Google Play requires apps to provide an accurate, code-verified declaration of all data collected, shared, and processed. Below is the complete transparency declaration for Kaagaz.
1. Overview of Security Practices
- Data Encrypted in Transit: Yes. All data sent between the app and cloud services uses TLS 1.3 / HTTPS.
- Data Encrypted at Rest: Yes. Documents are encrypted on the handset with AES-256-GCM via Android Keystore.
- Users Can Request Data Deletion: Yes. In-app at Settings → Delete my account, and on web at kaagaz.net/delete-account.html.
- Third-Party Data Selling: No. Personal data is never sold or rented to third parties.
2. Detailed Data Type Disclosures
A. Personal Info → Phone Number
| Collected | Yes |
|---|
| Shared | No |
|---|
| Processed Ephemerally | No |
|---|
| Required or Optional | Optional (Onboarding offers "Skip for now") |
|---|
| Purposes | Account Management; App Functionality (OTP login and live folder sharing) |
|---|
B. Contacts → Chosen Contact
| Collected | Yes (Single contact picked by user) |
|---|
| Shared | No |
|---|
| Processed Ephemerally | No |
|---|
| Required or Optional | Optional (Only when sharing a folder or adding a helper) |
|---|
| Purposes | App Functionality |
|---|
| Important Note | The app holds NO READ_CONTACTS permission. It never reads the phone address book, only receiving the single contact the user explicitly taps in the system contact picker. |
|---|
C. Photos, Videos & Files → Document Photos & PDFs
| Collected | Yes |
|---|
| Shared | No |
|---|
| Processed Ephemerally | No |
|---|
| Required or Optional | Optional (Only when saving documents with cloud backup enabled) |
|---|
| Purposes | Core App Functionality |
|---|
| Security | Personal documents are encrypted on-device before upload using hardware keys. |
|---|
D. Audio → Voice Recordings
| Collected | Yes |
|---|
| Shared | No (Sarvam AI is our contracted service provider processing on our behalf) |
|---|
| Processed Ephemerally | No |
|---|
| Required or Optional | Optional (Only when the microphone button is used) |
|---|
| Purposes | Speech-to-text document search and filing |
|---|
3. Third-Party Service Providers
- Firebase (Google LLC): Cloud storage, Firestore database, and Phone Authentication.
- Sarvam AI: Speech-to-text transcription engine for Indian languages and accents. No audio is used for advertising.
4. Verification & Compliance Inquiries
For inquiries regarding our Google Play Data Safety declaration or technical security architecture, contact: security@kaagaz.net.
