Privacy Policy for Docusight
This privacy policy governs your use of the software application Docusight for mobile devices, which was created by rtv.interactive. Docusight is an AI-powered document digitization application designed to transcribe physical pages, textbooks, and handwritten notes into editable digital formats (such as Markdown).
1. User-First Design Philosophy
Docusight is designed around a local-first doctrine. We minimize backend data storage to the absolute necessary transactional data. All your organized projects, image lists, document structures, and final edited texts are stored locally on your device in a secure SQLite database and are never uploaded or synced to our backend servers.
"Storing data = database bills. I'm too cheap for database bills. So your data stays on your device. 😉"
2. Information Collection and Usage
To run the application's synchronization, credit balance, and AI-transcription services, I collect and process specific types of data as detailed below:
A. Account Information (Personal Data)
When you sign in to Docusight, we authenticate your identity via Firebase Authentication (a Google service). We collect and store:
- Your unique Firebase user identifier (UID).
- Your registered email address (to sync credit balances).
- Your profile name and avatar image URL (optional, to personalize your profile view).
This information is used strictly to sync your profile settings, track your credit ledger across devices, and prevent fraud.
B. Document Images and Uploads (Sensitive Data)
To perform AI document digitization, the application must temporarily upload the images of pages you select to the Docusight backend.
- Processing Limit: These images are uploaded one page at a time.
- No Long-Term Retention: Once the backend receives the image, it parses it using our AI engine, returns the transcribed Markdown content back to your mobile device, and immediately discards the source image. We do not store, retain, or index your source images or the resulting document text on our servers long-term.
C. Credit Ledger and Transactions
We store a historical ledger of credit-related activities in our database:
- Transactions related to your account creation (signup bonus credits).
- Google Play Billing transactions (purchasing credits).
- Scan consumption logs (deducting credits per processed page).
This transaction history is required for payment verification, account auditing, and support requests.
D. Usage Analytics
I use Firebase Analytics (a Google service) to collect anonymous, aggregated usage statistics (such as active screens, session durations, and user interactions) and crash logs. This data is used strictly to diagnose bugs, monitor app stability, and improve overall product usability.
E. Device Identifier (Device ID)
We collect a unique identifier from your mobile device (Device ID). This identifier is used solely to track, manage, and enforce free scanning credit grants (to prevent abuse of the free tier) and does not require you to register a personal account. This is processed on the basis of our legitimate interest in protecting our services from exploitation.
3. AI Processing (Google Gemini API)
Docusight utilizes the official Google GenAI SDK (Gemini API) to analyze images and generate structured Markdown document files.
- Your uploaded image data is transmitted securely to Google's API servers to be processed by the Gemini model.
- This transmission is conducted strictly in accordance with Google's API Terms of Service. Under standard API enterprise clauses, Google does not use customer data (including uploaded images or returned text) submitted via the API to train its machine learning models.
4. Third-Party Services
Docusight integrates standard developer toolkits provided by third parties to facilitate core application workflows:
- Firebase Authentication: Manages secure user login and token generation.
- Google Play Billing API: Processes in-app purchases of scanning credits securely. We do not collect or store credit card details or financial identifiers; all billing is handled directly by Google Play.
- Firebase Analytics: Collects anonymous telemetry and aggregated usage statistics to monitor app stability and improve product performance.
5. Data Deletion (User Control)
I respect your ownership of your data. You have the right to request deletion of your account and associated database details at any time:
- You can trigger account deletion directly in the app settings, or by emailing me.
- Upon account deletion, all personal data associated with your profile (Firebase UID, email, name, avatar) and transaction records will be permanently purged from the Docusight active database.
- Please note that locally stored document projects can be deleted by uninstalling the application or clearing the application's local database cache on your device.
6. Children's Privacy
Docusight does not knowingly collect or solicit personal information from children under the age of 13. Since the application processes documents uploaded by the user, if you are a parent or guardian and believe your child has uploaded sensitive document data, please contact me immediately so it can be purged.
7. Changes to This Policy
This Privacy Policy may be updated periodically to reflect changes in regulatory requirements or app functionalities. Any modifications will be posted directly to this URL, updating the modified date at the top of this document.
8. GDPR and International Data Transfers (EEA and UK Users)
Our backend data servers are hosted on Amazon Web Services (AWS) in the US East 1 (N. Virginia) region, located in the United States.
If you are accessing Docusight from the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, please be aware that your personal data (including account information, transaction logs, device identifiers, and temporary image uploads during active document conversion sessions) will be transferred to, stored, and processed in the United States.
We process and transfer this data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy regulations using the following safeguards and legal bases:
- Contractual Necessity: Transferring and processing this data is necessary to perform our services (such as conducting AI document digitizations and updating credit balances) under our terms.
- Legitimate Interests: Collecting and verifying device identifiers to monitor free grant allocations and protect our systems from malicious abuse and unauthorized exploitation.
- Standard Contractual Clauses: We ensure that our infrastructure providers and processors handle personal data under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.
Under the GDPR, you have the right to access, rectify, restrict, object to processing, or request the erasure of your personal data. To exercise any of these rights, please contact us using the details below.
9. Contact Me
If you have questions about this policy, or if you need to request deletion of your account ledger data, please contact me via email at rohitedathil@gmail.com.