1. Provider and scope
“SecDoc”, “the app” and “we” refer to the publisher of SecDoc (application identifier com.int04.secdoc). This policy covers the iOS and Android app. SecDoc mainly operates on your device, with optional connections to third-party services. Separate privacy policies apply to Apple, Google, Cloudflare and any applications to which you share content.
2. Photos, videos and media library access
SecDoc requests access to your photos and videos when you choose to import or reference items in the device library. Depending on the operating system, you can grant full or selected-photo access. The app processes chosen media and associated metadata such as file type, size, timestamp and available media attributes to import, generate thumbnails, display and manage them.
For references to existing library items, SecDoc may read the referenced item again when displaying it. Removing content from SecDoc is different from removing an original item from your device's library. When device deletion is requested, the operating system may ask for your confirmation. Granting media access alone does not automatically upload your entire library to the publisher's server.
3. Local storage, PIN and encryption
Local vaults store imported content and associated management data on your device. SecDoc uses a PIN, encryption, and platform-backed secure storage where appropriate. App preferences such as language, appearance and advertising options may be stored locally. Encryption reduces risk but does not guarantee absolute protection. Keep your device, PIN, recovery information and encryption keys secure.
4. Optional user-configured Cloudflare R2 storage
If you create or connect a Cloudflare R2 vault, the app uses the credentials and storage configuration you provide to communicate with that R2 account. Vault photos/videos and remote metadata are encrypted before upload to your selected bucket. Encrypted objects are retrieved and decrypted when you access content. Connection secrets are stored using platform-backed secure storage rather than published on this site.
Cloudflare may process connection and operational information, such as IP addresses, requests, timestamps and service logs, under its own policy and your account configuration.
5. Google Mobile Ads / AdMob
SecDoc integrates the Google Mobile Ads SDK. Depending on location, permissions, SDK configuration and consent choices, the SDK may process IP addresses, application and device information, eligible identifiers, ad interactions, performance data and diagnostics. Google and its partners may use this information to deliver, measure, protect and improve advertisements.
Disabling in-app ad display where supported does not necessarily erase data already processed by others. Available device or Google privacy controls may affect advertising behavior. Refer to Google's Privacy Policy. We do not claim that every category is collected in every situation or that all ads are personalized.
6. Device data, network connections and permissions
The app uses Internet access for functions that require it, including R2, advertising and external links, and photo/video library access for user-requested media operations. Operating systems and integrated SDKs may process technical device and diagnostic information. The presence of an iOS permission explanation does not, by itself, mean SecDoc routinely accesses contacts or location. Revoking photo access may disable importing or referencing library media while leaving other functionality available.
8. Retention and deletion
- Local vaults: stored on your device until you delete items, remove the vault, erase app data or uninstall the app, subject to operating-system storage and backup behavior.
- Device library: deleting a SecDoc item does not necessarily delete the original Photos item; deleting from the device library may move it into a recently deleted area managed by the OS.
- Cloudflare R2: content remains in your bucket until you remove objects/the vault or your account's retention policy applies. Uninstalling the app does not necessarily remove R2 data.
- Advertising and provider logs: third parties apply their respective data retention policies.
Use SecDoc's deletion functions or manage your R2 bucket to remove your content. The publisher cannot directly erase information outside its control on your device or in your own R2 account.
9. Your rights and choices
You can view, export, select and delete content through available app functions; revoke library permissions in system settings; manage eligible advertising preferences; and manage your Cloudflare R2 account. Depending on applicable law, you may have rights to access, correct, erase or object to certain processing. For data directly controlled by third parties, contact those providers. For publisher-controlled information, email contact@toicontre.net.
10. Security measures and limitations
SecDoc encrypts private-vault media and uses platform-backed secret storage for sensitive connection information. We aim to minimize unnecessary data access. No storage or transmission method is entirely risk-free. Protecting your device, PIN and recovery information is important.
11. Children's privacy
SecDoc is not specifically designed for or marketed to children. Parents or guardians who believe a child's data has been handled improperly should contact contact@toicontre.net. Parental consent and advertising restrictions are subject to applicable law and platform rules.
12. Third-party providers and international data processing
Google Mobile Ads and Cloudflare may process information on infrastructure in different countries. Applicable protections and processing locations depend on the service and your configuration. Consult the policies of Google and Cloudflare.
13. Changes to this policy
We may update this policy when features, third-party providers or legal requirements change. The revised policy and effective date will appear at https://SecDoc.toicontre.net/privacy. Material changes may also be announced in the app or its official listing.
14. Contact
For privacy questions, data-related requests or security reports, contact SecDoc at contact@toicontre.net.
Do not include your PIN, R2 secret keys or private media unless necessary and you understand the risks.