Privacy Policy

The data depends on how you use the Application:

• Android app: the advertising ID of your device, your IP address and device information (model, operating system, language), used by Google AdMob to show ads; an app instance ID and events about how you use the app's features (for example, which tools you open), used by Google Analytics for Firebase; an installation ID and crash reports (device state at the time of the error), used by Firebase Crashlytics and Firebase Remote Config; and an anonymous purchase identifier, used by RevenueCat to recognize your Google Play subscription.
• Windows app: it does not show ads and does not send usage analytics or crash reports. It only sends data when you use the account, cloud storage or DocEnhance Pro.
• Website: docenhance.com does not use analytics or advertising cookies.
• On your device only: your scans, documents, drafts, annotations and saved signatures stay on your device. The Service Provider does not receive them, except the documents you choose to save to the cloud.

Creating an account is optional: the Application works without one. An account is required for cloud storage and for DocEnhance Pro on Windows. If you create one, the Service Provider processes:

• Account data: your email address and whether you confirmed it; your name and profile photo if you sign in with Google; and a user identifier. Your password is handled by Firebase Authentication (Google); the Service Provider never sees it.
• Cloud documents: only the documents you choose to save to the cloud, with their name, size, type, a checksum (SHA-256) and their dates. The content is stored by Cloudflare (R2) and the index by Cloudflare (D1).
• Your devices: a random identifier created when the app is installed (not a hardware identifier), the name that Windows or Android gives to the device, the platform, the app version and the last sync time. This lets your account show your devices and which device made each version of a document.
• Subscriptions: the store where you bought (Microsoft Store or Google Play), the subscription identifier in that store, the plan, its status, its expiration date, whether it renews, whether it is a free trial and the country of purchase, with their history, so DocEnhance Pro works on every device where you sign in. On Windows, also a Microsoft Store purchase key, stored encrypted and renewed every 30 days, which the server uses to check your purchases. On Android, RevenueCat manages the status of Google Play purchases.
• Technical logs: for each request, the server records the route (without identifiers), the result and the time it took. It never records sign-in tokens, your user identifier or the content of your documents. Cloudflare, which runs the servers, sees the IP address of each request.

Sensitive data: the documents you save to the cloud may contain sensitive or financial personal data, such as identity documents, bank statements or medical records. The Service Provider does not read, analyze or use their content for any purpose other than storing them and syncing them between your devices, and never uses them to train any model. Before you save your first document to the cloud, the Application asks for your express consent.

Your data travels encrypted (HTTPS) and is stored encrypted at rest by the providers. Cloud storage is not end-to-end encrypted.

On Windows, DocEnhance Pro is bought in the Microsoft Store with your Microsoft account. Microsoft processes the payment and handles your payment and billing details under its own privacy statement. The Service Provider does not receive your card number: it only receives from Microsoft the subscription data described above.

In the Android app, DocEnhance Pro is sold through Google Play, under Google's privacy policy.

Purposes that are necessary to provide the Application:

• Provide the app and its tools, your account, cloud storage and sync, and DocEnhance Pro.
• Process purchases, subscriptions, free trials and refunds.
• Answer your requests and provide support.
• Keep the Application secure, find and fix errors (crash reports), and comply with legal obligations.

Purposes that are not necessary, and that you can refuse:

• Show ads in the free Android app and, where you allow it, personalize them.
• Analyze how the app is used to improve it and to measure our advertising campaigns.

If you do not want your data used for these purposes, you can turn off ad personalization in your Android settings (Google › Ads), use the privacy options of the app where they are shown, or write to support@docenhance.com. Refusing them does not affect the services you use.

These providers process data on behalf of the Service Provider and only to provide the Application: Google (Firebase Authentication, Analytics for Firebase, Crashlytics, Remote Config and Hosting), Cloudflare (servers, cloud storage and database) and RevenueCat (status of Google Play subscriptions).

Your data is also shared with:

• Google AdMob, which uses the advertising ID and device information to show ads, and may use them for its own purposes under its policy. Under Mexican law this is a transfer that needs your consent: if you do not object, we understand that you consent to it. You can object at any time as described in "Why We Use Your Data".
• Microsoft (Microsoft Store) and Google Play, to process your purchases. This is necessary to carry out the purchase you request.
• Authorities, when required by law or by a valid order.

The Service Provider does not sell your personal data.

These providers have their own privacy policies:

• Google Play Services
• AdMob
• Google Analytics for Firebase
• Firebase (Crashlytics, Authentication, Remote Config)
• Google ML Kit
• RevenueCat
• Cloudflare
• Microsoft Store

The providers above process data on servers outside Mexico, mainly in the United States, which may be outside your country. Using the account, cloud storage, purchases, ads and analytics involves a transfer of your data to them, under their data processing terms.

You can access your personal data, correct it, ask for it to be deleted (cancellation) and object to its use (in Mexico, the ARCO rights). You can also withdraw your consent and limit the use of your data.

• How: write to support@docenhance.com from the email address of your account (or, without an account, explaining which data you mean), with your name, what you are asking for and any document that helps to find your data. If your identity is not clear, the Service Provider may ask you to confirm it.
• When: the Service Provider answers within 20 business days and, if your request is accepted, carries it out within the next 15 business days. Requests are free.
• In the Application: if you have an account, "Download all" downloads your cloud documents, and "Delete account" deletes your account, your cloud documents and your devices at any time.
• Complaints: in Mexico, you can go to the Secretaría Anticorrupción y Buen Gobierno, the authority for the protection of personal data.

Although the Service Provider is not subject to the California Consumer Privacy Act or similar state laws, it answers requests from any user to know, correct or delete their personal data, at support@docenhance.com, and does not discriminate against anyone who makes them. The Service Provider does not sell personal data.

Do Not Track: the Application does not respond to "Do Not Track" browser signals. The website does not track you across other sites. In the Android app, Google AdMob may use the advertising ID to personalize ads across apps; you can turn this off in your Android settings.

• Account, cloud documents and devices: until you delete them or delete your account. Deleted documents stay in the trash for 30 days and are then permanently deleted. Deleting your account deletes your account data, all your cloud documents and your devices.
• Purchases: Microsoft, Google Play and RevenueCat keep your purchase records under their own policies and tax law. When you delete your account, the Service Provider keeps the record of your subscriptions without your user identifier, to handle refunds, disputes and tax obligations.
• Analytics, ads and crash data: for the periods set by Google for Firebase and AdMob.
• Technical logs: for the period set by Cloudflare.
• On your device: your scans, drafts and signatures stay until you delete them or uninstall the app. App updates may also reset locally stored data.

DocEnhance is meant for adults. You must be 18 or older to create an account, use cloud storage or buy DocEnhance Pro. The Application is not directed to children under 13, and the Service Provider does not knowingly collect their personal data.

If the Service Provider learns that a minor created an account, it deletes the account and its data. If you are a parent or guardian and believe your child gave us personal data, write to support@docenhance.com.

Document scanning, edge detection, image enhancement and text recognition (OCR) use models that run on your device. Your images and documents are not sent anywhere to process them. The Application does not use generative AI.

The Service Provider does not use your documents, scans, photos or extracted text to train or improve any artificial intelligence model.

The Service Provider uses administrative, technical and physical measures to protect your data, including encryption in transit and at rest by its providers.

If a security breach significantly affects your rights, the Service Provider will tell you without delay what happened, which data was affected, what it is doing about it and what you can do to protect yourself.

The Service Provider may update this policy. The date at the top shows the latest version. Material changes will be announced on this page and, if you have an account, in the Application or by email before they take effect.

Previous versions are available on request at support@docenhance.com.

For any question about your privacy or to exercise your rights: support@docenhance.com. Person in charge of personal data: Juan Jose Mendez de Leon, Blvd. 10a Calle Oriente 39, Barrio Guadalupano, 30620 Villa Comaltitlán, Chiapas, Mexico.