Privacy Policy
PolicyDesk operates on a 100% Local-First principle. We do not maintain any central database, tracking analytics, or user accounts on our servers. Your insurance policies and customer documents belong exclusively to you.
1. Information Collection and Storage
PolicyDesk collects information directly entered by you or extracted from insurance documents you provide:
- Vehicle & Customer Data: Vehicle registration number, make/model, VIN, engine number, customer name, mobile number, email, and address.
- Policy Details: Policy numbers, insurer names, policy start/expiry dates, premium figures, and attachments.
All of this data is stored strictly locally on your Android device in an encrypted Room SQLite database and secured using the Android Keystore system.
2. Google Drive Sync & OAuth Usage
When you choose to connect your Google Account for cloud backups:
- PolicyDesk requests authorization exclusively for the restricted scope:
https://www.googleapis.com/auth/drive.file. - This scope permits PolicyDesk to only create, read, and update its own designated folder titled
PolicyDesk Vaultand backup files (policydesk_backup.json). - PolicyDesk cannot view, read, modify, or delete any other files, photos, or folders in your Google Drive.
- Google user data (tokens and email identifiers) is cached strictly on your local device and is never transmitted to any third party or backend server.
3. Artificial Intelligence Document Extraction
PolicyDesk features optional AI extraction for insurance PDFs:
- Cloudflare Workers AI: Text and image data from submitted document pages are transmitted securely via TLS 1.3 to a stateless Cloudflare Worker endpoint for optical recognition. No document copies are permanently stored on Cloudflare servers.
- Bring Your Own Key (BYOK): If you choose Gemini, OpenAI, or Claude, requests are made directly from your device to the respective provider's official API using API keys encrypted locally on your Android hardware.
4. Third-Party Sharing & Advertising
We do not sell, rent, trade, or share your personal information with any third-party advertisers, data brokers, or marketing services. The application does not contain advertising SDKs or tracking pixels.
5. Data Retention & Deletion
Because your data resides on your device and in your personal Google Drive account, you retain total control over retention:
- You can delete any policy, customer, or vehicle record instantly inside the app.
- You can disconnect Google Drive at any time from Settings.
- Uninstalling the app immediately wipes all local data from your device storage.
6. Contact
Questions or feedback regarding this Privacy Policy: