Privacy Policy

1. Who we are

P-DOCS (“P-DOCS”, “we”, “us”) provides an app and website at pdocs.in that helps you organize personal documents stored in your own Google Drive. This policy explains what information we handle, why, and the choices you have. It applies to the P-DOCS website, the P-DOCS iPhone app, and any related services.

2. The short version

• Your files stay in your own Google Drive. We do not copy or store your document files on our servers.
• We store only the details needed to organize your documents — names, categories, dates, notes and tags you enter.
• We never sell your data, never use it for advertising, and never use your documents to train AI models.
• Face ID, offline copies and reminders are handled on your iPhone and never sent to us.
• You can delete your account and data at any time from Settings.

3. Information we collect

Account information from Google Sign-In: your name, email address and profile photo URL.

Document information you provide: document names, categories, issue and expiration dates, document numbers, notes, tags, collections, and the Google Drive file IDs that link each record to your file.

Profile preferences: country, home country and status you choose during setup, reminder preferences and dashboard settings.

Share links you create: a random token and which document it points to.

Authentication tokens: a Google OAuth refresh token, stored securely and used only to access your P-DOCS files on your behalf.

App usage counts: once a day when you open P-DOCS, we record which platform you used (iPhone app, web browser, Home Screen web app or Android browser), your device model (for example iPhone 12 mini), operating system version and the app version. We use this only to count active users and fix problems on specific devices. It contains no document content, no location and no advertising identifier, and it is never used to track you across other apps or websites.

Crash reports: if the app hits an error, a technical report (what went wrong, the screen, device model and OS version) is sent to our error-monitoring provider, Sentry. Reports never include your documents, document numbers, notes, cookies or IP address, and are kept for up to 90 days.

Support messages: when you contact support in the app, we keep your messages, our replies, your name and email, and the device type and app version you sent it from, so we can help you. They are deleted when you delete your account.

Signed-in devices: when you sign in on another device by scanning a QR code, we store the requesting browser's name, approximate IP address and the time of the request, plus the device names you choose, so you can review and sign out linked devices from Settings. QR requests expire within minutes.

Basic technical data: standard server logs (such as IP address, device type and error logs) kept briefly for security and troubleshooting.

4. Information that stays on your device

• Face ID / Touch ID: handled entirely by iOS. P-DOCS only receives a yes/no result — we never access or store biometric data.
• Available-offline copies: files you choose to keep offline are stored in the app’s private storage on your iPhone and removed when you turn off the option, sign out, or delete the app.
• Reminders: expiry notifications are scheduled locally on your iPhone.
• Text recognition: expiry-date detection on the iPhone uses Apple’s on-device Vision framework; images are not sent to a third-party OCR service. Passport and ID details (MRZ), document categories, dates and numbers are also detected on the device.
• Passport chip (NFC): when you choose “Verify with passport chip”, the iPhone reads the chip using the details printed on your passport. The chip is only read, never written to, and the chip data and photo are not sent to us or stored unless you save them with a document.
• Spotlight and widgets: document names, categories and expiry dates are added to iPhone search and the P-DOCS widget on your device only; they are removed when you sign out.

5. How we use Google Drive (Google API disclosure)

P-DOCS requests the limited Google Drive scope drive.file, which only grants access to files P-DOCS creates or that you explicitly choose to open with P-DOCS. We cannot see the rest of your Drive.

We use this access only to create your P-DOCS folders, upload documents you add, show you previews, share files you choose to share, and move files to your Drive trash when you delete them in P-DOCS.

P-DOCS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not allow humans to read it except with your consent or where required for security or by law, and do not use it to train generalized AI or machine-learning models.

6. How we use your information

• To provide the service: organize, search, preview and share your documents.
• To show expiry status and send reminders you have enabled.
• To keep the service secure, prevent abuse and fix problems.
• To respond to support requests you send us.
• To comply with legal obligations.

7. Legal bases (EEA, UK and similar laws)

Where laws like the GDPR apply, we process your information to perform our contract with you (providing P-DOCS), based on our legitimate interests in keeping the service secure and working, with your consent where required (for example notifications), and to meet legal obligations.

8. Sharing and service providers

We do not sell or rent your personal information. We share it only:

• With service providers who run P-DOCS for us under contract: Supabase (database and authentication), Google (sign-in and Drive storage in your own account), and our hosting provider (Vercel). They may process data only on our instructions.
• With people you choose — when you create a share link or share a file.
• If required by law, or to protect the rights, safety and security of our users or the public.
• In a merger or acquisition, in which case this policy will continue to apply to your information.

9. Data retention and deletion

We keep your information while your account is active. You can delete individual documents at any time. Settings → Account → Delete account permanently removes your account, document records, collections, categories and share links from our systems immediately; backups are overwritten within 30 days.

Deleting your P-DOCS account does not delete files in your Google Drive — they belong to you. You can remove P-DOCS’s access at myaccount.google.com/permissions.

10. Security

Data is encrypted in transit (HTTPS/TLS) and at rest by our infrastructure providers. Access to your records is restricted to your account through database row-level security. No method of storage or transmission is 100% secure, but we work to protect your information and will notify you of a breach where the law requires.

11. Your rights

Depending on where you live (including under the GDPR, UK GDPR, California’s CCPA/CPRA and India’s Digital Personal Data Protection Act, 2023), you may have the right to access, correct, download, or delete your personal information, to object to or restrict certain processing, to withdraw consent, and to appeal our decisions or complain to a data-protection authority.

Most of this you can do directly in the app. For anything else, email support@backuplan.in. We will respond within the time required by law and will not discriminate against you for exercising your rights. We do not “sell” or “share” personal information for cross-context behavioral advertising as defined by California law.

12. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

13. Children

P-DOCS is not directed to children under 13 (or under 16 in the EEA and UK). We do not knowingly collect their information; if you believe a child has created an account, contact us and we will delete it.

14. Changes to this policy

We may update this policy. If changes are significant, we will notify you in the app or by email before they take effect. The date at the top shows the latest version.

15. Contact

Questions, privacy requests or support: support@backuplan.in. We aim to reply within 2 business days.