Privacy Policy

Your photos, scans and labels stay on your iPhone and in the cloud accounts you choose. We don't run accounts, sell data, or track you.

Last updated October 5, 2026

  • Stored on your device — Snaps, scans, labels and folders live in DocRocket's private storage on your iPhone.

  • Uploaded straight to your cloud — Files go directly from your iPhone to Box or Google Drive. They never pass through our servers.

  • Voice labels become text — DocRocket keeps the words you say, never the audio. Speech is transcribed on your iPhone when it supports this.

  • No tracking — No analytics, no ads, no location, no data sales.

1. Who we are DocRocket is made by HeffandJughead ("we", "us"). This policy explains what information the DocRocket iOS app handles, where it goes, and the choices you have. DocRocket does not have user accounts, and we do not operate a database of your content.

2. Information stored on your iPhone Everything you create in DocRocket is saved in the app's private storage on your device:

  • Photos, document captures and multi-page PDF scans

  • Labels, including text transcribed from your voice

  • Folders, quick labels, markup and signature stamps

  • Your settings, such as upload folders and capture preferences

We never receive a copy of this information. iOS may include it in your iCloud or computer backups according to your device settings.

3. Camera, microphone and speech recognition DocRocket uses the camera only while you are capturing photos, documents or scans. It uses the microphone only while you hold or tap the mic to say a label.

Your speech is turned into text using Apple's Speech framework. When your device supports it, transcription happens entirely on your iPhone. On devices that don't, Apple's speech recognition service may process the audio under Apple's Privacy Policy (https://www.apple.com/legal/privacy/). DocRocket does not record or save audio. It keeps only the resulting text label.

4. Photo library If "Save to Photos" is on, DocRocket asks for add-only access so it can save a labeled copy of each photo to your library. DocRocket cannot view or read the photos already in your library. PDF scans are never saved to Photos.

5. Box and Google Drive Connecting a cloud account is optional. When you connect, you sign in on Box's or Google's own page, so we never see your password. The provider then grants DocRocket an access token. DocRocket stores this token securely in the iOS Keychain on your device.

DocRocket also reads your account name and email address. It shows them so you know which account is connected, and keeps them only on your device.

Files upload directly from your iPhone to Box or Google Drive, including in the background. They never pass through our servers.

  • Google Drive: DocRocket uses the limited drive.file permission. It can only see and manage the files and folders it created in your Drive. It cannot see anything else in your Drive.

  • Box: DocRocket can list your folders, so you can choose where uploads go, and it can upload files into them.

6. Our sign-in server A small server, hosted on Cloudflare, completes the Box and Google sign-in. It exists so that DocRocket's secret app keys never ship inside the app. It does three things: it exchanges the one-time sign-in code for tokens, refreshes expired tokens, and revokes tokens when you disconnect.

Tokens pass through this server but are not stored there. Your photos, scans, labels and files are never sent to it. Like any web service, our hosting provider may process your IP address and basic request details to keep the service secure and reliable. We log only error codes for troubleshooting.

7. Google API Services disclosure DocRocket's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. DocRocket uses Google data only to upload and organize the files you choose to send to your own Google Drive. It does not use that data for advertising, it does not sell it, and humans do not read it.

8. What we don't collect

  • Location. DocRocket doesn't request it and adds no GPS coordinates to your files.

  • Contacts, browsing history or other app data

  • Analytics, advertising identifiers or tracking across apps and websites

  • Payment information. Any purchase is handled by Apple.

We do not sell or rent personal information, and we do not share it for advertising.

9. Sharing you choose When you upload, export, share, email or save a file, it goes where you send it, and that service's privacy policy applies. Each file carries information you added: its label, folder, and capture date and time. This information appears in photo captions, PDF properties and report pages so the files stay organized wherever they go.

10. Keeping and deleting your information

  • Delete any snap or scan from the Library, and it is removed from your device.

  • Disconnect Box or Google Drive in the Cloud tab. DocRocket revokes its access and deletes the token from your Keychain.

  • Delete the app to remove everything DocRocket stored on your iPhone.

  • Files you already uploaded stay in Box or Google Drive until you delete them there. You can also remove DocRocket's access in your Box account settings or on your Google Account's Third-party apps page.

11. Security Cloud tokens are kept in the iOS Keychain. All connections to Box, Google and our sign-in server use encrypted HTTPS. No method of storage or transmission is perfectly secure, but we design DocRocket to keep as little as possible, in as few places as possible.

12. Children DocRocket is a work tool and is not directed to children under 13. We do not knowingly collect personal information from children.

13. Your rights Depending on where you live, laws such as the GDPR or the CCPA may give you the right to access, correct or delete personal information, or to object to its use. Because DocRocket keeps your content on your device and in your own cloud accounts, you can exercise most of these rights directly in the app. For anything else, email us and we will respond within 30 days.

14. Changes to this policy If we change this policy, we will update this page and the date above. If a change materially affects how your information is handled, we will also point it out in the app.

15. Contact Questions about privacy? Email Support@heffandjughead.com.