1. Identity and Address of the Data Controller In compliance with applicable personal data protection laws, notice is hereby given to the user (the "User") that the Data Controller responsible for processing personal data is Kevin Fabian Gudiño, an independent developer operating from Zapopan, Jalisco, Mexico, with contact email for privacy inquiries: kevin.ing.indu@gmail.com.

2. Privacy by Design Architecture (Offline AI vs. Cloud Services) DocuTalk is engineered under the core principle of Privacy by Design and by Default:

• Local Processing (Offline AI): When the User utilizes local voice engines, the Application DOES NOT transmit, collect, store, or process the content of imported documents (PDF, DOCX, TXT, EPUB) or generated audio on any external server. All text-to-speech processing occurs strictly within the local memory of the User's device.

• Voluntary Cloud Services Exception: If the User consciously and voluntarily chooses to use cloud-based features (such as Google TTS / Google TTS Pro network voices or the "AI Summarize" feature), document text fragments will be transmitted via API calls to third-party servers (primarily Google LLC). Such processing is governed by the respective privacy policies of those infrastructure providers.

3. Collected Data and Purposes of Processing The Controller DOES NOT directly or indirectly collect sensitive personal data, such as real names, physical addresses, phone numbers, banking details, official identification numbers, or precise geolocation data on proprietary servers.

The only technical, anonymous, or pseudonymized data collected are processed through third-party libraries and SDKs for the following essential purposes:

• Google Play Billing (PRO Subscription Management): Processes anonymous purchase tokens and subscription statuses. The Controller has no access to and does not store credit/debit card numbers or financial information.

• Google AdMob (Free Version Monetization): Collects anonymous device advertising identifiers (Advertising ID) and ad interaction metrics to display relevant ads or manage temporary access rewards ("Pro 1H").

• Technical Metrics and Crash Reports (Crashlogs): Anonymous collection of system diagnostic logs (device model, operating system version, processor architecture, and crash traces) used exclusively to debug errors and improve Application stability.

4. Device Permissions and Justified Purposes For proper operation, the Application requests access to the following local permissions on the User's device:

• Storage and File Access (Media / Scoped Storage): Essential to access, read, and process local documents selected by the User (PDF, DOCX, TXT, EPUB), and to save exported audio files (MP3, WAV, MP4) directly into local storage.

• Network and Internet Access: Used exclusively to verify subscription statuses via Google Play, load advertisements, consult cloud features (if enabled by the User), and download local voice models during initial setup.

• Notifications and Foreground Services (MediaStyle): Required to maintain the media player active when the screen is off or while using other applications, displaying playback controls and the current document thumbnail.

5. Data Transfers to Third Parties The Controller does not sell, rent, or trade personal user data. The only transfers of anonymized technical data occur through the direct integration of infrastructure services provided by Google LLC (Google Play Services, AdMob, Google Cloud TTS) under their own terms and international data protection standards.

6. User Rights and Data Inquiries Due to the Application's architecture, the Controller does not maintain personal user profiles or databases linked to real user identities on proprietary servers. However, for any privacy inquiries, questions, or data rights requests regarding application telemetry, the User may submit a formal request to: kevin.ing.indu@gmail.com.

7. Changes to this Privacy Notice The Controller reserves the right to update or modify this Privacy Notice at any time to reflect legal changes, internal policies, or new app store requirements. Updated versions will be made publicly available within the Application and on its official website.