Search this site

Embedded Files

Docufence

Darwin Technology L.L.C is a mobile app publishing company and the controller of your personal data, responsible for how it is handled. This data may include device details, geographical data, and interactions with our applications. The terms "Darwin Technology L.L.C," "we," "us," and "our" refer to Darwin Technology L.L.C throughout this document. The term "apps" pertains to our mobile applications, which are available for download.We are committed to respecting your privacy and aim to handle your information in a responsible, fair, and transparent manner. We also want to ensure that you are aware of your data rights, which are detailed herein.To align with these principles, this privacy policy outlines how and why we collect and process your personal data. We've designed it to be user-friendly so you can easily find relevant information based on your relationship with us.
DocuFence App – Basic Functionality OverviewDocuFence App is a cross-platform, secure document management application built for Android, iOS, Web, and backed by a centralized server. It enables viewing, signing, and sharing PDF documents collaboratively with real-time communication capabilities.
DocuFence is a robust, multi-platform secure PDF solution, heavily dependent on third-party libraries for rendering, real-time communication, authentication, analytics, and payments. The third-party services are carefully selected for:

Seamless cross-platform PDF manipulation
Secure authentication and authorization
Fast, scalable backend interactions
Enhanced monetization and analytics

Core Functionalities:

PDF Viewing: Users can view PDFs with rich UI, and apply e-signatures.

E-Signature Integration: Users can draw or upload signatures, which are embedded into the PDF using cryptographic standards.

Authentication: Supports multi-provider sign-in (Google, Facebook, Apple, and native app login) for user identity.

Cloud Storage & Sync: Firebase and the backend server store user data and documents for cross-device synchronization.

Real-Time Collaboration: Uses Socket.IO to enable real-time document collaboration/chat.

In-App Purchases: Monetization is handled via Android Billing Client and Stripe on the web for premium features.

Analytics and Crash Reporting: Firebase SDK tracks usage, crashes, and performance.

Cross-Platform Consistency: Custom PDF rendering ensures uniform functionality across Android (PDFium), iOS, and Web (pdf-lib, pdfjs-dist).

1. Android Application
Signature Tools

SpongyCastle (com.madgag.sponcecastle): Used for PKI-based digital signatures. Helps create/verify cryptographic signatures using public-private keys.
iTextPDF: Embeds the drawn/typed signature directly into the PDF file content.
PDFBox: Used for PDF manipulation (e.g., page extraction, metadata handling).

Real-Time Collaboration

Socket.IO: Enables real-time updates or communication (like collaborative document shared comments) between users and the backend.

Analytics and Ads

Firebase (BOM): Monitors app events, crashes, and sessions.
AdMob: Delivers ads based on user behavior, likely tracked via Firebase for personalization.

Authentication

Facebook SDK
GoogleSignIn SDK

Monetization

Google Billing Client: Handles Android’s in-app purchase flow.
Backend is likely notified post-purchase for server-side verification (via Google APIs).

2. iOS Application
PDF & UI

PDFPreviewer: Native iOS PDF rendering.
ScreenShield: Prevents screen recording/screenshot for sensitive documents.

Real-Time & Image Handling

SocketIO: Same real-time collaboration as Android.
SDWebImageSwiftUI: Efficient async image rendering for signatures/avatars.

UI and Animation

Lottie: Used for onboarding and success animations.

Authentication

Google, Facebook, and Apple Sign-In supported for maximum device compatibility.

3. Web Application
PDF Functionality

- React-pdf, Pdf-lib, pdfjs-dist, Jspdf:
- View and export PDFs in the browser.
- pdf-lib supports embedding signature images.

Drawing & UI

React-signature-canvas: Signature input.
React-draggable: Allows moving annotations/stamps.

Authentication

@react-oauth/google, react-facebook-login: Handle social OAuth login.
jwt-decode: Parses JWT to get user info client-side.

Payments

Stripe SDKs: Handle checkout process for premium features.

Firebase Integration

@firebase/firestore: Real-time database (e.g., user preferences, shared edits).
firebase SDK: Used for FCM and analytics.

4. Backend Server
Built on Flask + SQLAlchemy, the backend orchestrates everything.
Core Functionalities:

User Auth (JWT via Flask-JWT-Extended)
Role-based Access Control
Real-time Messaging (SocketIO Python)
Payment & License Management (Stripe, Google Pay)
Secure File Uploads (Boto3 for AWS S3)
PDF processing and secure file handling

Key Services:
Service Purpose

Boto3 File storage in AWS S3Flask-JWT-Extended Auth and session managementStripe / Google Pay Premium purchase handlingSocketIO (Python) Real-time syncPyCryptodome EncryptionFlask-Mail Email for verification or alertsFirebase Cloud Messaging (FCM) Notifications

Data Collection:

Personal Data: To improve your experience with the Speedometer Android app, we clarify our data collection protocols in compliance with legal standards. Please note that the app does not gather personal data in the following areas:

Exact Location: The app may seek permission to access your device’s precise location to deliver location-based features. This location information is not stored or used beyond its service purpose. Users can manage this permission through their device’s settings.

App Usage Info: When using the service on a mobile device, we may automatically collect specific information such as device model, unique device identifier, IP address, mobile OS, browser type, diagnostic data, and other relevant usage metrics. This data is used solely to enhance our services and is kept confidential.
Access to Contacts: Some apps may request access to your contact list strictly for sharing features within the application. We do not distribute your contact’s details to any third parties, ensuring that this information remains protected.
No Third-Party Sharing: To reinforce our privacy commitment, we ensure your contact data is not shared with external parties. Protecting your personal information is one of our top priorities.
Transparency and Control: We are transparent in how we use your data and provide users with full authority over contact access permissions. You can manage this access anytime in your settings. Ensuring user control is a foundational aspect of our privacy strategy.
If you have questions or data-related issues, please reach out to our Data Protection Officer (DPO) at feedback@docufence.com. We strictly comply with applicable data protection laws to maintain your privacy and security while using Speedometer.

APPLICATION SCOPE, RESPONSIBLE PARTY, LEGAL FOUNDATIONS & STORAGE DURATION
1.1 - POLICY COVERAGE This privacy statement applies to the collection and usage of personal data for:
DocuFence App
1.2 - EXTENT OF DATA HANDLING: We collect and process user information as needed to deliver high-quality applications and services.If services are offered without charge, we support these offerings through personalized advertising.
1.3 - LAWFUL BASIS: The legal foundation for processing data necessary for fulfilling user contracts is based on Article 6(1)(b) of the GDPR.If processing is needed to support legitimate company or third-party interests, without conflicting with the user’s rights, it is legally justified under Article 6(1)(f) of the GDPR.
1.4 - DATA RETENTION DURATION: User personal data is erased once its intended purpose is achieved. Specific storage durations are indicated individually for each data processing instance.

User Rights & Legal Compliance
2.1 - Right to Access: Users may request access to their stored personal data. We reserve the right to approve or deny such requests based on validity. For access requests, contact our DPO at feedback@docufence.com.
2.2 - Right to Rectification: You may ask for corrections to your personal data. We may accept or deny requests based on their legitimacy. Please direct these to our DPO.
2.3 - Right to Erasure: You have the right to request the deletion of your data. Such requests may be accepted or denied depending on their nature. Contact our DPO for removal inquiries.
2.4 - Right to Submit a Complaint: If you believe your privacy rights have been breached, you can file a complaint with your local data protection authority. We are fully committed to working with such authorities.

Opt-Out Instructions:

Targeted Advertising: You may disable targeted advertising by adjusting ad-tracking settings on your device. Doing this stops usage data from being used to tailor ads, though generic ads will still appear. Without targeted ads, you may notice a decline in the relevance of the promotions you see. This change affects both Google services and third-party sites connected to Google.

Turn Off Targeted Advertising: https://myadcenter.google.com/home

User Data Deletion: If you wish to permanently delete your profile, personal data, or document history from our servers, you can do so using our secure data deletion portal. As we use a centralized backend server, all user data across platforms (Android, iOS, Web) can be erased upon request.

Delete Your Profile: http://dashboard.docufence.com/delete-user-profile

Data Sale Declaration: We confirm that we do not sell your personal data to third parties. Hence, there’s no requirement for a data sale opt-out mechanism under applicable data protection laws.

Automated Decision-Making: Our application does not engage in automated profiling that leads to decisions producing legal or similarly significant effects on users. We comply with the Virginia Consumer Data Protection Act (VCDPA) and commit to protecting your privacy and personal autonomy.

If you have questions or need support regarding ad settings, data privacy, or your user rights, please contact us on feedback@docufence.com.

Referenced Laws:
Virginia Consumer Data Protection Act (VCDPA) – Sections 59.1-577 & 59.1-578 2021, Sp. Sess. I, cc. 35, 36; 2022, c. 423

2.6 - REGULATORY COMPLIANCE

2.6.1 - CCPA Observance: We adhere to the California Consumer Privacy Act (CCPA). Users have the right to understand how their data is handled. Since we do not sell user data, no opt-out action is required.
2.6.2 - VCDPA Compliance: For Virginia users, we comply with the Virginia Consumer Data Protection Act (VCDPA). User rights under this law are fully respected and addressed.
2.6.3 - LGPD Compliance: We follow Brazil’s General Data Protection Law (LGPD), applying lawful data usage practices, and promoting transparency. Contact feedback@docufence.com for any LGPD-specific matters.

Data Disclosure
3.1 - Sharing Protocols: Our apps may transmit data to external services and advertising networks to deliver targeted ads and improve app engagement. This includes sharing device specifics, location info, and interaction logs through designated partner endpoints. Users can manage these preferences through the app settings.
3.2 - Endpoints and Third-Party Access: We may work with advertising entities to improve your in-app experience through personalized content. Data such as behavior patterns or app usage may be relayed to these partners via endpoint links, in an anonymized and compiled manner. These collaborations follow strict security standards, and our partners are selected for their adherence to privacy principles. Check their terms through our Third-Party Services list.
3.3 - SDK Permissions: Some functionalities may require extra permissions due to integrated third-party SDKs. These permissions enable app features but do not result in personal data extraction. We only request what’s essential for functionality.

Third-Party Services
To ensure full functionality, security, analytics, payment processing, and user experience, DocuFence App integrates with multiple third-party libraries, SDKs, and services across Android, iOS, Web, and Backend platforms. Below is a list of these services along with their purposes and official documentation links.

Android Application
Google ServicesThese external services may collect personal information (e.g., device identifiers, location data, usage patterns):

Google Play Services
AdMob
Google Analytics for Firebase
Firebase Crashlytics

Libraries
Library Purpose LinkSocket.IO Real-time communication between clients and the backend. Socket.IOSpongyCastle (core, pkix, pg) Cryptographic digital signatures. Core, PKIX, PGGoogle Billing Client In-app purchases and subscriptions. Google Play BillingFirebase BOM Crash reporting, analytics, and app performance tracking. FirebaseAdMob Ads Displays contextual advertisements. AdMobiTextPDF Embeds digital signatures into PDFs. iTextPDFPdfBox PDF content manipulation. PdfBoxPageIndicatorView UI element for onboarding dots. PageIndicator

SDKs & UI Components

PDFium-based Custom PDF Viewer: AndroidPdfViewer
SimpleRatingBar: Rating Bar

Authentication Providers

Google Sign-In: GoogleSignIn
Facebook Login: Facebook SDK

iOS Application
Libraries
Library Purpose LinkKeyChainSwift Secure storage for tokens and credentials. KeyChainSwiftPDFPreviewer Native PDF rendering. PDFPreviewerScreenShield Prevents screen capture/screenshotting. ScreenShieldSocket.IO Real-time document syncing. Socket.IO SwiftSDWebImageSwiftUI Efficient image rendering for UI. SDWebImageLottie UI animations and onboarding visuals. Lottie

SDKs & Authentication

Facebook SDK: Facebook iOS SDK
Google Sign-In: Google Sign-In for iOS
Apple Sign-In: Apple Developer Docs

Web Application
PDF & Document Libraries
Library Purpose LinkReact-pdf Render PDFs in browser. React-pdfPdf-lib Modify and create PDFs in-browser. pdf-libPdfjs-dist PDF viewer engine from Mozilla. pdfjs-distJspdf PDF generation from HTML or canvas. jsPDF

Signature & UI Tools

React-signature-canvas: Signature input
React-draggable: Draggable UI

Firebase Services

Firebase: Firebase for Web
Firestore: Firestore

Payment Processing

Stripe Integration:

@stripe/react-stripe-js@stripe/stripe-js
Authentication & Session Handling

Google OAuth: @react-oauth/google
Facebook Login: react-facebook-login
JWT Decode: jwt-decode

Backend Server Services
Library Purposes LinkBoto3 Interface with AWS S3 for secure file storage. Boto3Flask Web framework for API routing. FlaskSQLAlchemy ORM for database operations. SQLAlchemyFlask-JWT-Extended JWT token management for authentication. JWT ExtendedWerkzeug WSGI server utilities. WerkzeugRequests HTTP requests to third-party services. RequestsPyJWT Token encoding/decoding. PyJWTFlask-Mail Send verification and support emails. Flask-MailFlask-RESTX API documentation and structure. Flask-RESTXPyCryptodome Encryption and cryptographic operations. PyCryptodomeFlask-CORS Manage cross-origin resource sharing for APIs. Flask-CORSSocketIO Real-time bidirectional communication. Python-SocketIO

SDKs

Firebase Cloud Messaging (FCM): FCM
Stripe: Stripe API Docs
Google Pay: Google Pay API

Privacy and Data HandlingAll third-party services are integrated with the intention of enhancing performance, user experience, and secure transactions. Each third party has its own privacy policy, and users are encouraged to review them separately. We ensure that:

Personal data is not sold to any third party.
Authentication data is secured using JWT.
Payment information is processed only through trusted PCI-compliant providers (Google Billing, Stripe).
Real-time communication is encrypted via secure socket layers.

INTERNAL DATA HANDLING PROCESSES
2.1 - FIREBASE HOSTING USAGE: Content hosted via Firebase Hosting by Google LLC transmits user data such as IP addresses and user agents. These details are used to detect abuse and analyze usage. IPs are stored temporarily, typically for several months. Visit: https://firebase.google.com/support/privacy/.
2.2 - ADS THROUGH GOOGLE ADSENSE: We use Google AdSense to display personalized ads and support app development when our apps are free. Google may store personal details including IPs for ad click tracking and fraud detection. IPs are anonymized after nine months. To learn more or opt-out, visit: https://policies.google.com/technologies/partner-sites.
2.3 - USAGE TRACKING WITH GOOGLE ANALYTICS FOR FIREBASE: We use this tool to better understand app usage and optimize user experience. It collects anonymous identifiers like ad IDs, instance IDs, and barcode types—but not barcode contents or user contact details. Data retention is 60 days for identifiers and up to 14 months for aggregated data. Usage tracking can be disabled in app settings.
2.4 - CONFIGURATION WITH FIREBASE REMOTE CONFIG: We personalize app experiences by serving different settings using Firebase Remote Config. It relies on Instance IDs, which are stored for up to 180 days.
2.5 - CRASH REPORTING THROUGH CRASHLYTICS: Crashlytics gathers error-related data including device ID and status info, stored anonymously for three years. It helps us identify and resolve software issues. See: https://try.crashlytics.com/terms/privacy-policy
2.6 - LINKED CONTENT & AFFILIATES: When scanning barcodes like EAN or UPC, our app may direct users to external websites for product details. This may transmit barcode numbers, IP addresses, and browser info. Some of these sites provide data via APIs without requiring users to click. You can disable automatic lookups in settings. We may also earn affiliate commissions without affecting product prices.
2.7 - CONTACT VIA EMAIL: You can email us at feedback@docufence.com. Any personal data shared in such emails is kept private and used solely for correspondence. It will be deleted once the issue is resolved.

Children’s Privacy Statement: Our services are not designed for children under 13. We do not knowingly collect data from minors. If such data is discovered, we will delete it immediately. Parents who suspect their child has shared information should contact us for prompt action.
Policy Revisions: We’ve recently updated this policy to reinforce your privacy. Changes may occur in response to legal or operational needs. Updates will be posted here, with major changes shared via email or app notifications. Continued use of our services indicates acceptance of the revised policy.
Policy Effective Date: June 2025
For Inquiries: If you need help or have questions about this policy or your data rights under GDPR, CCPA, VCDPA, or LGPD, contact our DPO at feedback@docufence.com.This policy reflects our compliance with all applicable privacy laws to protect your data when using any of Darwin Technology L.L.C’s Android apps. Please feel free to reach out with any further questions.

Google Sites

Report abuse

Page details

Page updated

Google Sites

Report abuse