README & Terms — Docuary: Document Vault

📜 Terms of Service

Last updated: August 2026

By downloading, installing, or using Docuary: Document Vault ("the App"), you agree to these Terms of Service. If you do not agree, please do not use the App.

1. Description of Service
Docuary is a free Android application that stores personal documents — passports, licences, insurance papers, certificates and similar — in an encrypted vault on your own device, with on-device text recognition, expiry reminders, sharing, and optional backup to your own Google Drive. All features are provided free of charge, with no advertisements and no in-app purchases.

2. Your Passphrase Cannot Be Recovered
This is the most important clause in this document, and it is a consequence of the design rather than a policy choice. Your documents are encrypted with a key derived from your passphrase. That key is never transmitted anywhere and the developer never holds it.

If you forget your passphrase, your documents cannot be recovered — by you, by the developer, or by anyone else. There is no reset link, no recovery email, and no back door. The same property that prevents a thief reading your vault prevents its recovery. Keep your recovery passphrase somewhere safe and separate from your phone.

3. The App Is Not a Substitute for Your Original Documents
Docuary stores images and extracted text. It does not create legally valid copies, certified duplicates, or replacements for original documents. Do not rely on a stored scan where an authority requires an original, and do not treat the App as your only copy of anything that matters. Keep originals, and keep an independent backup of anything irreplaceable.

4. Reminders Are a Convenience, Not a Guarantee
Expiry reminders are a personal convenience. It remains your responsibility to renew documents on time. Notification delivery on Android depends on your device settings, power state, and the manufacturer's battery-management behaviour, none of which the App fully controls. Do not rely on the App as your only safeguard for a legally or financially critical deadline.

5. Your Responsibilities
You are responsible for the accuracy of what you enter, for choosing a passphrase strong enough for what you are protecting, and for keeping your device secure. You are also responsible for what you do with documents after you share them — once a document leaves the App through the Android share menu, it is governed by the receiving app and recipient, not by Docuary.

6. Encryption Is Strong, Not Absolute
The App uses established, current cryptography (see the Technical Overview below), but no security measure is absolute. The App has not undergone a formal third-party security audit. A device that is compromised at the operating-system level, or a passphrase that is guessed, weak, or written down where others can find it, will defeat any encryption. The App reduces risk; it does not eliminate it.

7. Optional Google Drive Backup
If you enable Drive backup, encrypted copies of your documents are stored in a hidden application folder in your own Google Drive account. They are encrypted before upload and are not readable by the developer or by Google. You can disconnect and delete this backup at any time. Destroying the vault on your device does not delete the Drive backup, which is removed separately. See the Privacy Policy for full details.

8. Lawful Use
You agree to store only documents you are lawfully entitled to hold. The App is intended for your own personal records and those of people you are entitled to act for, such as your immediate family.

9. No Warranty
The App is provided "as is" and "as available," without warranties of any kind, express or implied — including without limitation the accuracy of text recognition, the reliability of reminder delivery under all device conditions, the availability of Google Drive, or uninterrupted or error-free operation.

10. Limitation of Liability
To the fullest extent permitted by law, the developer is not liable for any indirect, incidental, or consequential damages arising from your use of, or inability to use, the App — including an expired document, a missed renewal, a lost passphrase, loss of stored data, or unauthorised access to your device.

11. Changes to the App and These Terms
Features may be added, changed, or removed in future updates. These Terms may be updated from time to time; continued use of the App after a change means you accept the revised Terms.

12. Termination
You may stop using the App at any time by uninstalling it. Uninstalling removes all locally stored data from your device. Any Google Drive backup you created remains in your own Google Drive until you delete it yourself.

13. Contact
Questions about these Terms can be sent to [email protected].

📘 About

Most people keep their important documents in three places at once: a drawer at home, a folder of blurred photos in the camera roll, and an email they sent themselves years ago. None of those are searchable, none are encrypted, and none tell you when something is about to expire.

Docuary is one place for all of them, on your own phone, encrypted. Photograph a document and it is filed, straightened, read, indexed and tracked. Search for a policy number and the right document appears — not because you titled it well, but because the App read every word inside it.

The design principle is that you should not have to trust the developer. There is no account, no server and no telemetry, so there is nothing to breach and nothing to sell. That is checked rather than promised: the App makes no network requests at all unless you switch on Drive backup.

✨ Features

Encrypted vault for passports, licences, insurance, certificates, warranties and any other document
Camera scanning with automatic edge detection and perspective correction
On-device text recognition, so search finds words inside your documents
Automatic passport and ID card recognition, including the machine-readable strip and its check digits
Issue and expiry date tracking, with reminders that never name the document
Multi-select sharing by email, WhatsApp or any other app
Encrypted .docuary bundle export for moving documents between devices
Insights dashboard — what is expiring, what you have filed, where the gaps are
Unlock with passphrase, PIN, fingerprint or face
Optional decoy vault, for situations where you may be compelled to unlock your phone
Automatic locking after inactivity
Dark mode, and complete offline operation

🔐 Data Privacy

All documents stored locally on the user's own device, encrypted
No account required — none exists to create
No personal data stored on developer-owned servers, because there are none
Text recognition runs on the device; documents are never uploaded for processing
Google Drive backup is completely optional and off until you enable it
No Google Sign-In, so the App never receives your email address or identity
User data is never sold or shared with third parties
No advertisements, no advertising SDKs, no analytics, no crash reporting
Android's own cloud backup is disabled for the App, so the operating system cannot copy vault files off the device outside the App's encryption
Document screens are excluded from screenshots and the recent-apps preview

Full detail is in the Privacy Policy.

☁️ Google Drive Backup

Backup is optional, off by default, and end-to-end encrypted. Documents are sealed on your device before upload, so Google stores ciphertext and the developer never holds the key.

Scope — drive.appdata only, a hidden folder belonging to the App. Docuary cannot see, list or open any other file in your Drive
No sign-in — the App requests authorization for that one folder, never your identity
Opaque filenames — random identifiers, never your document titles
Restore — recover on a new phone using your recovery passphrase
Disconnect — stop backup at any time from within the App
Delete — remove the backup from your Drive, or revoke access entirely from your Google account permissions page

Docuary's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

🔑 Permissions

📷 Camera

To photograph documents, which go straight into the encrypted vault. No video or audio capability. Optional — you can import files instead

🔔 Notifications

Expiry reminders, which never name the document. Optional

🔐 Biometrics

To unlock the vault. Android matches your fingerprint in secure hardware and reports only success or failure — the App never sees biometric data. Optional

🌐 Internet & Network State

Used only by the optional Google Drive backup. Unused if you never connect it

Docuary requests no broad storage permission, no microphone, no contacts, no SMS, no call log and no location. Importing a file uses Android's system picker, which grants access to the single file you choose.

⚙️ Technical Overview

Platform: Native Android, Kotlin with Jetpack Compose
Minimum version: Android 8.0 (API 26)
Package: com.rafiqctgbd.docuary
Encryption: AES-256-GCM authenticated encryption, with the header bound in as associated data
Key derivation: Argon2id, tuned to current OWASP guidance
Key storage: Android Keystore, using StrongBox hardware where the device provides it
Database: SQLCipher, so the full-text search index is encrypted alongside the documents
Text recognition: ML Kit, bundled on-device — no network dependency
Backup: Drive REST API v3, drive.appdata scope, authorization without sign-in
Brand colour: violet #A78BFA, deliberately distinct from NextCue's cyan and Medicine & Health Reminder's blue