Privacy policy

Effective 14 November 2026

What stays on your phone

• Your documents, their titles, categories, notes and the text read from scans. Text is read on the phone with Apple's on-device recognition; the pictures are not sent anywhere to be read.
• The keys that open your vault, kept in the phone's secure storage.
• Expiry reminders. Your phone plans and shows them. Our server does not know which documents you have or when they expire.
• The count of wrong PIN tries. The phone keeps the count and the wait time. Nothing is erased after wrong tries.

Folders, locked documents and Photos

Your folders and your album list are part of the encrypted vault. We cannot read their names.

• A folder with a PIN is sealed with a key that comes from the PIN. We do not receive the PIN or the key. We cannot reset a PIN. If you forget a PIN, we cannot open that folder for you.
• The Photos tab has its own PIN. One key that comes from that PIN seals all photos, videos and the album list. The app also checks your Apple ID before it opens Photos.
• A locked document opens only with Face ID or your passcode. Face ID is handled by iOS. We do not receive your face data.
• When you import from the photo library, you can choose to remove the originals. The app deletes its temporary plain copies of videos when the import ends.
• The Save to DocuLock share sheet seals a file before it leaves the other app. You review the file in DocuLock.

What our server holds

To keep your devices in sync and to share links, the service stores:

• Your documents as encrypted data that we cannot decrypt, with its size and the time it changed.
• The public keys of your devices, and a name for each device that you can see in the app.
• A one-way fingerprint of your Apple account identifier (computed with a secret held by the service), so we can check that someone restoring your vault holds the right Apple ID. We do not store your Apple ID, your name or your email address.
• For each shared link: the encrypted copy, when it expires, the view limit, how many times it was opened, and whether it was revoked. We do not hold the key in the link or the access code.
• Technical data needed to run and protect the service, such as request times and network addresses, used for rate limiting and abuse prevention.

Sign in with Apple

To restore your vault, you need your recovery phrase and your Apple account. Apple handles that sign-in under its own privacy policy. Apple gives us a token that shows which account signed in. We keep only the fingerprint described above.

When you sign out in the app, the app locks everything on the phone. The app does not contact Apple when you sign out. To sign in again, use the same Apple ID. Your encrypted vault stays on the service.

Shared links

A link contains a key after the # sign. Browsers do not send that part to servers, so we never receive it. The recipient's browser fetches the encrypted copy from us and decrypts it on the recipient's device. If you add an access code, it is combined with the key and is never sent to us. When a link expires, runs out of views or is revoked, the service stops serving it.

What we do not do

• We do not sell or share your data, and we do not show advertising.
• The app contains no analytics or tracking software.
• This website sets no cookies and uses no analytics.

Who else is involved

• Apple provides Sign in with Apple, on-device text recognition and notifications scheduling on your phone.
• Cloudflare hosts the service and this website. It processes the encrypted data and network requests on our behalf.

Keeping and deleting data

To remove one phone, open Settings and choose Remove this phone. The service deletes that phone's public key and device name. The app warns you if it is your only phone.

Deleting a document in the app removes it from your devices and from the service, and revokes the links made from it. Encrypted copies are removed from storage after a short delay.

To delete everything, open Settings in the app and choose Delete vault. You confirm with your Apple ID and by typing DELETE. The service then removes your encrypted documents and pages, your shared links (they stop working at once), your devices and the vault itself, and your phone clears its own copy and keys. It cannot be undone, and we cannot bring anything back. Your Apple ID can then start a new, empty vault. If you no longer have a phone with access, write to us at the address below.

Security and its limits

Only you hold the keys. If you lose both your devices and your recovery phrase, we cannot recover your documents. We cannot reset the phrase or a PIN. A PIN wait slows a person who holds your phone. It does not stop a person who tries PINs on a copy of the data somewhere else. Choose a long PIN. A link and its access code are only as private as the way you send them. A recipient can photograph their screen, and if you allow downloads they keep the copy they save.

Children

DocuLock is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

If we change this policy in a way that matters, we will update the date above and tell you in the app.

Contact

Questions or requests about your data: support@doculock.app.