Privacy Policy

Docwick · Developer and operator: Daniil Sudarev · Last updated: November 14, 2026

Docwick ("the app") keeps your family's documents — passports, visas, insurance, contracts, warranties, licences, vaccination records — in an encrypted vault on your phone. It works without an account and without the internet. In that mode no personal data leaves your device. We never sell or share your data, and the app is free with no purchases.

1. Your documents stay on your phone

Documents, photos, scans and recognised text are encrypted on the device with AES-256-GCM. The vault key is kept in the iOS Keychain / Android Keystore and the vault opens with Face ID, Touch ID, fingerprint or your device passcode. We cannot see your documents and have no copy of the key. Deleting the app deletes the vault. The recovery key shown at first launch is your own copy of the vault key: keep it safe, we do not have it.

2. Scanning and text recognition

The camera is used only when you photograph a document yourself or scan a key card / family invitation code; from the gallery the app receives only the pictures you pick. Text and dates are recognised on the phone (built-in Apple Vision / Google ML Kit). Pictures and recognised text are never sent anywhere.

3. Reminders

Expiry reminders are local notifications scheduled on your phone (6 months, 3 months, 1 month and 1 week before the date, as you choose). No server is involved.

4. Backup, sharing and the "If something happens" kit

A full backup is a file encrypted with your vault key. A shared copy is a file encrypted with a password you choose (Argon2id + AES-256-GCM). The "If something happens" kit is a file encrypted with a separate random key that you hand to a relative as a key card. You decide where to save or send these files (Files, iCloud Drive, Google Drive, a messenger and so on). We do not receive them and cannot open them.

5. Optional account and shared family vault

An account is needed only for the shared family vault, so that two phones see the same documents. You can sign in with Apple or Google; sign-in is never required. Then our server (Supabase, protected by access rules) stores: your sign-in ID and the e-mail address from Apple or Google, the family ID and membership, and the shared records only as ciphertext. Records are encrypted on the phone with the family key before they are sent; the family key is passed between relatives as an invitation code and never reaches the server. We cannot read the shared documents.

This data is not used for advertising or tracking and is not shared with third parties. You can leave the family or delete the account in the app: "Settings" → "Account" → "Delete account". Deletion is immediate and permanent; documents on your phone stay where they are.

How to delete your account without the app: open sudarev.app/delete-account or e-mail support@sudarev.app from the address you signed in with, subject "Delete account". We delete the account and its encrypted data within 7 days and confirm by e-mail.

6. No purchases, ads, analytics or tracking

The app is free and has no in-app purchases. It has no advertising, analytics, crash reporting, trackers or third-party SDKs that collect data, and does not use the advertising ID. The microphone, contacts, calendar and location are not used.

7. Children

Without an account the app collects no data from anyone. Parents may store their children's documents in their own vault; accounts are intended for users aged 13 and over.

8. Changes and contact

If this policy changes, the new version will be published on this page. Contact: support@sudarev.app.