Effective and last updated: 10 October 2026
Privacy policy
This policy covers DocuAction for Android, provided by Texts Dev, and these DocuAction website pages. Contact: textsmessaging@gmail.com.
- AI analysis sends the content you select to Google’s Gemini through Firebase AI Logic.
- Saved results, extracted text, notes and answers are encrypted on your device. This version has no cloud document vault or history sync.
- Firebase handles account identity, analytics, configuration and app verification.
- Subscriptions are disabled placeholders in the initial test build.
- You can delete local records and request account deletion.
1. Data we process and why
| Data | Use and location |
|---|---|
| Account identity | Firebase Authentication creates an anonymous user ID for guest use. If you create or sign in to an email account, Firebase processes your email and authentication credentials. The app uses your user ID to separate local history by account. |
| Selected documents and questions | Photos, PDFs, pasted or imported text, related context and follow-up questions are sent to Google for AI analysis. They can contain personal information present in your document. Follow-up requests include relevant excerpts from the saved record. |
| Saved local records | Extracted source text, parties, duties, dates, summaries, notes, favourites, checklist state and saved answers are stored in an account-scoped, encrypted local vault. |
| Reminders and exports | Reminder text and dates are passed to Android’s notification system. A PDF export includes the selected result and notes and is shared with an app or location you choose. |
| Usage and device information | Firebase Analytics records app interactions and operational events. Google’s SDKs may process app-instance/device identifiers, advertising identifiers where available, device information, IP addresses and approximate region derived from network information. This supports measurement, reliability and app verification. Our custom analytics events do not include document text, notes, photos or question contents. |
| Support and deletion requests | If you email us or submit the deletion form, we receive the contact details and information you provide to respond and identify the account concerned. |
| Website requests | The website host may receive your IP address, browser details and requested URLs in access or security logs. These pages have no embedded analytics script, advertising widget or document-upload form. |
2. AI processing is online
Choosing an analysis or follow-up action sends the supplied content over the network to Google’s Gemini via Firebase AI Logic. Only submit documents you have permission to process this way. Saved local history does not mean the AI request stays on your phone.
Google handles provider-side processing and retention under its applicable terms. See Firebase AI Logic data governance and the Gemini API terms. Those terms distinguish paid and unpaid service data handling; we do not promise immediate deletion of Google’s service logs.
The app does not upload originals into a DocuAction cloud document vault. Working copies may remain in the app’s temporary cache until removed or the cache is cleared. The app attempts to remove its staged attachments after a successful save and removes staged files when you use their removal controls; your original gallery or source files are not deleted by those controls.
3. Local storage and security
Saved history uses AES-256-GCM encryption with an installation-specific key protected through the device’s secure storage. Accounts have separate local vaults. Signing in recovers your account identity; it does not synchronize documents to another device.
Keep exports of anything you need before clearing app data or uninstalling. Losing the installation’s encryption key can make local history unrecoverable. PDF copies saved or shared outside the app are not protected by the vault’s encryption and remain under your control and the receiving service’s policies.
4. Permissions and service providers
Camera and photo access are used when you choose to capture or import an image. File selection is initiated by you. Notifications are requested for reminders. This document-scanner build does not request microphone access or record audio.
The Android build includes Google SDK advertising-identifier and attribution permissions. DocuAction does not display advertisements; identifiers may be used by Google’s analytics services where available. We do not sell your document content.
- Google Firebase: Authentication, AI Logic, Analytics, Remote Config and App Check. See Firebase privacy information.
- Google Gemini: processes the document content and questions you submit, under the provider terms linked above.
- Google Forms: hosts the account-deletion request form. Information you enter there is sent to Google and Texts Dev. See Google’s privacy policy.
- Google Play and RevenueCat: billing support is bundled, but store checks and purchase/restore actions are disabled in this initial test build. No purchase can start. If live billing is introduced, account-linked purchase and entitlement metadata will be processed by these providers, and this policy will be updated.
Service providers and the website host may process information outside your country. They operate under their applicable privacy terms. We may disclose information where required by law or necessary to handle a security issue.
5. Retention and deletion
Local records remain until you delete them or clear the app’s local data. Deleting an individual record also cancels its scheduled reminders. Copies you previously exported or shared must be removed separately.
In the app: Settings → Delete account clears this app’s local records and reminders and opens the shared account-deletion request form. You must submit that form to request deletion of the Firebase account and associated cloud data. Pressing the local control or uninstalling alone does not delete the shared account.
On the web: submit the account-deletion request form. Identify the app as DocuAction and provide the information needed to identify your account. The Firebase identity is shared with other Texts Dev apps; contact us if you need help understanding which account is affected.
Provider security logs, aggregated analytics or records that must be retained for a legal obligation may remain according to the applicable provider terms or legal requirement. We will explain any applicable retention when handling your request. We cannot remotely erase PDF copies you shared or local files on a device we cannot access.
6. Your choices
You can decide which documents to submit, revoke camera/photo/notification permissions through Android settings, delete individual records, export saved results and request account deletion. Contact us for questions about access, correction, deletion or other rights available under the law that applies to you.
7. Children and policy changes
DocuAction is intended for adults aged 18 and over and is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and handle the data appropriately.
We may update this policy when the app’s features or service providers change. The date above identifies the current version. Material changes will be reflected here and, where required, in the app before the changed processing begins.
8. Contact
Texts Dev · DocuAction
Email: textsmessaging@gmail.com