VelloDoc Privacy Policy
Privacy Policy — VelloDoc
App: VelloDoc — Edit PDF Scanner OCR (com.vellodoc.pdfscannereditorocr)
Developer: UApps Studio
Contact: tahir.biit@gmail.com
Effective date: 24 August 2026
This policy covers the VelloDoc Android app only. It replaces, for this app, anything said on any other UApps Studio policy page.
The short version
VelloDoc scans, reads, edits and converts documents on your device. Your documents, the images you scan, the text recognised from them and their file names are never uploaded to us. There is no account, no sign-in, and no advertising in this app. We operate no server for it.
The app is not entirely offline, and this policy says exactly where it touches the network and what goes out when it does.
What we collect
UApps Studio operates no server for this app, and the app never sends us anything on its own. We cannot see your documents, your file names, your recognised text or how you use the app. There is no account and no identifier created by us.
There is exactly one way we hear from you, and you have to start it. Settings → Report an issue writes an email addressed to us and hands it to your own email app. Nothing is sent until you press send there, in your own mail client, from your own address. If you do send it, we receive:
- your email address, because that is how email works;
- whatever you typed, and the category you picked;
- the app version, your phone's manufacturer and model, and your Android version — unless you untick "include diagnostics", which is ticked by default.
No document, scan, recognised text or file name is attached. You can see and edit everything in the draft before you press send. Because the message travels through whichever email app you use, we cannot promise anything about how that app transmits it.
How long we keep it, and how to have it deleted. Support mail is used only to answer you and to fix what you reported. It is never added to a mailing list and never used for advertising. It is deleted once the issue is resolved, and at the latest after 24 months. To have it deleted sooner, reply to the message or write to the contact address above and we will delete it and confirm. Since there is no account, this is the only personal data we hold — if you have never emailed us, we hold nothing.
That is not the same as "the app sends nothing". VelloDoc is built on Google's ML Kit and Google Play services, and those components report limited operational data to Google. We neither receive that data nor control it, but this app is what puts those components on your phone, so they are disclosed in full below.
What stays on your device
All of the following is written to app-private storage on your phone and is not transmitted:
- Scanned pages, imported images and the PDFs you create.
- Text recognised by OCR, and the searchable text layer added to PDFs.
- Documents you translate, and the translated output.
- Folders, tags, favourites, and the document index.
- The encrypted vault, its PIN and its contents.
- Crash logs, written to a local folder and shown in Settings. They are not uploaded.
- The app's own usage-event log, written to the system log only and never sent off the device. Settings → Privacy Control Center can switch it off. That switch governs those events only; it does not stop the Google diagnostics described below.
What leaves your device, and when
Here is every way this app reaches the network. VelloDoc asks your permission before the two that cost you data. Buttons that hand something to another app are listed separately below, because what happens next is that app’s doing, not ours.
Every network request the app itself makes uses HTTPS. Unencrypted HTTP is blocked.
Buttons that deliberately hand something to another app
These are not background transfers. Each is a button you press, you can see what it will send before you press it, and once the content reaches the other app that app's own privacy policy governs it — not ours. Some of these send information taken from your documents, so they are worth reading:
- Share and Export send what is on screen to the app you choose — usually the file you picked, but in Lens the Share button sends the whole recognised text, not a file and not a shortened version of it.
- Open / Open with hands the complete file to the viewer or editor you choose.
- Print hands the complete document to Android's print system and the printer or print service you select.
- Save to contacts, after scanning a business card, sends the details read from it — name, company, job title, phone, email, address — to your contacts app.
- Add to calendar sends the reminder's details to your calendar app.
- In Lens, Search the web puts the recognised text (up to 200 characters) into a web search, and a scanned product barcode can be looked up the same way. Opening a link from a scanned QR code sends that address to your browser.
- Rate VelloDoc opens the Google Play listing.
If a list like this is ever out of date, treat it as examples rather than a complete inventory: anything that opens another app is a hand-off of whatever you can see it carrying.
What Google's components send, per Google's own disclosure
- Device information — manufacturer, model, OS version, hardware accelerators.
- App information — package name and version.
- A per-installation identifier. Google states this does not identify a user or a physical device.
- Performance and diagnostic metrics, such as latency and error codes.
- API configuration, such as image format and resolution.
- Events: initialisation, model download, detection, resource release.
- For translation, the source and destination languages you choose — and, where the app works out what language a text is in, the language or languages it identifies.
What it does not send is the part that matters: not the image, not the recognised text, not the document. This is Google measuring its own components running, not reading what they read.
Camera
VelloDoc asks for camera access only when you open a feature that needs it, and it tells you what that feature does with the camera before the Android permission prompt appears.
- Smart Scan and Guided capture photograph a page so it can be cropped, enhanced and read. Guided capture also reads the live preview to check lighting, glare, movement and focus. The preview itself is not recorded. When you press the shutter, the photo is written to VelloDoc's private storage on your phone.
- Lens photographs nothing. It reads the live preview and, depending on the mode you pick, recognises text, scans barcodes and QR codes, or labels objects it sees.
All of it runs on your device. No image, and no text or label read from one, is ever sent to us.
Location
VelloDoc requests no location permission and never reads where your phone is. We never receive your location.
Two things are worth stating plainly rather than hiding behind that sentence. First, when you use Translate, Google's own component makes the request described above and the receiving server sees your IP address, from which a country can be derived — that is why approximate location appears in this app's Google Play data disclosure. Second, when you ask VelloDoc to remove location data from an image, it reads the GPS tags already inside that image in order to find and delete them; that happens entirely on your phone and nothing is sent anywhere.
Permissions, and why
VelloDoc requests no location permission, no microphone permission, and no broad photo or storage permission — choosing an image uses the Android system photo picker, which grants access only to the file you pick.
Reminders
Passport, Medical, Tax, Invoice and Contract scans have their expiry and due dates read automatically and turned into reminders on your device, without asking first. You can see or delete them all under Tools → Advanced Workflows → Expiry Reminders. Reminders are stored and shown on your device only.
Sensitive documents
VelloDoc has a Medical scan mode that files a scanned page under Medical, tags it, marks it sensitive and may turn a date it reads into a reminder. That handling happens entirely on your device.
VelloDoc is not a medical device. It does not diagnose, treat, cure or prevent any medical condition, and it does not provide medical advice. It reads text from an image and can read it wrong — check anything important against the original document, and consult a healthcare professional for medical advice, diagnosis or treatment.
Backups and transfers
Your documents, the document index and the encrypted vault are excluded from Android's cloud backup and from device-to-device transfer, including documents you moved to an SD card. They do not travel to a new phone. The vault is sealed with keys tied to the device it was created on, so its contents could not be read elsewhere in any case.
Deleting your data
- On your phone: Settings → Privacy Control Center → Delete All Data clears the document index, the vault, your settings and the files themselves, including documents you moved to an SD card. Two limits worth knowing: a card that is not in the phone at the time cannot be reached, and if a storage volume refuses a delete — read-only, removed mid-wipe, or failing — files on it can survive even though the app reports the wipe as done. If either applies to you, re-insert the card or fix the volume and run the wipe again, or uninstall the app, which removes its data.
- With us: the only thing we can hold is a support email you chose to send. Write to the contact address above and we will delete that correspondence and confirm.
Children
VelloDoc is a general-purpose document utility. It is not directed at children, and we do not knowingly collect anything from a child.
Third parties
VelloDoc contains no advertising. It does not use AdMob, Google Analytics for Firebase, Firebase Crashlytics or Facebook. It has no generative-AI assistant and no cloud AI: nothing in it sends your documents to OpenAI, Gemini or any other AI provider, and the release contains no key for one. The recognition features it does have — OCR, translation, barcode reading, object labelling, face detection, and the background separation behind Background Clean and Transparent Cutout — are Google's on-device machine-learning components, described above. Nothing about you is sold or shared for advertising.
The components it does use are Google's ML Kit and Google Play services, described above. Their handling of the data they receive is governed by Google's Privacy Policy. Translation is powered by Google Translate.
Changes to this policy
If this policy changes, the effective date at the top changes with it and the updated page replaces this one at the same address. Material changes will be described here rather than made silently.
Contact
Questions about this policy, or a request to delete correspondence: tahir.biit@gmail.com. You can also reach us from inside the app, at Settings → Report an issue.