Pokodrop Privacy Policy

1. Information We Collect

2. Document Storage Architecture: Android vs. Website

Pokodrop enforces a strict separation between personal document storage and print transfer queues:

3. Google Drive Access & Scopes

The Android application requests Google's restricted https://www.googleapis.com/auth/drive.file OAuth scope.

• Limited Scope Justification: This restricted permission permits Pokodrop to access only files created by Pokodrop or files you explicitly open with Pokodrop.
• No General Drive Browsing: Pokodrop does not request full Google Drive access and never searches, reads, modifies, or deletes unrelated personal files in your Google Drive.
• Pokodrop-Managed Metadata: Files created in the app are tagged with internal metadata (pokodropManaged = true).
• Deletion Lifecycle: Deleting a personal document in Pokodrop removes the corresponding file in Google Drive. Logging out or deleting your account gives you control to permanently clean up your Pokodrop Drive files.

4. Local On-Device Document Processing

Document scanning, camera capture, perspective correction, image cropping, and PDF manipulation (combining, compressing, or reordering pages) occur locally on your Android device.

• Camera preview frames and scanned captures are processed in local working storage and are never streamed to Pokodrop servers.
• PDF conversion and operations execute locally within the application sandbox.
• QR code scanning utilizes on-device machine vision without transmitting camera feeds off the device.
• No Cloud AI / LLMs: Pokodrop does not send your documents or images to third-party artificial intelligence services (such as OpenAI, Gemini, or Anthropic) for processing or model training.

5. Pokodrop Spaces & Collaboration Safeguards

Pokodrop Spaces allow users to organize and share document collections with other members.

• Documents in shared Spaces are accessible to authorized members of that Space according to their assigned roles (Editor or Viewer).
• Account Deletion Safeguard: If a user deletes their Pokodrop account, their personal user record and space memberships are removed. However, documents contributed to shared Spaces owned by other collaborators are preserved (the contributor association is removed). This architectural safeguard prevents one user's departure from corrupting or breaking active collaborative spaces.

6. Website Document Encryption (E2EE)

For documents uploaded through the website to participating print shops, client-side End-to-End Encryption (E2EE) is supported:

• Cryptographic Flow: When the destination print shop has published an active public key, the customer's browser generates an ephemeral X25519 keypair, derives a 256-bit AES-GCM key using HKDF-SHA256 (pokodrop-e2ee-v1), and encrypts the file payload and metadata with a random 12-byte initialization vector before transmitting ciphertext to storage.
• Private Key Isolation:The decryption private key resides exclusively on the print shop merchant's local browser. Pokodrop servers and storage hold only encrypted ciphertext blobs.

7. Temporary File Retention

Files uploaded through the website print transfer system are strictly temporary and are not intended for permanent document hosting.

• Automated Expiration:Uploaded transit files and sessions are automatically purged from Cloudflare R2 and the database by background cleanup jobs after the applicable temporary retention period (typically between 15 and 120 minutes depending on the merchant shop's configured settings, or 30 minutes for unfinished uploads).
• Manual Purging: Print-shop operators may manually dismiss or purge transfer records immediately upon print completion.

8. Payment & Subscription Processing

Merchant subscriptions on the website are processed through Razorpay.

• Pokodrop stores payment-related identifiers (subscription ID, order ID, plan tier, and validity dates) necessary to manage merchant accounts.
• Pokodrop never collects, processes, or stores sensitive payment card numbers, CVVs, or UPI PINs on its servers. All payment transactions are handled through Razorpay's PCI-DSS compliant interface.
• Active Razorpay subscriptions associated with a merchant account are cancelled automatically upon account deletion.
• The Android application currently uses a preview entitlement state and does not collect payment card information.

9. Advertising (Google Mobile Ads / AdMob)

The Android application incorporates the Google Mobile Ads SDK (AdMob) to display advertisements in applicable free tiers of the application.

• AdMob may collect and process device identifiers (Google Advertising ID / GAID), IP address, and advertising interaction data in accordance with Google's privacy policies.
• Where required by applicable privacy regulations (such as GDPR in the EU/EEA), Pokodrop utilizes Google's User Messaging Platform (UMP) to obtain and manage consent for ad personalization.
• The website does not display third-party advertisements or use advertising tracking cookies.

10. Audited Third-Party Services

The Pokodrop release relies strictly on the following verified third-party service integrations:

• Google Identity & Sign-In: For user authentication via Android Credential Manager and web Google OAuth.
• Google Drive API: For personal cloud storage of Android documents under drive.file.
• Google Mobile Ads (AdMob) & Google UMP: For in-app advertising and privacy consent management in the Android app.
• Google ML Kit: For on-device QR barcode scanning (zero cloud transmission).
• Cloudflare R2: For temporary staging of web print-shop transit files.
• PostgreSQL Database: For user account records, merchant profiles, and relational metadata.
• Razorpay: For merchant subscription billing on the website.

11. Android Device Permissions

The Android application requests only the permissions strictly necessary for its core features:

• Camera (android.permission.CAMERA): Used exclusively when you open the document scanner to capture document pages or scan a print-shop QR code.
• Media / Photos (READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE): Requested contextually when you choose to import an existing photo or image into a PDF.
• Internet & Network State (INTERNET, ACCESS_NETWORK_STATE): Required to communicate with Google Drive, backend APIs, and Google AdMob ad units.

12. Account Deletion & Data Erasure

You have the right to permanently delete your Pokodrop account and associated data at any time:

13. Children's Privacy

Pokodrop is a general-audience productivity and document-management service. It is not directed to children under 13 years of age (or under 16 in the European Economic Area), and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us immediately so we can promptly delete the information.

14. Security Safeguards

We implement appropriate technical and organizational safeguards to protect your personal data, including TLS 1.3 transit encryption, restricted OAuth scoping, password hashing, client-side cryptographic key derivation, database cascade protections, and automated storage expiration.

15. Your Rights & Choices

Depending on your jurisdiction, you may have rights under applicable privacy legislation (including GDPR, CCPA, and India's DPDP Act) to access, correct, export, or delete your personal data, or to withdraw consent. You may exercise these rights directly within the app, on the web deletion portal, or by contacting our privacy team.

16. Changes to This Privacy Policy

We may revise this Privacy Policy periodically. If we introduce material updates, we will update the “Last Updated” date at the top of this policy and provide prominent notice through our services where appropriate.