Who this covers
This Policy will apply to the DocDing apps for iPhone, iPad and Android, the web app, and this website. DocDing is the service responsible for the processing this Policy describes. Where data-protection law uses the term “controller”, the legal operator named in the app store listing or your purchase record is the controller for DocDing account and service information.
It covers you as an account holder, members of your household subscription, and the people and entities you file documents under.
Information we handle
Account information: your name, email address, sign-in details and subscription status.
Vault content: your documents, titles, dates, people, entities and categories. These are designed to be encrypted on your device, and DocDing cannot read them. The exceptions are reminder schedules, described under Reminders, and document names in email reminders if you choose to include them.
Technical information: limited device and usage information needed to keep the service working and secure, such as app version and error reports.
Messages you send us, for example through [email protected].
What DocDing cannot see
End-to-end encryption is on for every account by default. Documents are encrypted on your device before they are stored, and the keys stay with you. Your documents never leave this protection, including when you use AI assistant connections, which can only read your deadline schedule as described below.
Reminders need one exception. So that reminders arrive on time even when your phone is off, DocDing can read the schedule of each reminder, as described under Reminders. Push notifications never carry document names: your phone adds the name itself.
You hold the recovery key. DocDing does not keep a copy and cannot recover your vault for you if the recovery key is lost.
Text recognition (Beta) is a phone feature that is off until you turn it on and agree to it on that phone. It runs on the phone; documents are not sent anywhere to be read.
How we use information
To provide the service: store your encrypted vault, make it available on your devices, deliver reminders and manage your subscription.
To keep the service secure: prevent abuse, investigate problems and protect accounts.
To support you when you contact us.
We will not sell your information or use your documents for advertising.
Reminders
So that reminders arrive on time even when your phone is off, your device sends DocDing the schedule of each document reminder: the due date, the type of date (expiry, renewal, review or end of coverage), how many days before the date to remind you, the hour and your time zone, with a reference that is not the document’s name. DocDing can read this schedule and uses it only to send your reminders. It does not receive document names or files for this.
A push notification contains only general text and that reference. Your phone looks the reference up in its own data and shows the document name. If it cannot, you see the general text.
Email reminders are off by default. If you turn them on in Settings, each email says only that a document is due, for example “A document expires in 30 days”, with a link to open DocDing. It is sent to your account email address.
“Include document names in email reminders” is a separate option, also off by default. If you turn it on, your device sends DocDing the names of documents that have reminders so that your emails can name them. DocDing stores these names encrypted with a key held on its servers, so DocDing can read them to write your emails, and our email delivery provider receives the names in the emails it delivers. Turning the option off deletes the stored names.
When a document is moved to the trash or deleted, its reminder schedule is removed and pending reminders are cancelled straight away. When you archive a document, change its date or turn its reminder off, the schedule is updated the next time your device connects. When someone leaves your household, their stored names and push registration are removed.
AI assistant connections (MCP)
Off by default. AI assistant connections are off for every account, so no AI assistant can read anything in DocDing unless you turn them on yourself.
What an assistant can receive. Only your deadline schedule, prepared on your device: for each deadline, its category, the type of date (expiry, renewal, review or end of coverage), the due date, the days remaining and when the next reminder is. You choose which categories are included.
What an assistant never receives. Document names, files and their contents, people’s names, links or references to documents, and anything filed under Health. If an assistant asks about health documents, it is told that this information is restricted. Your documents stay end-to-end encrypted.
When you turn connections on, your device sends this deadline schedule to DocDing so that the assistants you connect can read it. DocDing can read the schedule in order to answer them; it is encrypted in storage and in transit. Assistants can also propose new reminders, including a title they write from what you tell them. Each proposal is kept in your Review inbox, and nothing is created until you approve it. Assistants cannot change or delete anything.
The assistant’s provider receives the deadline information and controls it under its own terms and privacy policy. That provider is a separate company: it is not DocDing’s service provider, and DocDing does not control how it stores, uses, keeps, transfers or discloses what it receives, including in other countries.
We keep a record of your consent (the date and time, the version and language of the wording, a fingerprint of the exact text you accepted, the type of device, and when you withdraw it) and a record of each assistant access (the assistant’s name, the time, the type of request, how many deadlines were returned and in which categories). You see these records in AI activity, where they are kept for 90 days.
You can turn AI assistant connections off at any time in Settings. This disconnects every assistant, withdraws your consent and removes the shared deadline schedule. Information an assistant has already received cannot be recalled from its provider.
Retention and deletion
Deleted documents stay in the trash for 30 days, then are permanently removed.
When you delete your account, your vault and account information are deleted. Some records may be kept for a limited time where the law requires it, such as purchase records.
The account deletion page explains the steps.
Your rights
Depending on where you live, including under the UAE Personal Data Protection Law and the GDPR, you may have the right to access, correct, delete and export your information, and to object to or restrict certain processing.
You can correct document details and delete your account directly in the app. For anything else, write to [email protected]. We may need to confirm your identity first.
You may also complain to the data protection authority where you live.
Children
A parent or guardian may keep documents for a child, such as a passport or a school certificate. Children do not need, and should not create, their own account without a parent or guardian.
Changes and contact
We will update this Policy as DocDing develops and tell you about important changes before they take effect.
Questions or requests: [email protected].