Privacy Policy

Last Updated: July 2026

1. Overview

DocuWise ("App," "we," "us," or "our") is committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains our privacy practices and your rights regarding your personal information.

Key Principle: DocuWise uses a zero-backend architecture. Your documents are stored exclusively in your personal Google Drive. We do not operate servers or databases that store your documents. We are a frontend application that helps you organize and share documents you control.

2. What Information We Collect

2.1 Information You Provide

• Google Account Information: When you sign in with Google, we receive your email, name, and profile picture from Google. You control what you share.
• App Preferences: Theme selection, notification settings, category customizations, and other UI preferences stored locally on your device.
• Vault Configuration: Family member names, relationships, access levels, and shared document permissions.
• Document Metadata: Only document names, categories, tags, and organizational structure. NOT the document content itself.

2.2 Information We Don't Collect

• ❌ Document Content: We never access, store, or process the actual content of your documents.
• ❌ Document Files: Your PDF files, images, and other attachments remain in your Google Drive only.
• ❌ Tracking/Analytics: We don't use analytics tools that track your behavior or create user profiles.
• ❌ Location Data: We don't collect or use your device location.
• ❌ Browsing History: We don't track what documents you view or for how long.
• ❌ Device Identifiers: We don't persistently track device IDs or advertising identifiers.

3. How We Use Your Information

3.1 Legitimate Uses

We use collected information only for these purposes:

• App Functionality: To enable document organization, family sharing, and synchronization between your devices.
• Security: To authenticate you via Google Sign-In and maintain account access control.
• Bug Fixes: To identify and fix technical issues reported by users.
• Communication: To send critical security alerts (if you opt in) or important app updates.

3.2 What We Do NOT Use Your Data For

• ❌ Advertising or marketing profiling
• ❌ Selling or sharing with third parties
• ❌ Training AI models or machine learning
• ❌ Building user behavior profiles
• ❌ Discriminatory practices

4. Where Your Data Is Stored

4.1 Document Files

Location: Exclusively in your personal Google Drive under the private `/DocuWise/files/` folder.

Access: Only you (the vault owner) and family members you explicitly grant access to can view documents you share with them. We have no access to these files.

4.2 Vault Configuration (owner_config.json)

Location: In your personal Google Drive App Data Folder (private, encrypted by Google).

Contents: Only vault metadata including family member list, access permissions, and document organization structure. Never includes document content or files.

Storage Format: Stored as a single JSON file managed exclusively by your app instance. Not accessible to WiselyRise or any backend server.

4.3 App Preferences

Location: Stored locally on your device only (no cloud backup by default).

Encrypted: Sensitive data (like PIN) is encrypted on your device using industry-standard encryption.

4.4 Member Access Files

Location: Stored in your Google Drive's `/DocuWise/access/` folder when you share with family members.

Format: JSON files named `member_{uuid}.json` containing filtered metadata of documents shared with that specific member.

Sharing: Shared via Google Drive permissions API. Only intended recipients can view them.

4.5 Cross-Device Sync

• Your vault configuration syncs across your devices via Google Drive (automatic).
• Document metadata syncs to keep your vault consistent across devices.
• Document files always remain in Google Drive (never downloaded unless you open them).
• All syncing happens directly between your devices and Google Drive (no WiselyRise servers involved).

5. Security & Encryption

5.1 Encryption in Transit

All communication between your device and Google Drive uses HTTPS with TLS 1.2+ encryption. Your data cannot be intercepted in transit.

5.2 Encryption at Rest

• In Google Drive: Google encrypts all files with AES-256 encryption at rest.
• On Your Device: Sensitive app data (PIN, encryption keys) is stored in your device's secure storage (iOS Keychain / Android Keystore).
• Optional E2E: Future versions may add additional end-to-end encryption for even stronger privacy (v2 feature).

5.3 Biometric & PIN Protection

You can optionally enable:

• PIN lock: Required every time you open the app
• Biometric unlock: Fingerprint or face recognition for faster access
• Both are stored securely on your device, never transmitted to us

5.4 What We Don't Do

• ❌ Store encryption keys on our servers
• ❌ Back up your PIN or biometric data
• ❌ Access encrypted data even if we wanted to

6. Third-Party Services

6.1 Google Services

Google Drive API: We use Google's official Drive API to access files you explicitly grant us permission to access. Google's privacy policy applies to Google Drive.

Google Sign-In: Your credentials are handled directly by Google. We never see your password. Google's privacy policy governs authentication.

Google Cloud Storage: Optional cloud backup of app settings goes to your Google account.

6.2 Services We DON'T Use

• ❌ Firebase Analytics
• ❌ Firestore or any backend database
• ❌ Google Analytics or any server-side tracking
• ❌ Mixpanel, Amplitude, or similar behavior tracking
• ❌ Advertising networks or SDKs
• ❌ Third-party CDNs for user tracking
• ❌ Social media pixels
• ❌ Any backend servers or infrastructure

6.3 Your Data With Third Parties

We never share your personal information with third parties for commercial purposes. The only exception is when you explicitly share a document with a family member via Google Drive permissions.

7. GDPR & Data Rights (European Users)

7.1 Your Rights

If you're located in the EU, UK, or similar jurisdictions, you have the following rights:

• Right to Access: Your vault data is stored directly in YOUR Google Drive. You have immediate access to all your documents and configuration.
• Right to Rectification: You can update family member information, permissions, and document metadata directly in the app.
• Right to Erasure: You can delete your DocuWise account through app settings. Your Google Drive documents remain under your control.
• Right to Restrict: You can restrict access to specific documents or revoke family member permissions at any time.
• Right to Portability: Your vault configuration and documents are stored in your Google Drive. You can access them directly or export anytime.
• Right to Withdraw Consent: You can disconnect Google Drive access or revoke app permissions in your Google Account settings.
• Right to Object: You can object to app data collection by deleting your account and revoking app permissions.

7.2 Legal Basis for Processing

We process your data under these legal bases:

• Consent: You provide consent when you sign in with Google and grant app permissions.
• Contract: Processing is necessary to provide app services (syncing, family sharing, organization).
• No Third Parties: We do not process your data for any legal obligations because we have no backend servers or databases that would require such processing.

7.3 Data Retention

• While Active: Your vault configuration (owner_config.json) remains in your Google Drive as long as your app account is active.
• After Deletion: When you delete your DocuWise account, the app configuration is removed from our system. Your Google Drive documents remain permanently in Google Drive (you control them).
• No Servers: We do not retain any server-side logs, backups, or records. All data exists only in your Google Drive.
• Your Control: You can directly access, modify, or delete your Google Drive data at any time through Google Drive directly.

8. Children's Privacy

DocuWise is designed for family use, including parents managing documents for minors. However:

• Users must be 13+ to create their own account (Google Sign-In requirement).
• Parents can create family vaults and add minors as members (read-only access).
• Parents are responsible for minor children's account security and privacy.
• We don't knowingly collect personal information from children under 13 except as documented above.
• If we learn a user is under 13, we will delete their account and notify parents.

9. Contact Us

Questions about this Privacy Policy or our privacy practices?

If you're in the EU and feel your rights have been violated, you also have the right to lodge a complaint with your local data protection authority.

10. Changes to This Policy

We may update this Privacy Policy occasionally. We'll notify you of material changes via email or an in-app notification. Continued use of DocuWise after such notification constitutes acceptance of the updated policy.

By using DocuWise, you acknowledge that you've read and understood this Privacy Policy and agree to our privacy practices.