IndexDoc · Effective May 4, 2026 · Last updated May 4, 2026
This Privacy Policy explains how IndexDoc ("we", "us", "the app") handles information when you use the IndexDoc iOS application. We've designed IndexDoc with a privacy-first approach: most of your data stays on your device or in your own iCloud account, and we minimize what we process.
IndexDoc is developed and operated by Hamilton Blackwell. If you have questions about this policy or your data, contact us at martinjames@gmail.com.
When you scan a document, IndexDoc captures images using your device camera and may process the contents to extract text (OCR) and structured data such as dates, totals, vendors, and categories. These documents and the extracted metadata are stored locally on your device and, if you enable iCloud sync, in your personal iCloud account managed by Apple.
If you purchase a subscription, the transaction is processed by Apple via the App Store. We receive only the information needed to verify your subscription status (such as the product identifier and whether the subscription is active). We do not receive your payment card information.
If you use AI-powered features such as document understanding, smart filing, or semantic search, IndexDoc sends the text and/or image contents of the document you are processing to Anthropic's API for analysis. Anthropic processes this data on our behalf to return structured results. Anthropic's handling of this data is governed by their Privacy Policy and Commercial Terms. As of this writing, Anthropic does not use API inputs or outputs to train their models.
IndexDoc uses Apple-provided frameworks for iCloud sync, App Store subscriptions, push notifications, and on-device biometric authentication. Your use of these features is governed by Apple's Privacy Policy.
Documents and metadata remain on your device (and in your iCloud account, if sync is enabled) until you delete them. You can delete individual documents at any time within the app, or use "Clear All Data" in Settings to remove everything at once. Deleting the app from your device also removes all locally-stored data; data in iCloud follows your iCloud retention settings.
Data sent to Anthropic for AI processing is handled according to Anthropic's retention policies and is not retained by us after a response is returned.
All network requests use HTTPS with certificate validation. The document vault can be protected with Face ID or Touch ID. Data stored on-device benefits from iOS data protection and full-disk encryption when your device is locked with a passcode. iCloud sync is protected by Apple's end-to-end and at-rest encryption mechanisms.
No system is perfectly secure. If we become aware of a security incident affecting your data, we will notify you as required by applicable law.
IndexDoc is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us and we will take steps to delete such information.
Because most data stays on your device or in your own iCloud account, you have direct control over it. You can view, edit, export, or delete your documents at any time from within the app.
California residents have the right to know what personal information we collect, to request deletion, to opt out of the sale or sharing of personal information, and to be free from discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact us at the email address above.
If you are in the EU, UK, or EEA, you have rights under the GDPR including the right to access, rectify, erase, restrict, port, and object to the processing of personal data we hold about you. Our lawful basis for processing is your consent (which you can withdraw at any time by changing in-app permissions or deleting the app) and our legitimate interest in providing the service you've requested.
If you use AI features, the data sent to Anthropic may be processed on servers located in the United States. By using these features, you consent to this transfer.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated through the app or via an update note in the App Store.
Questions, complaints, or requests about this Privacy Policy or your data: martinjames@gmail.com