AI Document Studio Data Safety Form

How To Use This Draft

This is a Play Console data-safety working form for AI Document Studio, package name com.kemlow.aidocumentstudio. It reflects the current build's behavior and should be reviewed before final Play Console submission.

What is active in this build Document reading, scanning (CameraX), OCR, and PDF tools (merge / split / extract / rotate / compress) run on-device; document files and scans are not uploaded. Google Analytics for Firebase is integrated (app-usage analytics), and Google AdMob is integrated to show ads in the free tier (the Pro upgrade removes all ads). AI chat defaults to on-device mode; cloud AI / cloud OCR are opt-in and require explicit, persisted consent before any document text or page images are sent off-device. Google Play Billing is integrated — Pro is sold as auto-renewing subscriptions (pro_monthly, pro_yearly) and a one-time lifetime purchase (pro_lifetime), processed by Google Play. Accounts, cloud backup, and sync remain placeholders (not active).

Declarations for this build (1) Because Google AdMob is present, declare Device or other IDs (Advertising ID), App activity, and Location → Approximate as Collected and Shared for the Advertising or marketing purpose, and integrate the UMP consent flow for EEA/UK. (2) Because Cloud AI / Cloud OCR ship as opt-in features, declare Files and docs as Collected & Shared (optional) with purpose "App functionality" — document text/images are sent to the AI provider only after the user consents. (3) Because Google Play Billing is wired, declare Financial info → Purchase history. (4) When accounts / cloud backup go live, declare the relevant Personal info and Files and docs. (5) If you later add a crash-reporting SDK, declare App info and performance → Crash logs / Diagnostics (none is active today).

Current Release Position

Does your app collect or share any of the required user data types? Yes — via Google Analytics for Firebase (analytics), Google AdMob (ads in the free tier), and Google Play Billing (purchase history). Documents are processed on-device by default; document text/images are collected only when you opt into cloud AI/OCR. Nothing is sold; ad-related data is shared with Google for advertising and, after consent, document text is shared with the cloud AI/OCR provider — as described below. Data types collected App activity — App interactions (screens/features opened) via Analytics and AdMob; Device or other IDs — a Firebase installation/analytics identifier and, for ads, an Advertising ID; Location — Approximate location (coarse, IP-based, derived by Firebase Analytics / AdMob; the app requests no location permission and no GPS). Purposes: Analytics and Advertising or marketing. Files and docs Collected (optional) — off by default. Documents are processed on-device for reading, PDF tools, and on-device OCR. Only when you enable Cloud AI or Cloud OCR (opt-in, with explicit persisted consent) is the relevant document text or page image sent to the AI provider to fulfil that request. Your original files are never uploaded; nothing is sent without consent. Financial info Collected — Purchase history only, via Google Play Billing (Pro subscriptions / lifetime). Card and bank details are handled by Google Play and never seen or stored by the app. Shared with third parties Yes — (a) for advertising: Google AdMob receives an Advertising ID, app-interaction data, and approximate (IP-based) location to serve ads in the free tier; and (b) only after consent, document text/images are shared with the cloud AI/OCR provider to fulfil that request. Google Analytics for Firebase acts as a service provider (collection, not sharing). No data is sold, and document contents are never shared with advertisers. The Pro upgrade removes ads. Data deletion answer Yes. Local data clears on uninstall or by clearing app storage; users can request deletion of associated data via teraflopspeedapps@gmail.com. Policy / deletion URL: https://www.thekemlowcapital.com/aidocumntstudio-policy.html Data encrypted in transit Yes. Analytics traffic (and any opt-in cloud AI/OCR traffic) is encrypted in transit (HTTPS/TLS).

Data Type Review — Current Build

Google Play Category	Current Answer	AI Document Studio Notes
Location	Collected	Approximate location — the app requests no location permission and no GPS, but Google Analytics for Firebase and Google AdMob derive coarse (city-level) location from the device IP address. No precise location is collected. Shared with AdMob for advertising.
Personal info	Not collected	No account is required; the app does not collect name, email, phone, or address. (Re-declare if accounts / cloud sign-in are enabled later.)
Financial info	Collected	Purchase history — Google Play Billing is wired for the Pro upgrade (subscriptions `pro_monthly` / `pro_yearly` and one-time `pro_lifetime`). Google Play provides purchase status so the app can unlock Pro; card and bank details are handled entirely by Google Play and never seen or stored by the app.
Health and fitness	Not collected	No health or fitness features.
Messages	Not collected	The AI chat sends your prompt only when you use a cloud AI mode (opt-in). It is not messaging with other users and no email/SMS is accessed.
Photos and videos	Not collected	The scanner captures pages with the camera and keeps them on-device; the app does not access the photo gallery and does not upload images.
Audio files	Not collected	The app does not record or upload audio.
Files and docs	Collected (optional)	Off by default. User PDFs are opened via the document picker and processed on-device (reader, PDF tools, on-device OCR); outputs are stored in app-private storage and original files are never uploaded. Because Cloud AI / Cloud OCR ship as opt-in features, document text/page images are sent to the AI provider only after explicit, persisted consent — so this is declared Collected & Shared (optional) for App functionality.
Calendar	Not collected	No calendar access.
Contacts	Not collected	No contacts access.
App activity	Collected	App interactions — app-usage events (screens/features opened) collected by Google Analytics for Firebase (Analytics) and Google AdMob (Advertising). Shared with AdMob for advertising in the free tier. Reading position, favourites, and document metadata otherwise stay on the device.
Web browsing	Not collected	The app is not a browser and does not collect web history.
App info and performance	Not collected	No crash-reporting/diagnostics SDK is active in the current build (crash reporting is a no-op). Declare Crash logs / Diagnostics if you add Crashlytics later.
Device or other IDs	Collected & Shared	A Firebase analytics/installation identifier used by Google Analytics for Firebase, and an Advertising ID used by Google AdMob to serve ads in the free tier. The Advertising ID is shared with Google for advertising. You can reset/limit it in Android settings, and Pro removes ads.

Permissions Declaration Notes

Permission	Purpose	Disclosure Wording
`android.permission.CAMERA`	Capture document pages in the scanner.	AI Document Studio uses the camera only to scan document pages. Images stay on your device and are assembled into a PDF locally.
`android.permission.INTERNET`	Google AdMob (free-tier ads); Google Analytics for Firebase; optional cloud AI / cloud OCR when enabled.	Used to serve ads (free tier), app analytics, and — only when you turn it on — optional cloud AI or cloud OCR. Reading, scanning, and PDF tools work offline.
`android.permission.POST_NOTIFICATIONS`	Optional on-device notifications (e.g., task/export completion).	AI Document Studio shows optional local notifications generated on the device; no data leaves the device, and notifications can be turned off.

Document access is granted per file via Android's Storage Access Framework (the app takes a persistable read permission for files you pick); no broad storage permission is requested.

SDKs & Data Flows — Current Build

Google Analytics for Firebase — app-usage analytics (App interactions, a Firebase analytics/installation identifier, coarse IP-based location) for the Analytics purpose. Not sold; not used to identify you.
Android PdfRenderer / PdfDocument — on-device PDF rendering and tool output. No network.
CameraX — on-device page capture for scanning. No network.
On-device OCR & AI — default modes process on the device. No document data leaves the device unless you choose a cloud mode.
Google AdMob — serves ads in the free tier; processes an Advertising ID, app-interaction data, and approximate (IP-based) location, shared with Google for advertising. Ads are non-intrusive and never shown over your document, the scanner, or privacy screens. Optional rewarded ads are user-initiated (e.g. one free document Convert per day). Pro removes all ads. Integrate the UMP consent flow for EEA/UK.
Google Play Billing — processes the Pro upgrade (subscriptions pro_monthly / pro_yearly, one-time pro_lifetime). Only purchase history / entitlement status reaches the app; payment details are handled by Google Play.
Cloud AI / Cloud OCR (opt-in) — when enabled with explicit, persisted consent, the relevant document text (AI) or page image (OCR) is sent over TLS to the AI provider to fulfil that request; used only for your answer, never for advertising. On-device modes are the default.
Deletion — clear app storage or uninstall; reset/limit your Advertising ID in Android settings; request deletion of associated data via teraflopspeedapps@gmail.com.

Submission Checklist

Declared collected types: App activity → App interactions, Device or other IDs (Firebase ID + Advertising ID), Location → Approximate location — via Google Analytics for Firebase (Analytics) and Google AdMob (Advertising or marketing).
Mark Shared with third parties = Yes for the Advertising or marketing purpose (Google AdMob receives Advertising ID, app-interaction data, and approximate location). Google Analytics is collection via a service provider; nothing is sold.
Integrate the UMP / consent flow (EEA/UK) before serving personalised ads; offer non-personalised ads on refusal.
Declare Files and docs = Collected & Shared (optional) for App functionality — off by default, sent to the cloud AI/OCR provider only after explicit consent.
Declare Financial info → Purchase history — Google Play Billing is wired (Pro subscriptions + lifetime); card/bank details never reach the app.
Confirm Encrypted in transit = Yes and Data deletion available = Yes with the policy URL.
Privacy policy URL: https://www.thekemlowcapital.com/aidocumntstudio-policy.html; Terms URL: https://www.thekemlowcapital.com/aidocumntstudio-terms.html.
Confirm the Play Console contact / support email is active: teraflopspeedapps@gmail.com (replace if you use a different address).
Before accounts / cloud backup go live: add the relevant Personal info / Files and docs. No crash-reporting SDK is active, so App info and performance stays Not collected.

Current Play Console position Collects: App activity (App interactions), Device or other IDs (Firebase ID + Advertising ID), Location (approximate), Financial info (Purchase history), and Files and docs (optional — cloud AI/OCR only, after consent). Sources: Google Analytics for Firebase (Analytics), Google AdMob (Advertising), Google Play Billing (purchases), and the opt-in cloud AI/OCR provider. Shared with third parties = Yes for advertising and, after consent, cloud AI/OCR. Documents are on-device by default; nothing sold; encrypted in transit; deletion available; Pro removes ads. Update this form when accounts / cloud backup or a crash SDK go live.