🛡️ 100% On-Device Privacy Guaranteed

Privacy Policy

Effective Date: August 14, 2026

🔒 Our Non-Negotiable Privacy Promise

DocSanitizer was built around a single non-negotiable principle: Your document data never leaves your device. All parsing, regex scrubbing, PII redaction, and token optimization execute 100% locally in transient RAM using a high-performance native Rust engine. Zero network calls, zero tracking, zero cloud telemetry.

1. Information We Do NOT Collect

Because DocSanitizer operates entirely on-device, we do not collect, process, transmit, or store any of the following:

Document Content & Text: Your PDFs, DOCX, EPUB, HTML, images, and text inputs remain strictly in RAM during sanitization and are discarded immediately upon completion.
Personal Identifiable Information (PII): Email addresses, phone numbers, credit card numbers, SSNs, and IP addresses detected during scrubbing are masked locally and never stored or transmitted anywhere.
Telemetry & Usage Data: We do not collect crash reports, usage analytics, feature tracking, or session logs.
Device Identifiers: We do not record your IP address, IDFA, Advertising ID, or hardware serial numbers.

2. In-App Purchases & Billing Data

DocSanitizer offers optional Pro upgrades processed through official billing systems:

        Mobile payments are handled via Apple App Store (StoreKit) & Google Play Store Billing via RevenueCat. Web billing is handled via Paddle (Merchant of Record).
      

We do not receive or store your credit card details, banking information, or billing address. RevenueCat and Paddle receive only anonymous entitlement tokens to confirm your active Pro subscription state. An encrypted entitlement token is cached locally in your device's secure storage to enable offline access.

3. Third-Party Services & Network Activity

DocSanitizer contains zero third-party tracking, advertising, or cloud-analytics SDKs.

The only permitted external network calls are standard in-app purchase receipts verified directly by Apple StoreKit, Google Play Billing, or Paddle via RevenueCat. If network access is offline, DocSanitizer honors your locally cached Pro entitlement without requiring an active internet connection.

4. Data Security & Storage Architecture

DocSanitizer enforces strict security architecture controls:

RAM-Only Processing: Intermediate text buffers, parsed tokens, and sanitized outputs exist only in transient memory (RAM).
No Disk Copies: The app and platform share extensions do not persist raw or intermediate document copies to local disk.
On-Device Rust Native Core: Document parsing and regex masking run within memory-safe Rust native code compiled directly into the application binary / WebAssembly.

5. Your Data Rights (GDPR / CCPA / CPRA)

Under global privacy regulations (including GDPR, CCPA, and CPRA), individuals have rights to access, delete, or port their personal data.

Because DocSanitizer collects, transmits, and retains zero personal data, we hold no data to provide, export, or delete. Your data remains 100% under your sole ownership on your device at all times.

6. Contact Us

If you have any questions or security concerns regarding DocSanitizer's privacy architecture, please contact us at:

📧 Email: eladyifee@gmail.com