Privacy Policy for PocketPages
Effective date: August 16, 2026
Last updated: August 16, 2026
Document version: 3
PocketPages (the “App”) helps users turn photographs or scans of printed pages into readable digital text. This Privacy Policy explains what personal data PocketPages collects, why it is processed, who receives it, how long it is retained, and what rights users have.
1. Data controller
PocketPages is operated by Bartłomiej Czerwiński, an individual based in Poland (referred to as “PocketPages,” “we,” “us,” or “our”).
For privacy questions or requests, contact:
Email: pocketpages@hotmail.com
2. Scope
This Privacy Policy applies to the PocketPages Android application and to PocketPages web pages that link to this Policy. It does not apply to third-party websites, applications, or services that have their own privacy policies.
3. Personal data we collect
3.1 Account and authentication data
PocketPages uses Google Sign-In and Firebase Authentication. When you create or use an account, we may receive and process:
- your name or Google display name;
- your email address;
- your Google/Firebase user identifier;
- your profile image, if it is made available through your Google account; and
- authentication-related technical data, such as IP address and user-agent information, used by Firebase to authenticate users and prevent abuse.
PocketPages does not receive your Google password.
3.2 Page images and document content
When you use the App, we process:
- photographs or scans of pages captured with the camera or selected by you;
- text extracted from those images;
- document titles and language information;
- document status and creation or modification timestamps; and
- other content that you intentionally add to a document.
Page images may contain personal data if such information appears on a page you upload. Please do not upload sensitive personal data or content that you are not authorized to process.
PocketPages uses page images only to perform text extraction. The images are not kept as part of your permanent PocketPages library. Temporary copies are deleted from PocketPages storage after processing is completed, fails, or the processing job expires. Extracted text and document metadata remain in your library until you delete the relevant document or your account.
3.3 Subscription and purchase data
Subscriptions are purchased through Google Play and managed with RevenueCat. We may process:
- the product or subscription purchased;
- purchase and renewal status;
- subscription start and expiry dates;
- purchase tokens and transaction identifiers;
- entitlement information;
- the PocketPages user identifier connected with the subscription; and
- limited device, app, and technical information required to validate purchases and prevent fraud.
PocketPages does not receive or store your full payment card number. Payments are processed by Google Play under Google’s own terms and privacy policy.
3.4 Communications
If you contact us, we process your email address, the content of your message, and any information you choose to provide so that we can respond and resolve your request.
4. Why we process personal data and our legal bases
For users in the European Economic Area, the United Kingdom, or other locations where a legal basis is required, we rely on the following grounds:
| Purpose | Categories of data | Legal basis |
|---|---|---|
| Create and secure your account | Account and authentication data | Performance of a contract; our legitimate interest in preventing abuse and protecting the App |
| Capture pages, extract text, and maintain your document library | Page images, extracted text, and document metadata | Performance of a contract and steps taken at your request |
| Provide paid features and manage subscriptions | Account identifiers and subscription data | Performance of a contract; compliance with legal obligations; fraud prevention |
| Respond to support and privacy requests | Contact and request information | Performance of a contract, compliance with legal obligations, and our legitimate interest in providing support |
| Protect PocketPages, users, and service providers | Account, technical, security, and transaction data | Our legitimate interests in security, fraud prevention, and establishing or defending legal claims |
Where processing is based on legitimate interests, you may object to that processing in the circumstances provided by applicable law.
5. AI-assisted text extraction
PocketPages sends page images and the instructions necessary to extract text to the OpenAI API. OpenAI processes this content on our behalf to return the extracted text. PocketPages does not use OpenAI’s consumer ChatGPT service for this process.
OpenAI states that data submitted through its API is not used to train its models by default. Under OpenAI’s standard API data controls, inputs and outputs may be retained in abuse-monitoring logs for up to 30 days, unless a longer period is required by law or reasonably necessary to protect the service or third parties.
The extracted text returned by OpenAI is stored by PocketPages in your document library until you delete the document or your account.
More information is available in OpenAI’s API data controls and OpenAI’s business data privacy information.
6. Service providers and recipients
We disclose data only as necessary to operate PocketPages, comply with law, or protect users and the App. The principal recipients are:
| Provider | Purpose | Data involved |
|---|---|---|
| Google LLC — Firebase | Authentication, database, cloud functions, temporary file storage, hosting, and security | Account data, document data, temporary page images, authentication-related technical data, and IP addresses |
| OpenAI, L.L.C. | AI-assisted extraction of text from page images | Uploaded page images, processing instructions, extracted text, and related technical metadata |
| RevenueCat, Inc. | Subscription status, purchase validation, entitlements, analytics relating to subscriptions, and fraud prevention | App user identifier, purchase history, entitlement data, purchase tokens, and limited technical data |
| Google Play | Subscription checkout, payment processing, purchase records, and subscription management | Payment and purchase data handled by Google, plus information required to confirm the purchase to PocketPages and RevenueCat |
These providers process data according to their agreements with us and their applicable privacy terms. Additional information is available from Firebase, Google, RevenueCat, and OpenAI.
We may also disclose information when reasonably necessary to comply with law, respond to lawful requests, protect the rights and safety of users or others, investigate fraud or security incidents, or establish or defend legal claims.
PocketPages does not sell personal data. PocketPages does not share personal data for cross-context behavioral advertising and does not display third-party advertising.
7. International data transfers
PocketPages is operated from Poland, but some service providers process data in the United States or other countries outside the European Economic Area. In particular, Firebase Authentication is operated from United States data centers, and OpenAI and RevenueCat may process data in the United States.
Where the GDPR applies and data is transferred outside the EEA, we rely on appropriate safeguards provided by our service providers, which may include an applicable adequacy decision, the EU-U.S. Data Privacy Framework, and/or the European Commission’s Standard Contractual Clauses.
You may contact us to request more information about the safeguards applicable to your data.
8. Data retention
We retain personal data only for as long as needed for the purposes described in this Policy:
| Data | Retention |
|---|---|
| Account and profile data | Until you delete your account, subject to short periods needed to complete deletion from active systems and backups. Firebase states that authentication data is removed from live and backup systems within up to 180 days after the developer initiates deletion. |
| Page images | Only for the time necessary to complete the text-extraction job. PocketPages deletes temporary copies after processing completes, fails, or expires. OpenAI API abuse-monitoring logs may contain submitted content for up to 30 days under standard retention. |
| Extracted text and document metadata | Until you delete the document or your PocketPages account. |
| Subscription and transaction data | For as long as needed to provide entitlements, manage subscriptions, prevent fraud, resolve disputes, and meet accounting, tax, or other legal obligations. Some purchase records are also independently retained by Google Play and RevenueCat under their policies. |
| Support correspondence | For as long as needed to resolve the request and, where appropriate, establish a record of the resolution or comply with legal obligations. |
| Security and operational logs | For a limited period determined by security, fraud-prevention, troubleshooting, and legal needs, after which they are deleted or de-identified. |
We may retain limited information for longer where required by law, necessary to resolve disputes or enforce agreements, or needed to protect PocketPages and its users. Where possible, retained data will be restricted or de-identified.
9. Account and data deletion
You may delete individual documents from within the App.
You may request deletion of your PocketPages account and associated data in either of these ways:
- Open PocketPages and use the Delete account option in the App settings; or
- Email pocketpages@hotmail.com from the address associated with your account, using the subject “Delete my PocketPages account.”
Deleting the App from your device does not by itself delete your account.
Deleting your account deletes or de-identifies your PocketPages profile, stored documents, extracted text, usage quota, and other data linked only to your account. Limited transaction, security, or request records may be retained where required by law or necessary for fraud prevention, dispute resolution, or legal claims. Purchase history may also remain with Google Play and RevenueCat according to their independent retention obligations. Deleting a PocketPages account does not automatically cancel an active Google Play subscription; subscriptions can be cancelled in Google Play.
We may ask you to verify that you control the email address or account before completing a deletion request. We will respond without undue delay and within the period required by applicable law.
For a dedicated account-deletion pathway, see the Delete Account page.
10. Your privacy rights
Depending on your location, you may have the right to:
- obtain information about how your personal data is processed;
- request access to and a copy of your personal data;
- correct inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- receive data you provided in a structured, commonly used, machine-readable format and request its transfer where applicable;
- object to processing based on legitimate interests;
- lodge a complaint with a competent data-protection authority.
To exercise a right, email pocketpages@hotmail.com. We may request information reasonably necessary to verify your identity. We normally respond within one month where the GDPR applies, subject to lawful extensions or exceptions.
11. Automated processing
PocketPages uses automated AI processing to extract text from page images. This processing does not make decisions that produce legal or similarly significant effects concerning you, and PocketPages does not use your content for profiling or advertising.
12. Security
We use reasonable technical and organizational measures intended to protect personal data, including encrypted connections, authentication, access controls, provider security controls, and limiting access to data to what is necessary to operate the App. Firebase services used by PocketPages encrypt data in transit, and relevant Firebase services also encrypt data at rest.
No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.
13. Children
PocketPages is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal data from children below the applicable minimum age. If you believe that a child has provided personal data to PocketPages in violation of this section, contact us so that we can investigate and delete it where appropriate.
14. Changes to this Privacy Policy
We may update this Privacy Policy when PocketPages, our providers, or applicable legal requirements change. We will publish the updated Policy and revise the “Last updated” date. If a change materially affects how we use personal data, we will provide additional notice or request consent where required by law.
15. Contact
For questions, complaints, or requests concerning privacy or this Policy, contact:
Bartłomiej Czerwiński
Email: pocketpages@hotmail.com