Last updated: 16 October 2026
OJP DocPilot · provided by OJP Applications Ltd
This Privacy Policy explains what information the OJP DocPilot mobile application ("DocPilot", "we", "us" or "our" in this policy, referring to the app and its operator) may process, why it is processed and how it is handled. DocPilot is operated by OJP Applications Ltd, a company registered in England (company number 12530029). Our website is https://ojpapps.com/.
-
Who operates DocPilot
DocPilot is provided by OJP Applications Ltd. When this policy refers to "we", "us" or "our", it means OJP Applications Ltd. For any privacy-related questions about DocPilot, contact hello@ojpapps.com.
-
What information DocPilot may process
DocPilot is designed to help you photograph, scan, organise and understand documents. Depending on how you use the app, it may process:
- photographs and scanned documents you capture or import;
- PDF files you import;
- text extracted from documents through OCR (optical character recognition);
- metadata extracted from documents, such as names, addresses, reference numbers, dates, document types and expiry dates;
- AI-generated summaries of documents;
- information you enter into forms or document fields;
- your preferences and app settings;
- a randomly generated device identifier and your platform (iOS or Android), registered with our backend when you first launch the app;
- purchase and subscription information, such as the product you purchased and its renewal or expiry status.
The device identifier, platform and subscription information are processed to operate the app itself (usage limits and subscription entitlement sync), while the document-related information relates to the documents you choose to process. Documents can contain sensitive personal information, such as identification documents, financial records or medical correspondence. Please treat such documents with care, as described below.
-
Why the information is processed
DocPilot processes the information above to provide the features you use, including scanning and storing documents, extracting text, organising document information, generating summaries and helping you complete forms. The device identifier and platform are used to apply usage limits to free features and to keep your subscription entitlement in sync with this installation. It does not automatically submit forms on your behalf; you remain in control of what is submitted and where.
-
Local processing
Much of DocPilot's processing can happen on your device and information can be stored locally on your device. Photographs, scanned documents, PDFs and extracted text may be processed on-device and stored locally, and are not sent to us simply because you use the app.
-
Device identifier and platform
When you first launch DocPilot, the app registers a device identity with our backend: it sends a randomly generated device identifier (created by the app and stored in your device's secure storage) together with your platform (iOS or Android). This identifier is used to apply usage limits to free features and to keep your subscription entitlement in sync for this installation. It is not an advertising identifier, and it is not used to track you across other apps or websites.
When you delete your data in the app, the account records linked to this device identifier are removed from our backend.
-
Purchases and subscriptions (RevenueCat)
Paid features are offered as in-app subscriptions through the Apple App Store or Google Play. Purchases, renewals and restores are processed using RevenueCat, a subscription management service. RevenueCat receives the app user identifier and purchase history information (such as the product purchased, purchase date, and renewal or expiry status) and validates it with the store.
We do not receive or store your payment card details; payments are handled by Apple or Google. We store your subscription entitlement status (pro or free) so the app knows which features to unlock, and our backend uses the RevenueCat app user identifier to verify that status.
-
Cloud processing
DocPilot processes documents on your device by default. Document content leaves your device only when you use a feature that requires cloud processing, such as cloud OCR or cloud AI analysis. When you use those features:
- page images or PDFs you scan or import are sent to our backend, hosted on Render, which passes them to Google Cloud Document AI for OCR (text extraction);
- extracted text, up to a capped number of characters, is sent through our backend to our AI provider for analysis, such as generating summaries and extracting document information;
- uploaded documents and their processing records are stored using our cloud storage provider and in our PostgreSQL database so these features can work.
Documents you process with on-device features only are not uploaded. If cloud OCR is temporarily unavailable, the app can fall back to on-device text recognition, which does not send your documents anywhere. When you delete your data in the app, we delete your account records and the document files and records held by our backend, including objects in cloud storage.
-
Care with highly sensitive documents
Please exercise care when processing highly sensitive documents. Before photographing, scanning, importing or transmitting documents that contain sensitive personal or financial information, consider whether you need to, and check which features are enabled. If you use cloud OCR or cloud AI analysis, the relevant document content is sent to our backend and the providers described above, so sensitive content may leave your device. You are responsible for ensuring you have permission to process any documents you import.
-
Permissions used by the app
Depending on the platform and the features you use, DocPilot may request permissions such as:
- camera access, so you can photograph or scan documents;
- photo or file access, so you can import images and PDFs;
- permission to show notifications, if you enable them.
You can control these permissions through your device settings.
-
Third-party services
DocPilot is distributed through the Apple App Store and Google Play Store, whose terms and privacy practices apply to your purchase and store account. We also use the following service providers, which process information only as needed to provide DocPilot:
- RevenueCat — subscription and purchase management;
- Render — hosting of our backend;
- Google Cloud Document AI — OCR (text extraction) when you use cloud OCR;
- our AI provider — analysis of extracted text when you use cloud AI features;
- our cloud storage provider and a managed PostgreSQL database — storage of cloud-processed documents and records.
-
No sale, advertising or tracking
We do not sell your personal information, and we do not share it for advertising. DocPilot contains no advertising SDKs and no third-party analytics or tracking SDKs. We do not use advertising identifiers and we do not track you across other apps or websites. The device identifier described above is used only for usage limits and subscription entitlement sync.
-
Retention
We keep different types of information for different periods:
- On-device data (documents, extracted text, profile fields and settings) remains on your device until you delete it or delete the app.
- Device identifier, session and usage records are kept while you use the app, so we can apply usage limits and keep your subscription entitlement in sync. Session refresh tokens expire after 90 days of inactivity, and all of this information is deleted when you delete your data in the app.
- Cloud-processed documents and extracted text are kept on our backend for as long as needed to provide the cloud features, and are deleted when you delete your data in the app. Temporary OCR working copies are deleted from our backend as soon as each processing attempt finishes, whether it succeeds or fails.
- Purchase history is retained by RevenueCat, Apple and Google under their own policies. We keep only your current subscription status, and delete it when you delete your data.
-
Security
We take reasonable measures to help protect information processed through DocPilot from misuse, loss and unauthorised access. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. You can help protect your documents by keeping your device secure and using its built-in security features.
-
Your rights
Depending on where you live, you may have rights in relation to personal information, including the right to access, correct or delete information, to object to or restrict certain processing, and to withdraw consent where consent is the basis for processing. To exercise any of these rights, contact hello@ojpapps.com.
-
Deletion
You can delete documents and information stored by DocPilot at any time through the app, by clearing the app's data on your device, or by deleting the app. Choosing "Delete my data" in the app also asks our backend to delete your account records, usage records and any cloud-processed documents and stored files, and removes your session from the device. You may also ask us to delete personal information we hold about you by contacting hello@ojpapps.com.
-
Children's privacy
DocPilot is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through DocPilot, contact us at hello@ojpapps.com and we will take steps to address it.
-
International processing
Our backend, databases and service providers may store and process information in countries other than your own, including the United States. This means that when you use cloud processing, document content and related records may be transmitted to and processed in those countries by the providers listed above. We take reasonable steps to protect information when it is processed by our service providers.
-
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last changed. Continued use of DocPilot after changes are made means you accept the updated policy, where permitted by law.
-
Contact information
If you have questions about this Privacy Policy or how DocPilot handles information, contact:
- hello@ojpapps.com
- OJP Applications Ltd, ojpapps.com