Privacy Policy

PrimeDocu ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile and web applications (the "Service").

1. Information We Collect

1.1 Account Information

• Email address — required for account creation and sign-in.
• Display name — used to personalise the app interface.
• Authentication identifiers — managed by our authentication provider (Supabase).

1.2 Document Data

• Uploaded documents (PDFs, images, scans) — stored in encrypted form (AES-256-GCM) on secure cloud storage.
• Document metadata — filenames, file size, upload timestamp, document type.
• AI usage data — credits consumed, queries made, results generated.

1.3 Device & Technical Data

• Camera access — only when you actively scan a document.
• Storage access — only when you import or export files.
• Device information — OS version, app version, screen size (for crash reporting and performance).
• App usage events and device identifiers — collected via Google Analytics for Firebase (iOS app only) for analytics and ad-campaign measurement. See Section 5.

1.4 Payment Information

• We do NOT store credit card numbers. All payments are processed by Stripe (web) or Google Play / Apple App Store (mobile).
• We retain only: transaction ID, amount, plan or credit pack purchased, and timestamp.

2. How We Use Your Information

• To provide and maintain the Service.
• To process payments and grant access to paid features.
• To process documents through AI features (summarisation, translation, form-fill) — only when you explicitly trigger them.
• To send essential account notifications (email verification, password reset, payment receipts).
• To improve the Service through aggregated, anonymised usage data.
• To comply with legal obligations and prevent fraud.

3. End-to-End Encryption

Your documents are encrypted on your device using AES-256-GCM before being uploaded to our cloud storage. The encryption key is generated locally and stored in your device's secure enclave (iOS Keychain, Android Keystore). We cannot read your documents.

If you set a recovery password, an encrypted copy of the key is stored with us so you can access documents from a new device. The recovery password itself is never sent to our servers.

4. AI Processing

When you use AI features, the document content is sent to our AI provider (Google Gemini or OpenAI) through our secure Edge Function. AI providers process the data per their privacy policies but do NOT use your data to train their models.

5. Analytics & Advertising Measurement

We use Google Analytics for Firebase in our iOS app to understand how the app is used (for example, first app open and feature usage) and to measure the effectiveness of our advertising campaigns. This data consists of app events and device identifiers. It is not linked to your name, email, or documents, and your document content is never used for analytics or advertising.

5.1 App Tracking Transparency (iOS)

On iOS 14.5 and later, we ask for your permission through Apple's App Tracking Transparency prompt before accessing your device's advertising identifier (IDFA). If you allow tracking, the IDFA is shared with Google to measure which ad campaign led you to install PrimeDocu. If you decline, the app works exactly the same — campaign measurement instead uses Apple's privacy-preserving SKAdNetwork framework, which does not identify you or your device.

You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

6. Data Sharing

We do not sell your personal information. We share data only with:

• Supabase — authentication, database, and storage.
• Stripe — payment processing (web).
• Google Play / Apple — payment processing (mobile via RevenueCat).
• Google AI / OpenAI — only the document content you explicitly send for AI processing.
• Google (Firebase Analytics & Google Ads) — app usage events and device identifiers for analytics and ad-campaign measurement (see Section 5).
• Cloudflare — web hosting and CDN.
• Law enforcement — only when required by valid legal process.

7. Your Rights

You have the right to:

• Access your data — request a copy via email.
• Correct inaccurate information.
• Delete your account and all associated data (see Data Deletion).
• Export your documents at any time via the app.
• Withdraw consent for AI processing by stopping use of AI features.
• Opt out of ad tracking at any time (iOS: Settings → Privacy & Security → Tracking).

8. Children's Privacy

PrimeDocu is not intended for users under 13 years old. We do not knowingly collect data from children. If you believe a child has created an account, contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.

10. Contact Us

For privacy questions, contact us at:

Email: support@primedocu.com