01. Controller and contact
SIA Platinium, Meža prospekts 62–8, Jūrmala, LV-2010, Latvia. Privacy and support enquiries: support@platinium.tech.
02. Contents on your device
Document images, pages, titles, categories and recognized text are stored locally using AES-256-GCM encryption. Text recognition runs on your device. Camera and photo library access follows your choices. Removing an app copy does not delete its photo library original. The provider receives no plaintext document contents.
03. Keys, unlocking and recovery
The local key is kept in the device’s protected key storage. Face ID, Touch ID or the device passcode protect access; the app receives no biometric templates. A separately stored recovery code enables restoration from a matching backup. Without the correct key or code, the provider cannot decrypt your data.
04. Optional iCloud and device backups
For optional iOS sync, contents are encrypted before upload to your Apple Account’s private CloudKit database. The recovery code is not transmitted. Apple processes technical account, storage and transfer data under its own notices. Device backups and manually exported files are separate. You choose their location and storage provider. Android is not synchronized automatically.
05. Deletion, conflicts and recipient copies
Sync sends deletions to connected devices. Concurrent edits can create additional copies. Older encrypted media may remain in iCloud for conflicts and devices that are still offline. Pausing does not delete cloud data. Also manage cloud data in Apple settings. External backups and recipients’ AirDrop imports must be managed separately.
06. Purchases and optional support
Apple or Google process payments and purchase restoration under their own terms. The app processes entitlement information; payment details are not transmitted to SIA Platinium. When you contact us, we process your email address, message and any voluntarily supplied details to respond. Do not send secret codes or confidential documents.
07. Website and technical access data
Hosting and security providers may process IP address, access time, requested address and browser/error data to deliver and secure the website. These static pages contain no advertising or analytics scripts, load no external fonts and set no cookies themselves. The app includes no advertising trackers and requires no separate Safe account.
08. Purposes, legal bases and retention
Contract-related support relies on GDPR Article 6(1)(b); other enquiries and secure website operation rely on legitimate interests under Article 6(1)(f). Where processing relies on consent, Article 6(1)(a) applies and consent can be withdrawn for future processing. Enquiries and technical logs are kept only as needed for handling, security or legal retention duties. You control local document retention; external copies also follow the selected provider’s settings and rules.
09. Providers and international processing
Website hosting and email involve hosting/communications providers as recipient categories. Apple, Google and storage providers you select may process data outside the EEA under their own privacy notices. Contact us for information about providers used for your enquiry and any applicable international transfer safeguards.
10. Your rights
Subject to legal conditions, you may request access, correction, deletion, restriction and portability, and object to processing based on legitimate interests. You may complain to a supervisory authority, including Latvia’s Datu valsts inspekcija. We cannot supply or change decrypted contents to which we have no access.