This Privacy Policy explains how Actual Innovation Ltd. (“we”, “our”, or “us”) collects, uses, and protects information when you use DoctorDocs — our PDF editor and document management application available on iOS and Android (the “App”).
By downloading or using the App, you agree to the practices described in this policy. If you do not agree, please discontinue use and uninstall the App.
This policy is governed by the laws of India, including the Information Technology Act, 2000 and applicable rules thereunder. Where the App is used by individuals in the European Economic Area (EEA) or the United Kingdom, we also comply with the General Data Protection Regulation (GDPR).
We collect only what is necessary to provide and improve the App.
| Category | Data Collected | Source |
|---|---|---|
| Account Information | Email address, display name, profile photo (optional), authentication provider (Email / Google / Apple) | Provided by you at sign-up or via OAuth |
| Usage & Analytics | Screens visited, features used, app events, session duration, crash reports | Automatically collected via Firebase Analytics |
| Device Information | Device model, OS version, language, timezone, app version | Automatically collected |
| Advertising Identifier | IDFA (iOS) / GAID (Android) — used for ad serving only | Collected by Google AdMob SDK |
| Send to Sign Data | PDF files you choose to send, recipient signature, request metadata | Uploaded by you when using the Send to Sign feature |
We do not collect: precise location data, contacts, microphone recordings, health data, financial information, or SMS / call logs.
Guest use: Core PDF editing works without an account. In guest mode, only anonymous analytics are collected — no account information.
We do not sell your personal data. We do not use your data for automated decision-making or profiling that produces legal effects.
The App integrates the following third-party services. Each provider operates under its own privacy policy.
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Authentication | Google LLC | Account creation & sign-in | firebase.google.com/support/privacy |
| Firebase Analytics | Google LLC | App usage analytics & crash reporting | firebase.google.com/support/privacy |
| Google AdMob | Google LLC | In-app advertising | policies.google.com/privacy |
| Google Sign-In | Google LLC | OAuth authentication | policies.google.com/privacy |
| Sign in with Apple | Apple Inc. | OAuth authentication | apple.com/legal/privacy |
| Supabase | Supabase Inc. | Cloud storage & database for Send to Sign | supabase.com/privacy |
These providers may process data outside India. Google LLC and Supabase Inc. are based in the United States. By using the App, you consent to such transfers, which are subject to appropriate safeguards under the respective providers' data processing agreements.
Your documents stay on your device. Unless you explicitly choose to use the optional 'Send to Sign' cloud feature (see Section 6), all PDF editing, compression, merging, splitting, annotation, and signing operations are performed entirely on-device. Your files are never uploaded to our servers.
We access your device's file system and camera only when you explicitly trigger an action (e.g. importing a file, scanning a document). We do not read, index, or transmit your documents in the background.
Permissions requested and their purpose:
Send to Sign lets you upload a PDF to secure cloud storage and share a signing link with a recipient. This feature activates only when you explicitly choose to use it.
When you use Send to Sign:
Do not upload documents containing highly sensitive personal data (e.g. Aadhaar numbers, financial account details, medical records) unless you are certain the recipient is trusted and the signing link is shared securely.
The free tier of DoctorDocs is supported by ads delivered through Google AdMob. AdMob may collect and use your device's advertising identifier (IDFA / GAID) to show personalised advertisements.
You can opt out of personalised advertising at any time:
Opting out results in non-personalised ads. It does not remove ads from the App. A premium upgrade may be available within the App for an ad-free experience.
Account and authentication data is managed by Firebase (Google LLC)with industry-standard encryption in transit (TLS) and at rest.
Send to Sign files are stored in Supabase cloud storage with Row Level Security (RLS) policies ensuring only the authorised sender and recipient can access a given document.
We implement reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is 100% secure and we cannot guarantee absolute security.
In the event of a data breach likely to result in risk to your rights and freedoms, we will notify affected users and the relevant authority as required by applicable law.
| Data Type | Retention Period |
|---|---|
| Account data (email, name) | Until you delete your account |
| Firebase Analytics data | Up to 14 months (Google default) |
| Send to Sign — PDFs & request data | Until expiry (set at creation) or manual deletion |
| Advertising identifiers | Managed by Google AdMob per their retention policy |
You may delete your account and associated data at any time via Settings → Account → Delete Account in the App, or by contacting us at the address in Section 14.
DoctorDocs is not directed at children under the age of 13(or under 16 in the EEA where applicable). We do not knowingly collect personal data from children.
If you are a parent or guardian and believe your child has provided personal information, please contact us at privacy@actualinnovation.com and we will promptly delete the information.
Depending on your location, you may have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you. |
| Correction | Request correction of inaccurate or incomplete data. |
| Deletion | Request deletion of your personal data (subject to legal obligations). |
| Portability | Receive your data in a structured, machine-readable format. |
| Withdraw Consent | Withdraw consent at any time (e.g. opt out of personalised ads). |
| Object / Restrict | Object to or restrict certain processing activities. |
EEA / UK users (GDPR): Our lawful basis for processing is (a) contract performance for account features, (b) legitimate interests for analytics and security, and (c) consent for personalised advertising. You may lodge a complaint with your local data protection authority.
California users (CCPA/CPRA): You have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. You will not be discriminated against for exercising your rights.
To exercise any right, contact us at privacy@actualinnovation.com. We will respond within 30 days.
The App does not respond to “Do Not Track” (DNT) signals, as there is no industry-standard interpretation for mobile applications. You can control analytics collection through your device's privacy settings or by contacting us to opt out of Firebase Analytics.
We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top of this page and, where appropriate, send an in-app notification.
Continued use of the App after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
Actual Innovation Ltd.
Email: privacy@actualinnovation.com
Country: India
We aim to respond to all privacy-related enquiries within 30 days of receipt.