Privacy policy

Version 1.0 · Effective date 2026-11-05

DocDecay is published by an individual developer under the name HKSolutions. This policy covers the Android app, the web viewer at https://docdekay.needsolutions.net and the server. Contact for all privacy matters: support@needsolutions.net.

1. How the service works

A sender chooses a document image in the app and shares a link. The server removes the image metadata, encrypts the image and keeps it only in server memory, never on disk, in logs or in backups. The image is deleted when the chosen lifetime (at most 24 hours) or the view limit is reached, or when the sender deletes the link. Every view carries a watermark with the recipient name entered by the sender, the viewer's IP address and the time.

A screen can always be photographed with another device; no app can prevent that. DocDecay makes such a photo traceable through the watermark and the access records.

2. Data about senders

• A random device identifier created by the app and a hash of a device secret, the time of creation and of the last sign-in, language and plan. No name, e-mail address or phone number is asked.
• For the monthly Free limit: a keyed hash of the app-scoped Android ID and a counter.
• If notifications are configured: the Firebase installation ID (FCM registration).
• For a Pro subscription: Google Play purchase information (purchase token stored hashed and encrypted, product, status, dates). Card or bank details never reach us.
• For each link: the recipient name you entered, lifetime, view limit and status.

3. Data about recipients

• IP address, browser user agent, time of each view and of related events (for example a wrong PIN) and how long the document stayed open.
• The viewer informs recipients before the document is shown. No cookies, no analytics, no location lookup.

4. Purposes

To provide the service (contract), to deter and prove unauthorised copying, and to keep the service secure and free from abuse (legitimate interest). No advertising, no profiling, no sale of data.

5. Retention

• Document images: until the lifetime or the view limit ends, at most 24 hours.
• Access records: 365 days.
• Encrypted database backups (without images): 30 days.
• Account data: until you delete the account. Free accounts without a sign-in for 180 days are deleted automatically.

6. Service providers

• Google Play (Google): app distribution, payments and subscription status.
• Firebase Cloud Messaging (Google), only if configured: delivery of notifications.
• Hetzner Online GmbH: hosting of the server in Germany.

Google may process data outside your country under its own terms.

7. Your rights

You can request access to, correction, deletion or a copy of your data, object to its processing and complain to a data protection authority (in Türkiye the Personal Data Protection Authority, in the EU/EEA the authority of your country). Write to support@needsolutions.net. You can delete your account at any time in the app under Settings → Delete account, or as described at https://docdekay.needsolutions.net/legal/account-deletion.

8. Age

The service is intended for persons aged 18 or older.

9. Changes

Changes are published on this page with a new effective date.