AI Document Understanding

DocFlow AI Privacy Policy

Last updated: July 11, 2026

Overview

DocFlow AI is designed with your privacy as a core principle. This policy describes how we handle your data when you use the app.

Local Document Processing

1. PDF files remain on your device. When you select a PDF for analysis, the file is accessed locally using PDFKit. Your original PDF file is not uploaded to any server.
2. Text is extracted locally. Text extraction from your PDF is performed entirely on your device. The original PDF file never leaves your device.

AI Analysis

1. Extracted text is sent for analysis. Only the extracted text content (not the PDF file) is transmitted over an encrypted HTTPS connection to the DocFlow AI Gateway for immediate analysis.
2. Gateway forwards requests to AI providers. The DocFlow AI Gateway forwards the analysis request to the selected AI service provider (currently DeepSeek). Document text is used solely to fulfill the current analysis request.
3. No user account required. A randomly generated anonymous identifier is used for request routing and rate limiting. This identifier cannot be traced back to your identity.

Data Storage and Retention

• Analysis results are stored locally. AI-generated analysis results are saved only on your device using Apple's SwiftData framework.
• Original PDFs are not stored on our servers. The DocFlow AI Gateway does not persist your original PDF files.
• Service logs are sanitized. Cloudflare Gateway and Workers maintain operational logs that may include request metadata (timestamps, status codes, response times) and an anonymous request identifier. These logs do not contain the full document text, APP_TOKEN, or API keys.
• Third-party AI provider data handling. The AI provider (DeepSeek) processes the text sent for analysis in accordance with their own privacy policy. DeepSeek does not use submitted data for model training.

Network and Infrastructure Data

Cloudflare, our content delivery and edge computing provider, may process standard network information—such as IP addresses and request metadata—for security, routing, rate limiting, and operational diagnostics. DocFlow AI does not use this information for advertising, user profiling, or behavioral tracking.

Information We Do Not Collect

• Your name, email, or contact information
• Your device identifiers for advertising purposes
• Your precise location
• Usage analytics or behavioral data

Third-Party Services

DocFlow AI does not integrate any third-party analytics, advertising, or crash reporting SDKs. The only external services accessed are the AI analysis API and Cloudflare's edge infrastructure.

Your Control

You can delete any or all analysis results at any time from within the app. Deleting the app will remove all locally stored data.

Changes to This Policy

We may update this privacy policy to reflect changes in our practices. We will notify users of material changes through the app.

Contact

If you have questions about this privacy policy, please contact us:

• General support: support@docflow-ai.org
• Privacy or data requests: privacy@docflow-ai.org

DocFlow AI — Built for privacy. Built for professionals.