Privacy Policy
Overview
Papermind is built on a single principle: your documents belong to you.
We do not read, scan, sell, or train on your documents. The app works entirely on your device by default. Cloud features are strictly opt-in and use end-to-end encryption.
This Privacy Policy describes how Papermind ("we", "us", or "our") handles information when you use the Papermind mobile application ("App"). Please read this policy carefully. By using the App, you agree to the practices described here.
Data We Collect
We collect the minimum data necessary to operate the App. The table below explains what we collect, why, and where it lives.
| Data type | Purpose | Storage |
|---|---|---|
| Documents & files | Core app functionality — store, organize, and search your documents | On-device only |
| Document metadata | File names, types, dates, and categories for organization and search | On-device only |
| Email address | Authenticate you for optional encrypted cloud backup; also used to associate your RevenueCat subscription | On-device + our servers (opt-in) |
| Encrypted backup blob | Cloud backup of your documents — encrypted on your device before upload; we cannot decrypt it | Our servers (opt-in) |
| Purchase history | Verify active subscription status via RevenueCat | RevenueCat servers |
Data We Do Not Collect
- The contents of your documents are never sent to our servers unless you explicitly enable cloud backup, and even then they are end-to-end encrypted
- We do not collect advertising identifiers (IDFA) or run behavioral advertising
- We do not collect precise location data (the permission is not actively used)
- We do not build profiles of your usage for sale or sharing with data brokers
- We do not use your documents to train machine learning models
Device Permissions
The App requests the following device permissions. Each is used only for the stated purpose and only when you actively trigger that feature.
On-Device Processing
Papermind's document classification, search, and organization features run entirely on your device using on-device machine learning models. This means:
- Document content is never sent to a server for AI processing
- Search and categorization work offline without an internet connection
- Processing results are stored locally in an encrypted database on your device
Cloud Backup (Optional)
Papermind offers an optional encrypted cloud backup feature. If you choose to enable it:
- You will be asked to provide your email address to authenticate via a one-time password (OTP)
- Your documents are encrypted on your device using a key derived from a recovery phrase that only you hold, before they are uploaded
- We store the encrypted backup blob on our servers — we cannot read or decrypt your documents
- Your email address is stored on our servers solely to identify your backup and manage authentication
- You can delete your backup and account data at any time from Settings → Backup → Delete Backup
If you do not enable cloud backup, no document data or email address is ever transmitted to our servers.
Purchases & Subscriptions
Papermind offers optional premium subscriptions processed through Apple's in-app purchase system. We use RevenueCat to manage subscription status.
- Payment information is handled entirely by Apple and never seen or stored by Papermind
- RevenueCat receives your anonymized App Store receipt data and, if you are signed in to cloud backup, your email address to link your subscription
- RevenueCat's privacy policy is available at revenuecat.com/privacy
Third-Party Services
The App uses the following third-party services. We do not sell your data to any third party.
| Service | Purpose | Data shared |
|---|---|---|
| RevenueCat | Subscription & in-app purchase management | App Store receipt, email (if signed in) |
| Apple App Store | App distribution, in-app purchases | Apple account (handled by iOS, not Papermind) |
We do not integrate any advertising networks, social media SDKs, or third-party analytics platforms.
Data Retention
On-device data is retained for as long as the App is installed. Deleting the App removes all local data.
Cloud backup data (if enabled) is retained until you delete your backup from within the App or submit a deletion request to us. We delete backups within 30 days of a confirmed deletion request.
Email address associated with cloud backup is deleted when your backup account is deleted.
Purchase records held by RevenueCat are subject to RevenueCat's own retention policy.
Children's Privacy
The App is not directed to children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of personal data we hold about you
- Correction — request correction of inaccurate personal data
- Deletion — request deletion of your personal data (see Cloud Backup section)
- Portability — export your documents at any time via Settings → Export
- Opt-out — disable cloud backup at any time in Settings; the App continues to work fully without it
To exercise any of these rights, contact us at the address below. We respond to all requests within 30 days.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where required, by sending a notification within the App. Continued use of the App after a change is posted constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out:
Papermind — Privacy Inquiries
We take privacy seriously and aim to respond to all inquiries within 5 business days.