Privacy Policy for Giấy Tờ AI

Giấy Tờ AI reads Japanese papers you photograph or share with it and explains them in Vietnamese. To do that, the text of a paper, and by default a photo of it, is sent to our server and to an AI model. This page says exactly what is sent, what is kept and what is not.

What we collect

There is no account and no sign-up. The app sends to our server only what is needed to answer you, described below, and anonymous usage statistics through Google Analytics for Firebase. We do not keep your papers.

Reading a paper

• When you photograph or share a paper, its text is first read on your device by Google's ML Kit, with a model built into the app. Numbers that identify you (My Number, card, insurance and bank account numbers) are starred out of the text before anything leaves the device.
• When you ask the app to explain a paper, it sends that text to our server. By default it also sends a reduced photo of the page, with the same identifying numbers covered, because the layout helps the explanation. You can choose in Settings to be asked every time or to never send photos.
• When you chat with the assistant about a paper, your messages (up to 2,000 characters each) are sent the same way. When you ask for help filling in a form, the app sends the names of the fields it needs; a value from your profile (such as your name or address) is sent only after you agree to it for that form.
• Our server passes the request to an AI model to produce the answer: currently Anthropic's Claude, through Cloudflare's AI Gateway. The provider processes it to answer and, under its terms for business customers, does not use it to train its models. If we change provider, this list is updated before the change.
• Our server does not store the text, the photos, your messages or the answers. An answer is held in memory for up to 10 minutes so that a repeated request does not cost twice, and then it is gone.

What our server keeps

• A random identifier for this installation, created by the app, and a one-way hash of the device's Android ID, used with Google Play Integrity to check that requests come from a genuine copy of the app. The raw Android ID never leaves the device.
• The app version, time zone and language, and counts of what was used (for example how many papers were read) with technical labels, kept for 90 days, to run the service and prevent abuse.
• Your purchases: the product, the Google Play order number and a one-way hash of the purchase token, so your points and plan work.
• If you send an error report, its contents are kept for 90 days only if you agree when sending it.
• Our hosting provider, Cloudflare, records technical details of requests (such as time, address and error codes) in its operating logs for a short period.

Your papers stay on your device

• Your papers, their photos, the explanations, your conversations, your profile, your reminders and the garbage-day calendar are stored on your device, in the app's private storage, which other apps cannot read. Conversations, profile, reminders and the calendar are encrypted with a key held in Android's keystore. You can lock the profile with your fingerprint or face; the app never sees them.
• This data is excluded from Android backup and device-to-device transfer, and the app's screens cannot be captured in screenshots or recent-apps previews.
• You can delete any paper in the app. You can also ask our server to delete what it keeps about this installation from the app's Settings, or by writing to the contact address above.

Usage statistics

• What is sent: which screens you open and for how long, which features you use and whether they worked (for example "opened from another app", "cancelled", or an error code), the settings you choose, and general information about the device and the app (model, Android version, language, app version, and the country and region derived from the network address). It is tied to a random identifier that Firebase creates for this installation, not to your name, email or phone number. If the app shows ads, Firebase may also read the device's advertising ID, which you can reset or delete in Android Settings, under Privacy, Ads.
• What is never sent: your papers, their photos or text, what you ask the assistant, or anything in your profile. Where an amount or a size matters, only a range is sent (for example "1-3 pages"), never the exact content.
• Google processes this data for us, under the Firebase privacy and security terms and Google's privacy policy. We use it only to understand and improve Giấy Tờ AI; we do not sell it and do not share it with anyone else. It is sent over an encrypted connection and kept for at most 14 months.
• You can turn it off at any time in the app's Settings ("Share anonymous usage data"); from then on nothing more is sent.

Permissions

• Camera, to photograph a paper. You can share a picture or a PDF from another app instead.
• Notifications, for the deadline reminders and garbage-day alerts you set. Run at startup lets them keep their schedule after the phone restarts.
• Internet access, to get explanations and to request ads. Advertising ID and related Android ad permissions are declared by the ads SDK.

Advertising

The free version shows native ads in the document list, at the bottom of a result and on the garbage-day calendar, and a rewarded video only when you tap to watch one for points. There are no ads in your first two days or on a paid plan, and ads are limited to content suitable for a general audience. Nothing from your papers is given to the ads SDK.

Ads are served by Google's Mobile Ads SDK (AdMob). To show and measure ads it may collect your device's advertising ID, general information about the device and the app, an approximate location derived from your IP address, and whether an ad was shown or tapped. Google describes this in its privacy policy and in how Google uses information from apps that use its services. You can reset or delete your advertising ID at any time in Android Settings, under Privacy, Ads.

Where the law requires it, for example in the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent with Google's consent form before any ad is requested. In US states with their own privacy laws, the same form lets you opt out of the sale or sharing of your personal information for ads, and of targeted advertising. You can change your choice at any time from the ad privacy choices in Settings.

Purchases

Points and plans are bought through Google Play. Google handles the payment; we never see your card or payment details.

Retention and deletion

Uninstalling the app removes everything stored on your device. On our server, usage counts and consented error reports are deleted after 90 days and purchase records are kept as long as they are needed for your purchases; everything kept about an installation is deleted when you ask. Usage statistics are deleted after at most 14 months.

Children

Giấy Tờ AI is meant for adults dealing with official papers and is not directed at children under 13.

Changes

If a future version collects or shares anything more, or sends your papers to a different AI provider, this policy will be updated before that happens, together with the app's Data safety section on Google Play.