Effective date: October 21, 2026 · Version 1.1
DK Software ("we") processes the personal information of people who use the DocBee app (formerly DocVault, the "Service") in accordance with the Personal Information Protection Act of the Republic of Korea and other applicable laws.
Our key promises
· Your documents, photos, vault files and the text in your photos never leave your device. Viewing, converting, organizing, text recognition and automatic sorting all happen on your device.
· We do not sell personal information or pass it to other companies for marketing.
· There is no sign-up, and we never ask for your name, phone number or email.
1. Information we process, why, and how long we keep it
| Category | Items | Purpose | Retention |
|---|---|---|---|
| App launch (automatic) | Device identifier (Android ID or iOS identifier for vendor), OS version, device model, app version, app language, country, views and taps of our own in-app notices (such as the splash screen) | Remote settings, notices and update prompts, usage statistics, counting our own notices, preventing abuse | Until the purpose is fulfilled (end of the Service or your deletion request) |
| Access log (automatic) | Access time, IP address, device identifier, app version, OS version, device model | Usage statistics, troubleshooting, preventing abuse | 90 days (after that, only daily totals that cannot identify anyone are kept) |
| Usage statistics (automatic, Firebase) | In-app events (which screens and features were used and how often; never document names, contents or paths), app instance ID, advertising ID, device and OS information, approximate region based on IP | Improving features and analyzing usage | Up to 14 months under the Google Analytics retention setting |
| Contact us (optional) | Subject and message, attached photos (up to 3), device identifier, app version | Reviewing and answering your inquiry | 3 years after the inquiry is closed (Korean consumer protection law for electronic commerce) |
| Pro purchase and restore | Store purchase information (purchase token, order number), product, payment, expiry and refund status, device identifier | Confirming and restoring your plan, handling refunds | 5 years (Korean consumer protection law for electronic commerce) |
| Secure envelope (sender) | Envelope number, part of the key (cannot open the document by itself), viewing period, number of views, lock and revoke status, sender's device identifier | Limiting views, revoking, showing the sender the viewing history | 30 days after the envelope expires or is revoked |
| Secure envelope (recipient) | Time and result of each opening, a device tag (an 8-character value that cannot be turned back into the device identifier) | Counting views, showing the sender the viewing history | Same as above |
The documents, file names and opening codes of secure envelopes are never stored on our servers. Our servers are located in the Republic of Korea.
We process this information to the extent needed to provide the Service and perform our agreement with you, and process inquiries only when you send them.
2. Information processed only on your device (we never receive it)
· Document, photo and video files, the text in them, and the results of sorting by content
· Vault files, the key that opens the vault (kept in your device's secure storage) and vault backup files
· Your PIN and biometrics (biometric data is handled by the operating system; the app only receives the result)
· File passwords, signatures, bookmarks, reading positions and form autofill details you save
· Transfers to a PC or another device (sent directly between devices on the same Wi-Fi, never through our servers)
· Text recognition uses on-device Google ML Kit. On Android, Google Play services may download the recognition model, but the contents of your documents and photos are not sent.
3. Disclosure to third parties
We do not provide your personal information to third parties, except where the law specifically requires it or an investigative authority requests it through legal procedures.
4. Service providers (processors)
| Provider | Task | Items |
|---|---|---|
| NAVER Cloud Corp. | Server hosting (IaaS) and data storage | All information in section 1 that is stored on our servers |
| Google LLC | Usage analytics (Firebase Analytics), ads (AdMob), ad consent management (in applicable regions such as Europe) | Usage statistics items in section 1, advertising ID, device information |
| Anthropic PBC | Reading, sorting and drafting answers to inquiries (Claude API) | Inquiry subject and messages including replies, subjects of earlier inquiries from the same device, OS type and app version (no device identifier or photos) |
Through contracts or each provider's data processing terms, we make sure providers use the information only for the task above and keep it secure. If a provider or task changes, we will update this policy.
5. International transfers
To provide the Service, personal information is transferred outside Korea as follows.
| Recipient (contact) | Country | Items | When and how | Purpose | Retention |
|---|---|---|---|---|---|
| Google LLC (https://support.google.com/policies, 1600 Amphitheatre Parkway, Mountain View, CA 94043) | United States and others | In-app events, app instance ID, advertising ID, device and OS information, IP address | Sent over the network from time to time while you use the app | Usage analytics; showing and measuring ads and preventing invalid clicks | Under Google's privacy policy (analytics up to 14 months) |
| Anthropic PBC (privacy@anthropic.com, 548 Market St, PMB 90375, San Francisco, CA 94104) | United States | Inquiry subject and messages including replies, subjects of earlier inquiries from the same device, OS type and app version | Over the network, usually within minutes after an inquiry arrives and when our staff re-checks it or writes a follow-up | Reading and sorting inquiries and drafting answers | Deleted automatically within 30 days of receipt (up to 2 years if flagged for a usage policy review); not used for training |
You can refuse these transfers.
· If you do not want your inquiries processed by AI (Anthropic), email our privacy officer at contact@dksw4.com with your inquiry number. From then on, our staff will read and answer your inquiries without AI, and you can keep using the Service as before. Content already sent follows the retention above.
· Ads and usage statistics (Google) are needed to run the free Service and improve the app, so refusing them may limit free use. Pro users see no ads, and you can opt out of personalized ads as described in section 6.
6. Ads and online behavior information
· Free users see Google AdMob ads. The ad provider may directly collect your advertising ID (ADID/IDFA), device information and approximate location based on IP to show and measure ads, prevent invalid clicks and show interest-based (personalized) ads. We do not receive this information.
· Android: reset or delete your advertising ID in Settings > Google > Ads.
· iOS: the app asks whether to allow tracking when you first use it, and you can change this anytime in Settings > Privacy & Security > Tracking. All features work even if you decline.
· In the United Kingdom, the European Economic Area and Switzerland, we show a consent form before ads, and you can choose again under the ad privacy options in the app settings.
· Payments are handled by Google Play and the Apple App Store. We never receive your card or other payment details.
7. Deletion
When the retention period ends or the purpose is fulfilled, we delete the information without delay in a way that cannot be recovered. We do not make paper copies. If the Service ends, we delete personal information on our servers without delay after the end date. Information on your device is deleted when you uninstall the app.
8. App permissions
· All files access (Android, optional): to collect and organize documents in Download, Documents, Screenshots, KakaoTalk and WhatsApp folders
· Photos and videos (optional): to organize photos and videos and sort photos by the text in them
· Camera (optional): to scan documents and make ID copies
· Notifications (optional): to tell you about new documents, cleanup and finished conversions
· Biometrics (optional): to open the vault
You can use the app without these permissions; only the related feature is limited. You can withdraw permissions anytime in your device settings.
9. Your rights and how to use them
You can ask to access, correct or delete your personal information, or to stop its processing, and you can withdraw consent. Send a request through 'Contact us' in the app settings or to the email below, and we will reply with the result within 10 days. Because there is no sign-up, we identify you by the app's device identifier. You may also make a request through a representative. Turning off Settings > Security [Sort by content] also stops automatic sorting on your device.
10. Users outside Korea
· United Kingdom, European Economic Area and Switzerland: we process information to perform our agreement with you (providing the Service and confirming purchases), for our legitimate interests (security, preventing abuse, statistics), and on the basis of your consent (personalized ads). You have the right to access, rectify, erase, restrict, object to processing and data portability, and to lodge a complaint with a supervisory authority. The Republic of Korea, where our servers are, has an adequacy decision from the European Union and the United Kingdom.
· India: requests to access, correct or erase information and grievances under the Digital Personal Data Protection Act, 2023 can be sent to the privacy officer below.
· Indonesia: requests to access, correct, erase or stop processing under the Personal Data Protection Law (UU PDP, 2022) can be sent to the privacy officer below.
· Wherever you are, we accept requests at contact@dksw4.com and respond within the period required by law.
11. Children
We do not knowingly collect personal information from children under 14 (under 18 in India, or the age set by law in other countries). If we learn that we have collected such information, we delete it without delay.
12. Security
Each vault file is encrypted with the international standard AES-256, and the key is kept only in your device's secure storage. Communication with our servers is encrypted (HTTPS), only the people who need it can access personal information on our servers, and access is logged.
13. Privacy officer
Privacy officer: IM GIHYEOK · DK Software · Email: contact@dksw4.com
In Korea you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr / 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972).
14. Changes to this policy
If this policy changes, we will announce it in the app and on this page at least 7 days before it takes effect (30 days for changes unfavorable to you).
· 1.1 (2026-10-21): Renamed the app to DocBee. Added the access log (IP), usage statistics (Firebase) and AI processing of inquiries (Anthropic) to match actual processing, and added the processor and international transfer tables, rights of users outside Korea, and the secure envelope retention period (30 days after expiry or revocation).
· 1.0 (2026-09-29): First version.
Effective date: October 21, 2026