Doki Privacy Policy

Last updated: October 16, 2026 · Version 1.2

1. Who we are

Doki is an application developed by IANGINE ("IANGINE", "we", "us"). Contact: support@iangine.com.

2. Summary

Doki stores your documents and passwords only on your phone. We do not have servers that receive your documents, passwords, or data. We do not collect, transmit, sell, or share personal information, except for the two voluntary actions you choose to take: encrypted files or documents you choose to share and emails you decide to send us directly.

This version allows you to store up to 10 documents and 10 passwords (a future VIP plan may expand this limit). The application is intended exclusively for individuals aged 18 and older.

3. What information the app handles

The app stores on your device, in encrypted form (AES-256): the files you add (photos, scans, images, and PDFs), the data you enter about them (name, number, category, holder, expiration dates, and reminders), your settings, and your name.

It also stores, in encrypted form, any passwords you choose to save (name, username, website, notes, and the password itself), organized by holder. These passwords never leave your phone unless you choose to include them in a backup or in a shared file.

Likewise, it handles locally any encrypted backups (files with the .doki extension) you choose to create, as well as security preferences, including screen capture protection. This information does not leave your phone unless you explicitly choose to share or export it (see section 6).

4. Security

Files and the database are encrypted on your device using AES-256. The encryption key is stored in the system secure storage (Keychain on iOS, Keystore on Android). Your PIN is never stored in plain text. You can optionally protect access with biometrics (fingerprint or facial recognition), which is handled exclusively by the operating system; the app never receives or accesses your fingerprint or face data.

Each saved password is additionally encrypted separately with its own key (AES-256-GCM) stored in your phone's secure hardware storage (Keychain or Keystore). To view or copy a password, your fingerprint, face, or PIN is required. When copied, the clipboard is automatically cleared after 30 seconds. Doki cannot recover your passwords if you lose your phone and do not have a backup.

Screen capture protection: enabled by default. While active, Android prevents screenshots and screen recordings within the app. You can toggle this protection on or off at any time under Profile → Security.

Backup password: if you create a local .doki backup, it is encrypted with a password of your choice (minimum 8 characters). IANGINE cannot recover this password nor decrypt the backup contents; without it, restoring is impossible.

5. Permissions the app requests

Doki requests only the permissions strictly necessary for its local functions:

• Camera: to photograph or scan your documents. On Android, document scanning utilizes the Google ML Kit Document Scanner third-party component (by Google); all processing occurs locally on your device without sending images to IANGINE. On iOS, the system scanner is used.
• Access to photos and files: to select only the documents or images you choose via the system file picker.
• Notifications: to schedule local expiration reminders on your device. Notification text does not include the document name or sensitive details.
• Biometrics: to unlock the app using the operating system, if you choose to enable it.
• Phone reboot: to automatically reschedule your local expiration reminders after restarting the device.

On Android, the app does not request internet access permission. You can revoke any of these permissions at any time in your phone's settings.

6. When information leaves your phone

Information only leaves your phone when you explicitly choose to perform one of the following actions:

• Sharing an original document: you can send the original (unencrypted) file to another app of your choice via the system share sheet. The app displays a warning before proceeding; from that point on, the file is governed by the recipient app's policies.
• Backup: you can create an encrypted backup of your documents and, if you choose, of your saved passwords (via the "Include my saved passwords" toggle, enabled by default). It is protected with a password of your choice (minimum 8 characters); if you forget it, nobody can open it, neither Doki nor IANGINE. Store it wherever you prefer. A backup created without passwords will not touch or erase passwords already on your phone when restored. Outside the app, the file remains under your sole control and custody.
• Sharing a holder's data: you can generate an encrypted file (.doki) containing the documents of a single holder (including version history) and, if you enable it, their passwords, to give to another person. Doki generates a random 7-word password for that file; the file leaves your phone via the medium you choose (WhatsApp, email, etc.). Anyone who receives the file and its password will be able to view and forward its contents: share it only with trusted individuals and send the password through a separate channel.
• Opening external links or the survey: tapping external links (such as support, policies, or the VIP plan survey) launches your default web browser. The app does not send any document or device data when opening the browser.

In all cases, the decision and destination are entirely yours.

7. Rating, sharing, and voluntary survey

Rating and sharing: "Rate Doki" launches the Google Play in-app review sheet; the rating and review are managed by Google under its own policy (Doki may ask "How's Doki going?" after you save documents, at most once every 90 days, without receiving your rating or personal data). "Share Doki" opens your device's share sheet with a standard message and public store link, without including any personal data. "Send feedback" opens your email app with a pre-addressed message to support@iangine.com that includes only your Doki version and platform; if you send it, IANGINE will receive your email address and any text you write, and will use it solely to respond to you and improve the app.

The guided walkthrough and the "How Doki protects your data" informational screen do not process any personal data.

VIP plan survey: Doki may invite you to complete a voluntary survey regarding a potential VIP plan. Tapping "Answer the survey" opens the external platform site (sigmasurvs.com) in your browser. The app does not transmit your documents or profile data; the web request is handled directly by your browser. Responses are anonymous and are analyzed by IANGINE solely to evaluate potential future service features.

Please note that external web platforms like SigmaSurvs may log standard technical web traffic data (such as IP addresses or technical cookies) under their own privacy policies. We recommend reviewing their policies when visiting.

Today there are no purchases or pricing in the app. If a VIP plan or paid features are introduced in the future, this privacy policy will be updated and you will be notified before any payment is collected.

8. What Doki does not do

There are no user accounts on IANGINE servers, no analytics, no advertising, no trackers, and no sale or sharing of personal data with third parties. On Android, the app does not request internet access permission, technically preventing any external transmission of your information.

9. Retention and deletion

Your data remains on your phone until you decide to delete it. When deleting a password or a holder, they are also removed from your phone. Selecting Profile → Delete all data removes your documents, passwords, files, database, and cryptographic keys from the phone, and cancels scheduled notifications. Uninstalling the app also deletes all this data from your device.

Any backup files or shared files you have already created remain wherever you saved or sent them: you must delete them yourself. Any .doki files you saved or shared outside the app are NOT deleted when erasing data or uninstalling Doki, as they reside outside the app's storage and remain under your own management.

If you uninstall the app or delete your data without an exported .doki backup (or if you forget your backup password or shared file password), the information cannot be recovered.

10. Children

Doki is directed only to individuals aged 18 and older and not to minors. The application does not knowingly collect data from minors nor is it intended for them. If you are under 18 years of age, you must not use the application.

11. Your rights

Because we do not have your data and everything is stored locally, you maintain complete control on your device to view, edit, export, or delete your information at any time. For questions regarding this policy, you can contact us at support@iangine.com.

12. Changes to this policy

Any modification to this policy will be published directly on this page (https://www.iangine.com/doki/privacy.html), updating the "Last updated" date and version number. If the changes alter how your data is handled or introduce paid plans, we will publish them here and announce them on the app's store listing before they take effect. We recommend reviewing this page from time to time.

13. Governing law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Honduras. Any disputes arising in connection with the application shall be subject to the jurisdiction of the competent courts of Honduras.