Privacy notice

Monthly subscription and purchase verification

CamDocket 0.4 is being prepared for a Google Play subscription. The intended Norway offer is NOK 29 per month, automatically renewed until cancelled in Google Play, with no free trial. Google shows the final price and terms before purchase. Creating new reports requires an active subscription in this version. Existing reports remain readable, completable and exportable without subscribing. Subscription activation and real checkout testing are still in progress; no public release is claimed.

Google handles payment, payment details and transaction records. CamDocket does not receive your card or bank information. When checking or restoring a purchase, the app sends a Google purchase token and a random installation ID over HTTPS to CamDocket's verification service at camdocket-billing.expo.app, hosted by Expo/EAS using Cloudflare infrastructure. The service checks the purchase status with Google Play and returns signed access for at most 24 hours, never beyond the paid period. Reports, photographs, notes and recorded GPS are not sent for payment verification.

The verification application does not keep a purchase database or log purchase tokens, installation IDs, reports or responses. Request data is handled in memory to complete verification. A bounded security counter can hold an IP address in server memory for up to one minute. Hosting providers process technical request information such as IP addresses, request times, status, region and browser information for delivery, security and diagnostics. Expo's standard hosting log retention is up to three months (seven days on its Free plan); provider security records and legal obligations may have separate retention. See Expo privacy information and hosting retention information. Processing may occur outside the EEA under the providers' applicable transfer arrangements. We do not claim Norwegian-only hosting.

Purchase verification supports the subscription contract; technical security processing supports the legitimate interest in preventing misuse and operating the service. Google's payment records follow Google's own retention requirements. Support correspondence is handled as described below. Contact camdocket.support@gmail.com for access or deletion requests concerning information we hold; do not send payment tokens, passwords or card details.

Manage or cancel the subscription in Google Play subscriptions. Cancellation stops renewal while the paid period continues. Deleting app data or uninstalling the app does not cancel the subscription. Existing reports can still be opened and exported after subscription access expires. New report creation can work offline for up to 24 hours after successful verification, within the paid period; purchase and restore require internet access.

Local reports and the information you choose

CamDocket stores report titles, references, readings, observations, condition assessments, device timestamps and the photos or document images you choose to add. If you request it, the app adds a location reading with its accuracy. Photos may contain camera metadata, including location. Only include information you are entitled to use.

Local report creation and storage do not require an account. Local reports are not uploaded automatically. The publisher does not receive local report contents through ordinary local use. The current Android test build is not configured with an active account connection. Account registration and cloud report copies are therefore not available in this build. This notice will be revised before a connected account service is publicly released.

Permissions

Camera permission is requested to take a photo. The system photo picker provides the images you select; the app does not scan the photo library. Location permission is optional and used when you request Record GPS location. No background location tracking is used. You may decline access and continue without these optional inputs. Device settings control the permissions.

Sharing, PDFs and backups

When you export or share, a copy of the report or backup goes to the destination you select. It can include photos, document images, notes, reference information, device times and any recorded GPS. These exports are not encrypted by CamDocket. Recipients and the file, cloud or email service you select have their own privacy practices. Email PDF opens a composer or prepares a file; you complete the sending action.

Storage, retention and deletion

Mobile reports and image copies are kept in app-private storage. The web preview uses browser storage. Data remains until you delete it or remove the app or browser data. Settings → Delete local data removes the reports, stored image copies and app-managed temporary files for that installation. Photos individually removed from a report may remain in recovery snapshots or cache until this full deletion.

Exported PDFs, backups, original photos and copies held by recipients are separate and must be removed separately. The publisher cannot recover or erase local copies it has never received. Export a backup before removing the app. Automatic Android app-data backup and device transfer are disabled in this version. Other operating-system or user-selected backup services follow their own settings and policies.

Security and report limits

Protect your device and exported copies. CamDocket does not add its own encryption to local databases or exported files. Report locking prevents editing through the app; it is not a guarantee against tampering. Photos, timestamps, GPS and reports are not certified or independently verified. Do not treat them as a determination of responsibility, safety or authenticity.

AI and analytics

The Android test build does not provide a production AI service. A separate local browser development trial can send a selected photo to OpenAI only after its own disclosure and send action; it is outside ordinary mobile use. No report is sent to OpenAI by the mobile workflows described here. The app has no advertising or analytics feature in this version.

Support messages and this website

If you contact support, the email address and information you choose to send are processed to answer your request, resolve problems and handle privacy requests. The support mailbox is hosted by Google. Do not send unnecessary personal information. We retain correspondence while needed to handle the request and any necessary follow-up or applicable legal obligation, and remove it when no longer needed.

This website is hosted through OpenAI Sites with Cloudflare infrastructure. Hosting and network providers may process technical connection information such as IP addresses, request times and browser information to deliver and secure the site. We have not added advertising, tracking pixels or an analytics script to these pages. Provider processing is governed by the providers’ policies; we do not promise that infrastructure logs are absent or stored only in Norway.

Support processing is based on the legitimate interest in responding to user-requested help and maintaining a reliable service, or applicable obligations when handling a legal request. Local processing implements the actions you choose in the app. Providers may process information outside your country under their applicable arrangements and policies.

Your choices and rights

For information, access, correction or deletion requests concerning information the publisher holds, contact camdocket.support@gmail.com. Rights to restriction, objection and portability may also apply. We may need to verify ownership before acting, without requesting unnecessary information. You may complain to Datatilsynet or your relevant supervisory authority. For local report files, use the app’s export and deletion functions; see data deletion instructions.

Content rights and changes

CamDocket does not acquire ownership of your images, documents or reports. Existing rights remain with their owners. Only capture and share content you have the necessary rights and lawful basis to use; camera permission alone does not establish those rights. We update this notice when the distributed app or its data practices change.

Photo stamps and place lookup

The photo-stamp version is in internal testing. New camera photos can have a separate copy with date, time, timezone and optional fresh GPS coordinates, accuracy and a place name. The original remains on the device and is included in exported backups. The device camera timestamp is used when available and plausible; otherwise the time the photo was added is recorded. These are device records, not independently verified evidence.

To include location on subsequent camera photos, use Record location for the report first. A fresh position is requested for each photo; an old report position is not reused as a current photo position. Reverse geocoding can send coordinates to the operating system's location/map provider to obtain a place name. Internet may be needed; a returned name may describe a nearby area rather than an exact address. Photos are not sent for this lookup. Location remains optional and is not sent to the purchase verifier.

If GPS or place lookup fails, the photo is retained with the information actually available. Imported photos and existing reports are not retrospectively marked with today's position or time. Shared stamped copies and backups contain the visible location and time, so choose recipients carefully.

Authorized Google Play review access

Authorized store reviewers can use a separate reusable access code to test local app functions without making a purchase or creating an app account. The code and a random installation ID are sent over HTTPS to the same CamDocket verification service. The server stores only a hash of the authorized code and returns a signed, installation-bound access record valid for at most 24 hours.

The app keeps the entered code in its private access-settings file to renew review access online. Review access does not create a paid subscription, and no reports, photos or recorded GPS are sent for this check. Removing or rotating the server code hash prevents new grants; already issued access records can remain valid for up to 24 hours. Clearing local app data removes the local code, but also removes local reports, so export a backup before doing so. The code itself is not published on this website.