMob. Google may also let the ad partners it works with (other ad companies, listed under "List of partners" in Google's consent form) bid to show an ad. On Android, one of these partners is Liftoff Monetize (formerly Vungle), whose software is built into the app so it can bid for our ad slots through AdMob; it receives the same kinds of information listed next and follows your consent choice. Liftoff privacy policy. To show and measure ads and prevent fraud, AdMob and these partners receive your device's advertising identifier (Android only; on iPhone we don't use the advertising identifier), your IP address (from which a rough location, such as your country or city, can be worked out), ad views and taps, and basic device information. On Android, where you allow it, ads can be personalised: Google and its ad partners may choose ads based on your interests. In the European Economic Area, the UK and Switzerland we ask for your consent first with Google's consent form; ads are personalised only if you agree, and you can change your choice later from the app. Elsewhere, Google's own settings and policies apply, and you can turn off ad personalisation or delete your advertising ID at any time in your phone's settings (Settings › Privacy › Ads). On iPhone, ads are always non-personalised. How Google uses information from apps · Google's advertising policy.
• Analytics — Google Firebase Analytics. We learn which screens and tools are used, how the first-launch walkthrough went, when ads are shown, and purchase events (the product, the plan, whether it started a free trial, and the price; never payment details). Firebase also receives app and device identifiers, device model, operating system, app version, language and approximate country. This tells us which features to improve. We don't use it for personalised advertising. Firebase privacy.
• Crash reports — Google Firebase Crashlytics and Sentry. When the app crashes or hits an error we receive a technical report: what went wrong in the code, device model, operating system, app version and a random installation identifier. File names and locations are removed from these reports before they are sent. Firebase privacy · Sentry privacy.
• Remote settings — Google Firebase Remote Config. The app fetches settings (for example, how often ads may appear) using an installation identifier.
• Purchases — RevenueCat and Google Play / the App Store. If you buy DocMaster Pro (a monthly or yearly subscription, or a one-time purchase), bought Remove Ads before, or restore a purchase, the payment is handled entirely by Google Play or Apple; we never see your card details. Subscriptions, including a free trial, are managed and cancelled in Google Play. RevenueCat receives a random identifier for this installation, your purchase record and basic device information, so the app knows whether you have Pro. RevenueCat privacy.
• Updates (Android). The app checks Google Play for a newer version.

We don't sell your data for money, and we don't share it with data brokers. Where ads are personalised, Google and its ad partners use the advertising identifier to choose ads; some US state laws call this "sharing". You can stop it by turning off ad personalisation or deleting your advertising ID in your phone's settings.

7. Children

DocMaster is not directed to children under 13. We don't knowingly collect personal information from children. If you believe a child has used the app and data about them reached the services above, contact us and we'll help remove it where we can.

8. How long data is kept, and deleting it

• On your phone: your documents, recent-files list, saved signatures, drafts, AI index, saved AI results and AI files stay until you delete them or uninstall DocMaster. Uninstalling removes everything in DocMaster's own storage. Documents you saved to shared folders (such as Downloads) stay until you delete them. On iPhone, DocMaster's folder (except the AI files) is included in your own iCloud or computer backups, which only you control. On Android, DocMaster is excluded from backups.
• At the services above: each keeps data for its own period: Firebase Analytics up to 2 months, Crashlytics 90 days, Sentry up to 90 days, RevenueCat for as long as the purchase record is needed, and AdMob under Google's policies.
• DocMaster has no accounts, so none of this is linked to your name, email or phone number, and we can't single out your data to delete it on request. You can reset your advertising ID in your phone's settings, and uninstalling the app resets the other identifiers. Questions: labsinnocraft@gmail.com.

9. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR or California law), you may have the right to access, correct or delete your data, to object to or restrict its processing, and to complain to your data-protection authority. We rely on consent for ads (and analytics, where required) in the EEA/UK/Switzerland, on legitimate interests for crash reports and security, and on contract for purchases. Contact us to use these rights.

10. Security

All connections to the services above are encrypted (HTTPS). Your documents and AI data never leave your phone and are protected by your phone's own security (screen lock and device encryption). No method of storage or transmission is perfectly secure, but we keep what leaves your phone to the minimum described here.

11. International transfers

Google, Sentry, RevenueCat and Hugging Face may process data in the United States and other countries, under their own safeguards (such as standard contractual clauses or the EU–US Data Privacy Framework).

12. Changes to this policy

If we change how DocMaster handles data, we'll update this page and the date above. For important changes we'll also tell you in the app.

13. Contact

InnoCraft Labs · labsinnocraft@gmail.com.