Privacy policy
Evidence Manager · Effective 22 August 2026
Evidence Manager is a document scanner for audit and accounting work, built by an independent developer. Here is what it does with your data, in plain terms.
The short version
• Your scans stay on your phone unless you send them to your own Dropbox
• I never see your documents
• No account, no sign-up, no server of mine anywhere
• One optional feature, AI search, sends small pieces of text to an AI company you pick. It stays off until you turn it on and add your own key.
What the app stores
• Scanned images are saved in the app's private storage on your device
• Android keeps this folder off limits to other apps
• Document names, pages and folders live in a small database in the same private area
• Nothing is uploaded anywhere by default
Camera
• Camera permission is needed because the app is a scanner
• Photos are processed on the device itself
• Page edges are detected by an on-device model in the app, or by Google's document scanner (part of Google Play services, also on-device)
• The camera is only used while you are on the scanning screen
Searching inside your pages
• Off unless you switch it on in Settings, under "Search inside pages"
• When it is on, the app reads the printed text on your scans, so you can find a document by something written on it instead of only by its name
• The reading happens on your phone, using Google's on-device text recognition in Google Play services
• The text it finds is kept in the same private database as everything else
• No image and no text leaves your phone for this — it works with no internet connection at all
• Switch it off and the app stops reading anything new
AI search
• Off by default, and it does nothing until you add your own API key in Settings
• Without it, search still works — the app matches your file names, and the text on your pages if you turned that on, all on your phone
• Once it is on, asking a question sends three things to the AI company you picked: the question you typed, the names of the documents that matched, and short excerpts of their recognised text (about 160 characters each)
• It never sends your scanned images, your full documents, or anything from your Dropbox
• The searching itself still happens on your phone. The AI company only reads your question and helps put the results in a sensible order
• You choose the company and you supply the key. The app ships with no key of its own, I have no account with any of them, and I get nothing from them
• The ones you can pick from are Groq, Cerebras, Mistral, Google Gemini and OpenRouter. What they do with what you send is covered by their own terms:
Groq: groq.com/privacy-policy
Cerebras: cerebras.ai/privacy-policy
Mistral: mistral.ai/terms
Google Gemini API: ai.google.dev/gemini-api/terms
OpenRouter: openrouter.ai/privacy
• Some of them are allowed to use what you send to train their models, on their free plans. The app marks those "May train on your data" next to the name. If your scans have client information in them, think hard about whether to use this feature at all — and if you do, pick one that does not train on what it receives
• Your API key is stored only on your device, and is only ever sent to the company it belongs to
• Turn AI search off, or delete the key, and all of this stops
Dropbox
• Connecting Dropbox is optional
• You sign in on Dropbox's own website and approve access yourself
• The app uploads only the documents you choose, to your own Dropbox account
• The sign-in token stays on your device — I have no access to your Dropbox
• Dropbox's handling of your account: www.dropbox.com/privacy
• Disconnect any time in Settings, or revoke the app from your Dropbox account settings
Ads
• The app shows ads through Google AdMob, which pays for development
• AdMob may collect device identifiers (advertising ID), rough location from IP address, and app usage signals to serve and measure ads
• I do not receive any of this data myself
• Details: policies.google.com/privacy and policies.google.com/technologies/partner-sites
• You can reset or delete your advertising ID in your phone's Google settings
What I collect
• Nothing — no analytics, no crash reporting, no accounts
• Your documents, the text read off them, your questions and your API keys never reach me
• The only things that leave your phone go to services you connected yourself: your own Dropbox, and an AI company you picked and gave a key to
• If the app crashes, I only find out if you email me
Notifications
• Notification permission is used to show upload progress while sending files to Dropbox
• That is the only notification the app sends
Deleting your data
• Delete documents in the app and the files are gone from the device immediately, along with any text the app had read from them
• Uninstalling removes everything the app stored, your API keys included
• Files already uploaded to Dropbox stay in your Dropbox — they are yours, delete them there like any other file
Children
• This is a work tool, not aimed at children
• I do not knowingly collect anything from anyone, children included
Changes
• If data handling ever changes in a future version, this page and its date will be updated before that version ships
Contact
• Questions: kohotechnology@gmail.com