Dokus Privacy Policy

Version 0.9, effective August 18, 2026

Dokus is a personal wallet for your identity documents. This policy explains, plainly, what happens to your data. The summary fits in one sentence: your documents are yours, they stay under your control, and we have no access to them.

Who we are

Dokus is an independently developed app. For anything related to privacy, write to privacy@dokus.app.

What we don't do

• We never receive, store, or process your documents, and we have no access to their contents.
• We don't sell or share your data, show you ads, or build a profile of you.
• We use no ad networks, no cross-app or cross-site tracking, and no third-party tracking SDKs.
• We don't ask for an account, login, email, or any personal information to use the app.

Camera, photos, and document scanning

• Camera: Dokus only opens the camera in the exact moment you tap to scan a document inside the app. It has no standing access to your camera and never uses it for anything else or in the background.
• Photo library: Dokus never has access to your photo library. When you choose to import an existing photo, it happens through Apple's native picker, which runs outside the app: Dokus only ever receives the single photo you picked and never sees or browses the rest of your library. Saving an exported image back to your library, if you choose to, uses a separate, add-only permission: the app can add a picture you save, never read the ones already there.
• On a Mac, the camera is your iPhone's: Dokus for Mac has no camera of its own. A scan taken there is framed on an iPhone lying nearby, in Apple's own Continuity Camera interface, and the system hands the app nothing but the finished capture.
• Nothing opens by itself: Dokus never accesses your camera or photo library on its own, in the background, or without your explicit action. Every access starts with you tapping to scan or to import, is limited to that one photo, and ends the moment it's done.
• Document detection and perspective correction run on-device: finding a document's edges and straightening the image use Apple's Vision framework, entirely on your iPhone. This processing never leaves your device. It isn't sent to Apple's servers or to ours.

Where your documents live

• On your device: on iPhone and iPad, documents are encrypted in the app's protected area (iOS data protection) and guarded by Face ID. On a Mac they live in the app's own sandboxed container, guarded by Touch ID, and encrypted on disk when FileVault is on. Neither the app nor its developer can read your files.
• Not in your device's backup: Dokus deliberately keeps your documents out of the device's iCloud backup on iPhone and iPad, and out of Time Machine on a Mac, automatically. Once something is captured in a backup snapshot, the app can no longer remove it, so we keep your documents out of it entirely: the only cloud copy Dokus offers is Sync (below), which the app fully controls and can delete.
• With Sync, when you turn it on: your documents are mirrored to your private iCloud space so they're available on your other devices. That data lives in your iCloud account, encrypted by Apple; Dokus has no access to it. With Apple's Advanced Data Protection enabled, the encryption is end-to-end.
• Fully offline, if you choose: Sync is optional. With it off, Dokus works entirely offline: your documents stay on your device, kept out of the device backup as above, and the app sends them nowhere.

Anonymous usage statistics

To improve Dokus, we collect a small set of anonymous, aggregated usage counters, for example how often a screen or the Dokus Plus offer is shown. They carry no document content and no personal data, contain no identifier that could link them to you or your device, and your IP address is never stored. Your documents are never sent to us (see Where your documents live above).

You can turn this off at any time in Settings › Share usage data; collection stops and anything measured but not yet sent is discarded.

Crash diagnostics

If Dokus crashes, Apple's on-device diagnostics (MetricKit) may record a technical report: the type of error and the code that was running. With anonymous statistics enabled, we collect these to find and fix bugs. They carry no document content, no document names, and no personal data, contain no identifier that could link them to you or your device, and your IP address is never stored. Any field that could hold a file path or personal text is stripped on your device before anything is sent. Reports are kept for at most 90 days, and the same Settings › Share usage data switch turns them off.

How to delete your data

• On the device: delete the document in the app, or uninstall Dokus.
• In iCloud (Sync): when you turn Sync off in the app's settings, we remove your documents from iCloud; local copies remain on that device, and they are the ones that count. If another of your devices still has Sync on, it keeps its own copies mirrored there, so turn Sync off on each device to take everything out of iCloud.
• Not in any backup: Dokus keeps your documents out of the device backup (and out of Time Machine on a Mac) by design, so there's nothing to delete there.

No purchase decision deletes documents: buying Dokus Plus or not, or having a purchase refunded, never removes anything, neither from your devices nor from your iCloud. Only you can delete them.

Your rights

Because we don't keep or process your personal data, you exercise your rights directly, in the app and on your device: access, correct, export, and delete your documents at any time, without depending on us. Wherever you live, the rights privacy laws typically grant (access, correction, deletion, portability, objection) are effectively already yours, because there's no personal data in our hands to act on. We don't sell or share personal data, so there's nothing to opt out of.

For any request or question, reach us at the address above.

Purchase data

Purchases are processed by Apple. We never receive your card number or payment details, only Apple's confirmation of your purchase. Apple's handling of that data is governed by Apple's Privacy Policy.

Reviews you publish

If you review Dokus on the App Store, that review is public and carries the nickname you chose there. We may republish it on our site, as the Terms of Use explain. It is the only content connected to you that we publish anywhere, and you can have it taken down at any time by writing to privacy@dokus.app.

Children

Dokus is not intended for minors and does not knowingly collect data from children.

Changes to this policy

If this policy changes, we'll update the date at the top and, when the change is significant, notify you inside the app.