Last updated: July 2026 · The German version is the authoritative source.
This privacy policy informs you about the processing of personal data when using the DocSentry app (the "App"), pursuant to Art. 13 GDPR. The German version is the authoritative source.
The controller responsible for data processing under the GDPR is:
AKK-IT
Owner Alexander Kick
Johannes-R.-Becher-Str. 14
39218 Schönebeck, Germany
Email: docsentry@outlook.com
A data protection officer has not been appointed; the legal requirements for a mandatory appointment are not met.
DocSentry is a privacy-first app. Your documents, the text recognised from them (OCR) and all information extracted from them are processed exclusively on your device and stored in encrypted form. There is no provider server on which this content is stored or analysed.
In particular:
Note on text recognition: On Android, the scan/text-recognition feature uses Google ML Kit. As a technical system service, Google transmits service telemetry (e.g. device model, operating-system version, app version, runtime and error metrics) to Google; this transmission is part of Google Play services and cannot be disabled by the App. No document content is ever transmitted in this process. On iOS, text recognition runs entirely on the device.
On your device (encrypted, locally) the App processes, depending on use:
The core features work offline. Individual features send data over the internet only if you actively set them up or trigger them. By default, no document content leaves your device.
If you set up a cloud backup, only a fully encrypted backup file (.dsvault, AES-256-GCM) is uploaded to the provider you choose (e.g. Google Drive, Dropbox, OneDrive, iCloud or your own SFTP/FTPS server). The provider sees only unreadable, encrypted data. Depending on the provider, this may involve a transfer to a third country (e.g. the USA), based on the respective provider's safeguards under Art. 44 et seq. GDPR (e.g. EU standard contractual clauses / adequacy decision). Please also observe the respective provider's privacy notice.
If you add an email account, the App connects over an encrypted connection (IMAPS/TLS) to your own mailbox in order to find and import PDF attachments. Your credentials (app password or OAuth token) are stored in the device's secure storage. No DocSentry documents are sent outward.
If you explicitly enable this check and consent to it, the issuer's VAT identification number is transmitted to the European Commission's EU-VIES service (only the country code and number; optionally your own VAT ID to obtain a consultation number). No further document data is sent.
If you trigger this check, public register details of the issuer (register number, court and, where applicable, the company name as a search term) are transmitted to handelsregister.de in an isolated in-app browser — no further document content.
For the local verification of bank codes/addresses, public reference files may be downloaded (e.g. Deutsche Bundesbank, openPLZ). For local search, an AI model may be downloaded. These downloads transmit no user or document data to the provider.
The basic version of the App is free; the one-time "DocSentry Unlimited" unlock is an optional purchase. Purchase and payment are processed via Google Play; Google processes the payment as an independent controller (Google's privacy notice applies). To unlock, and to verify and restore your entitlement, the App communicates with Google Play (e.g. querying the purchases associated with your Google account). No document content is transmitted in this process; only the entitlement ("unlocked yes/no") is cached locally in secure storage.
The provision of your data is neither legally nor contractually required and is not a condition for entering into a contract; you are not obliged to provide it. Without the respective input, however, the corresponding feature cannot be used (Art. 13(2)(e) GDPR). Should we process your data for a purpose other than the one for which it was collected, we will inform you beforehand (Art. 13(3) GDPR).
Data flows to third parties only if you use one of the optional features under section 4 or make an in-app purchase. Recipients are then the respective service you chose (cloud provider, your email provider, EU-VIES, the commercial register) or, for a purchase, Google (Google Play as billing and payment processor). Where this involves a transfer to third countries, it relies on the safeguards under Art. 44 et seq. GDPR. Without using these features and without an in-app purchase, no personal data is transmitted to third parties.
Locally stored data remains on your device until you delete the respective document, reset the vault or uninstall the App. With cloud backup enabled, a rotation of the backup files applies at the respective provider.
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3)); the lawfulness of processing carried out before the withdrawal remains unaffected.
As the data is stored locally, you exercise many of these rights directly in the App (edit, delete, vault reset). For other matters, you can reach us at the contact details in section 1.
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Competent in particular is the State Commissioner for Data Protection of Saxony-Anhalt (Landesbeauftragte für den Datenschutz Sachsen-Anhalt).
The local analysis of your documents serves only to structure and remind. There is no automated decision producing legal effects within the meaning of Art. 22 GDPR. Derived hints (e.g. about deadlines or rights) are purely informational and are not legal or tax advice.
For information and to exercise your rights: docsentry@outlook.com.
We may amend this privacy policy if the actual processing, the legal situation or our services change. We will inform you of material changes in advance within the App. Where processing is based on your consent, we obtain a new consent separately and voluntarily; otherwise the update serves to inform you and is not a precondition for continued access to your locally stored data. The current version available in the App applies.