DocoraDocora privacy policy
Last updated: 18 October 2026
Docora is a document scanner and PDF app for Android, published by Greatdev Studios ("we"). This policy explains what happens to your information when you use Docora.
Summary. Your documents stay on your device. Docora has no account and no cloud storage, and it never uploads your documents, file names, extracted text, or images. Docora goes online to check whether an app update is available and, only if you allow sharing, to send crash reports and usage analytics. We do not sell your data and Docora shows no ads.
Your documents
Scans, imported files, PDFs you create, text extracted from scans, and annotations and signatures are stored in Docora's private storage on your device. Scanning, text recognition, PDF tools, and annotation all run on your device. A file leaves your device only when you choose to share, export, or print it through Android, or when you back up your library to a file or folder you choose (Automatic backup does this on a schedule); the app you choose then handles it under its own terms. Android backup does not copy your documents. Saved signatures and initials are never copied by Android backup or device transfer either; a Docora library backup file includes them only if you tick “Include signatures” when you make it. Automatic backup (Premium) saves the same kind of backup file, on a schedule, to a folder you pick on your device or in a storage app you choose; it includes signatures only if you switch on “Include signatures” for it. Saved workflows, workflow recovery progress and document templates are stored privately on your device and excluded from Android backup, device transfer and library backups. Templates store field positions, not previously filled text or signature strokes. Receipt suggestions are processed on device and exported only when you choose.
App updates
When you open the app it downloads a small public file from GitHub Pages (greate43.github.io) that says whether a newer version is available and whether it is required. The request contains no account, identifier, document, or usage data. Like any web request, GitHub receives your device's IP address and handles it under the GitHub Privacy Statement; we do not receive or store it. Updates themselves are downloaded and installed by Google Play.
Crash reports
To find and fix crashes, Docora uses Firebase Crashlytics, a Google service. Crash reports are off until you allow sharing: Docora asks once, on a "Help improve Docora" page after you first open the app, and you can change your answer any time in Settings → Privacy ("Share analytics and crash reports"). One choice covers crash reports and usage analytics together. If Docora crashes, or a tool fails in a way that looks like a bug, Crashlytics receives where in the code it happened (the stack trace), the app version, the device model, the Android version, free memory and storage, a random identifier for this installation, and a few values from fixed lists: the screen you were on, whether Premium is active, whether the phone or tablet layout is used, and roughly how many documents you have (for example 6–20). Before a report is sent, Docora removes file paths, file and document names, web addresses, and e-mail addresses from error messages. Reports never contain your documents, extracted text, or images. Turning sharing off also deletes any report that has not been sent yet. Crashlytics keeps crash reports for 90 days.
Usage analytics
To learn which features are used, Docora can send usage analytics through Google Analytics for Firebase. Analytics are off until you allow sharing, on the same page or in Settings → Privacy, together with crash reports; you can turn sharing off again at any time. When they are on, Google Analytics receives which screens you open and which actions you take from a fixed list (for example "a PDF was shared" or "a scan of 2–5 pages was completed"), a few settings from fixed lists (whether Premium is active, the theme, phone or tablet layout, and roughly how many documents you have), when you use the app, the app version, the device model, the Android version, a random identifier for this installation, and an approximate location (such as country or city) that Google derives from your IP address. Google Analytics may also record that an in-app purchase happened. Analytics never contain your documents, file names, extracted text, images, your name, or your e-mail address. Turning sharing off stops collection and resets the installation identifier. Analytics data is kept for 2 months.
What we never do
Docora does not use the advertising ID, does not show ads, does not use analytics for advertising or personalisation, does not link crash reports or analytics to your name, e-mail, or Google account, and does not sell or share this data. Google processes crash reports and analytics for us as a service provider under the Google Privacy Policy (policies.google.com/privacy) and the Firebase terms. Debug and test builds never send crash reports or analytics.
Camera
Docora asks for camera access so you can scan documents. Camera frames are analysed on your device to find page edges and are not stored unless you capture a page. You can decline camera access and still import files.
Notifications
On Android 13 and later, Docora asks to send notifications only when you turn on Automatic backup, so it can tell you if a backup fails or is paused. Notifications are created on your device and contain no document names. You can decline; backups still run and any problem is shown in Settings.
Purchases
Docora Premium is sold through Google Play. When you buy or restore Premium, Docora talks to the Google Play Store app on your device. Google processes the payment and tells Docora which Premium products your Google account owns. Docora sends Google Play only product identifiers, never your documents, file names, extracted text, or images. Google's privacy policy applies to the purchase: policies.google.com/privacy
Premium status on your device
To keep a subscription working for up to 7 days without a connection, Docora stores which Premium products were confirmed and when. It does not store payment details or purchase tokens. This information stays on your device.
Your choices and deleting your data
Turn sharing (crash reports and usage analytics) off in Settings → Privacy at any time; Docora keeps working exactly the same. Delete documents in Docora (move them to Trash, then delete them permanently), or uninstall Docora to remove all of its data from your device. We hold no copy of your documents. Crash reports and analytics are not linked to you, so we cannot look them up by name or e-mail; they are deleted automatically after the periods above. To ask about them, contact us at the address below.
Age assurance
Docora can ask Google Play for an age range and parental-approval status to support regional age-assurance requirements. Google Play handles any verification or age-sharing prompt. Docora does not request your birth date or identity documents, store the returned age information or install identifier, or include them in analytics or crash reports. Document tools remain available; purchases use Google Play approval controls.
Audience
Docora is a general-purpose document scanner. It has no adults-only access restriction.
Changes
If this policy changes, we will update this page and the date above. Any new kind of data sent off your device will be described here before it ships.