Privacy policy

DocCite is a document search and review app for iPhone, iPad, Mac, Android, and Windows, with capture companions for Apple Watch and Wear OS. This policy explains what happens to information when you use the apps or visit this website.

About this website

This website (https://doccite.com) is a marketing and informational site for DocCite. It provides information about the DocCite app and how to contact us. This website does not process, store, or transmit any clinical study documents.

Website data

This website does not use analytics, cookies, tracking pixels, or third-party monitoring scripts. DocCite does not collect a browsing history from this site.

Cloudflare hosts the website and may process standard connection information, including IP addresses and request metadata, to deliver and protect the site. Cloudflare handles that information under its own policies. DocCite does not use Cloudflare logs for visitor analytics or advertising.

What the developer receives

The DocCite apps do not automatically send documents or app activity to the developer. There is no DocCite account, advertising service, developer-operated analytics service, or third-party crash-reporting service. The developer does not receive your imported documents, notes, searches, answers, bookmarks, highlights, transfer bundles, camera scans, photos, watch captures, or authentication information unless you deliberately include something in a support message or diagnostic export.

The Apple, Android, and Windows apps may keep bounded crash or performance diagnostics on the device. These local records are used to identify app failures and performance problems. The app exports them only when you choose the related export action. If you send an export or contact the developer, the developer receives the material you selected and uses it to investigate or respond to your request.

DocCite does not use your activity to track you across apps or websites, and it does not sell personal data.

Information stored and processed on your device

DocCite stores the documents you import and the local records needed to use them, including extracted text, search indexes, notes, recent searches, bookmarks, highlights, document properties, and processing state. Search, meaning-based retrieval, cited answer support, document comparison, and source verification run locally.

The app does not upload documents to a DocCite server for import, OCR, search, answers, comparison, or source review. Notes can appear in search results, but they are excluded from the cited evidence used to support an answer.

Apple app details

On iPhone, iPad, and Mac, document import, OCR, search, cited answer support, document comparison, and source review use Apple system frameworks and DocCite's local app storage. On supported Macs, On-Device Query Assist uses Apple's on-device model as a search aid. These features do not send document content to the developer.

The Apple Watch companion keeps a bounded capture queue and uses Apple's paired-device transport to deliver a note or question to the paired iPhone. A capture remains pending until DocCite on the iPhone confirms that the same item was saved. The developer does not receive the capture.

Apple may separately collect and share app diagnostics when you enable the applicable Analytics & Improvements settings on your device. Apple handles that information under its own privacy policy. DocCite does not control those settings.

Android app details

The Android app removes the Android Internet permission. Its local library, OCR, search indexes, meaning-based retrieval, cited answer support, document comparison, and source review remain on the device. Android cloud backup and device-transfer backup are disabled for DocCite app data.

DocCite uses ML Kit for on-device text recognition and includes an optional Smart Scan route supplied through Google Play services. Google delivers the scanner interface, logic, and models, and the scan itself runs on the device. You decide which scanned files are returned to DocCite. Google states that ML Kit may collect limited device, app, performance, configuration, feature-use, and error information for diagnostics and usage analytics. Google handles that information under its own policies. The developer does not receive it from DocCite.

The Wear OS companion uses Google Play services to send a capture to the paired Android phone. The developer does not receive the capture.

Windows app details

The Windows app stores its library, source files, search indexes, notes, bookmarks, recovery records, and diagnostics in local app storage under the Windows user account. PDF and DOCX parsing, English OCR, search, cited answer support, comparison, and source review run in the installed app.

Windows crash diagnostics retain redacted error classes and stack frames without error messages. Local performance records contain timing summaries without query text or document content. Neither record leaves the device unless you choose an export action and then send the exported file.

Permissions

DocCite may request the following permissions when you choose a related feature:

• Camera access where the selected capture route requires it. The Google Play services Smart Scan route uses Google Play services' camera permission.
• Photo or file access to select images and documents that you choose to import.
• Device authentication when you enable App Lock. Depending on the device, authentication can use Face ID, Touch ID, Optic ID, Apple Watch, an Android biometric or device credential, or Windows Hello. The operating system handles authentication. DocCite receives the result and does not receive or store biometric data, a PIN, passcode, or password.
• Notifications on Android when local background document processing requires a foreground-service notification.

You can change permissions in the operating system's settings. Features that depend on a denied permission remain unavailable until access is granted.

Sharing, export, and external destinations

DocCite does not automatically transmit document content to a developer-operated service. You can deliberately move content outside the app through Copy, Share, Print, AirDrop, Files, Finder, Windows clipboard, shell handoff, or Offline Transfer. The operating system, app, service, or destination you choose may apply its own privacy practices.

Offline Transfer creates a local bundle that you control. You may leave the bundle unencrypted or protect it with a passphrase. DocCite cannot recover a lost passphrase. A transfer file remains at the destination you selected until you remove it there.

DocCite can open its website, this policy, an email composer, or another external destination at your request. A browser, email provider, or destination site may receive ordinary connection information under its own policy.

Storage, retention, and deletion

DocCite keeps app data locally until you delete an item, use an available clearing or library-replacement control, clear the app's operating-system data, or uninstall the app where the operating system removes that data. Files you copy or export to another location are outside DocCite's managed storage and must be removed from that location separately.

On iPhone and iPad, managed document originals, regenerable data, and local state are excluded from iCloud backup. On Mac, imported originals remain eligible for Time Machine, while derived search data and local state are excluded. Android cloud backup and device-transfer backup are disabled. Windows keeps app data in the local Windows user profile. DocCite does not operate a cloud sync service for these files.

The app may retain bounded temporary files, handoff records, error diagnostics, and processing checkpoints long enough to complete or safely recover a local operation. DocCite removes or ages out these records under fixed local limits. Diagnostics captured by DocCite stay on the device unless you choose to export or share them.

Operating-system protections, app storage boundaries, device credentials, and disk encryption help protect local data. No storage system can eliminate every risk. Keep the device and transfer files under your control, and use a strong passphrase for an encrypted transfer that contains sensitive material.

Children

DocCite is intended as a professional document-navigation tool. The developer does not knowingly collect personal data from children through the app.

Changes to this policy

This policy may be updated when DocCite's data practices change. The effective date above identifies the current version. A material change will be reflected in the published policy when the related app behavior is released.

Contact

Questions about this policy may be sent to hello@doccite.com.

The public policy URL used by the app and App Store Connect is doccite.com/privacy.