Privacy Policy — DocFormatter AI
Last updated: 1 October 2026 Contact: pradeepkr848115@gmail.com
This policy describes what DocFormatter AI collects, why, and what happens to it. It describes what the software actually does, not what it might do — the behaviour below can be checked against the source.
The short version
- Your manuscript is processed and deleted. It is never stored, never read by a human, and never sent to any third-party AI service.
- We hold an email address, a hashed password, and a record of credits and payments.
- We do not run analytics, advertising, or any tracking across apps or sites.
- Card details never reach our servers.
What we collect
Your account
| Data | Why | Kept |
|---|---|---|
| Email address | To identify your account, send password resets and receipts | Until you delete your account |
| Password | To sign you in. Stored only as a bcrypt hash — we cannot read it or recover it | Until you delete your account |
Your documents
When you format a document, the manuscript and the template are uploaded, processed, and deleted as soon as the request finishes. The formatted result is deleted about a minute after it is sent to you.
We do not keep copies, we do not index the contents, and no person reads them. Nothing in your document is sent to any third-party service, including any AI or language model. The formatting engine is a rule-based program running on our own server.
The one thing kept is a one-way fingerprint of the two files, with the credit they cost, so that formatting the same manuscript to the same template again doesn't cost a second credit. It is listed under Credits and payments below.
Credits and payments
| Data | Why | Kept |
|---|---|---|
| Credit ledger — grants, purchases, use | To show your balance and explain it if you query it | Life of the account |
| A one-way fingerprint of each manuscript and template you format together, kept with the credit it cost | So formatting the same two files again doesn't cost a second credit. It can't be turned back into either file, and the same files give a different fingerprint in another account | Life of the account |
| A one-way fingerprint of your email address, and the month — only if you delete your account after receiving that month's free documents | So signing up again with the same address doesn't give that month's free documents twice. It can't be turned back into your address | Until that month ends |
| Payment records — Razorpay order and payment ids, amount, plan | To credit your purchase and meet tax and accounting obligations | As long as the law requires, typically 7 years, even after account deletion |
Card and UPI details never reach us. Payment is handled entirely by Razorpay on their own page. We receive only a confirmation that a payment succeeded, and an identifier for it.
Technical data
Our servers keep standard access logs, which include IP addresses, for security and to stop abuse — for example, limiting how many times a password can be guessed. These are not linked to your documents.
What we do not collect
No advertising identifiers. No location. No contacts, photos, calendar or files beyond the documents you deliberately upload. No analytics SDK. No tracking of you across other apps or websites. The app requests only one Android permission: internet access.
Who else receives data
| Who | What they get | Why |
|---|---|---|
| Razorpay | Your payment details, directly from you | To take payment. Governed by Razorpay's privacy policy |
| Render | Everything above, as our hosting provider | The servers and database run on their infrastructure |
| Google (Gmail) | Your email address and the message, when we send you a verification or password-reset email | Email delivery. Sent from our Gmail account; not kept in its Sent folder |
| Google Play | Install and crash data, per Google's own terms | App distribution |
We do not sell your data. We do not share it for advertising. Nobody receives your documents.
Your choices
- See your data — your balance and full credit history are in the app, under your account.
- Correct it — change your password in the app; email us to change your address.
- Delete your account — from the account screen in the app, or by emailing pradeepkr848115@gmail.com. Deleting removes your email, password hash, credit balance and history. Payment records are retained where the law requires, reduced to the minimum needed for accounting. If you had already received this month's free documents, a one-way fingerprint of your email address is kept until the month ends, so that signing up again doesn't renew them.
- Unused credits are not refunded on deletion, so spend them first.
Security
Passwords are hashed with bcrypt, never stored in a readable form. Sessions use short-lived tokens; the long-lived one is rotated on every use, and presenting an old one signs the account out everywhere, on the assumption it was stolen. Traffic is HTTPS throughout.
On your phone, the long-lived token is kept in encrypted storage, with the key held in the Android Keystore and bound to the device. Copying the file off the phone yields ciphertext that cannot be decrypted anywhere else. Your password is never stored on the device at all. The email address the sign-in screen remembers is kept in ordinary app storage, since it is not a secret.
No system is perfectly secure. If you believe your account has been accessed by someone else, change your password — that signs out every other device — and tell us.
Children
DocFormatter AI is for adults. You must be 18 or older to create an account, and the sign-up form asks you to confirm it. We do not knowingly hold data about anyone under 18. If you believe a child has created an account, email us and we will delete it.
Changes
Material changes will be announced in the app before they take effect. The date at the top shows the current version.
Contact
DocFormatter AI — an independent developer project India pradeepkr848115@gmail.com
Grievance officer: Pradeep Kumar, at the email address above. Questions and complaints about your data are answered within a month.