1. Summary
Your documents, photos and the text read from them stay on your phone and are never uploaded to any server.
There is no account, no sign-in, no cloud sync, no analytics, and no tracking of what you do inside the app. Scanning, text recognition (OCR), sorting and translation all run on the device.
The free version shows ads from Google AdMob, which uses your device’s advertising identifier. Waraqa Pro is bought through Google Play. Neither the ad system nor Google Play ever receives your documents or their text.
That is not marketing language — it is a description of what the code actually does, and the appendix shows how each claim was verified.
2. What the app stores
The app saves only what you scan, import or type yourself, on your device:
| Type | Contents |
|---|---|
| Documents | The PDF files you scan or import · their name · folder · project · tags |
| Text and details | The text read from each page (for search) · the document type the app recognised · details it found, such as amounts and dates |
| Vault | Documents you move into the vault (such as IDs and licences), encrypted with AES-GCM using a key kept in the Android Keystore, which never leaves the phone |
| Reminders and expenses | Reminders you set for a document · amounts you track in the expenses report |
| Preferences | Language · theme · camera settings and saved “recipes” · save rules · document languages · country |
Where: the app’s private storage on your device (a local Room database and the app’s files folder). No external database.
Country: used only to suggest document languages and formats. It is read from local system values (SIM, network, language region) or picked by you, and never sent anywhere.
Backups — only when you ask: the app makes a .wrq backup file only when you tap backup, and saves it where you choose. A password-protected backup is encrypted and may include the vault; an open backup never includes the vault. The app never sends this file anywhere.
No automatic cloud backup: Android cloud backup and device-to-device transfer are turned off for this app, so your documents are not copied to your Google account.
This data never leaves your device.
3. What the app does not do
| Collect personal data | ❌ No |
| Create an account or sign-in | ❌ No |
| Upload your documents, photos or their text to any server | ❌ No |
| Show ads | ✅ Yes — Google AdMob, in the free version |
| Analytics or usage statistics | ❌ No |
| Advertising identifier | ✅ Yes — used by the ad network |
| Third-party crash reporting | ❌ No |
| Access location | ❌ No |
| Access contacts or microphone | ❌ No |
| Use the camera | ✅ Yes — only to photograph the papers you scan |
| Share your documents with third parties | ❌ No |
| Sell any data | ❌ No |
4. Permissions
Permissions you are asked for, which you can refuse:
| Permission | Why |
|---|---|
CAMERA |
Photographing the papers you scan. Pictures are processed on the phone. Refusing it only disables the camera; importing files still works |
POST_NOTIFICATIONS |
Showing your document reminders and the backup reminder (Android 13+). Refusing it breaks nothing — reminders just don’t show |
Files and photos you import are opened through Android’s file picker, so the app asks for no storage or photos permission.
The other permissions its package holds — none of which is shown to the user or requires consent:
| Permission | Why |
|---|---|
INTERNET · ACCESS_NETWORK_STATE |
Ads · Google Play purchases · downloading language packs the first time |
AD_ID · ACCESS_ADSERVICES_* |
Advertising ID and Privacy Sandbox APIs |
com.android.vending.BILLING |
Buying Waraqa Pro through Google Play |
USE_BIOMETRIC · USE_FINGERPRINT |
Opening the vault and the app lock with your fingerprint. The fingerprint is checked by Android; the app never sees it |
WAKE_LOCK · FOREGROUND_SERVICE |
Running reminders and background reading of documents (WorkManager) |
…DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION |
AndroidX internal component protection |
5. Libraries and Google services used
| Library | Purpose |
|---|---|
| CameraX | The camera — local |
| Tesseract (bundled models) | Reading Arabic-script and other text — local, the models are inside the app |
| Google ML Kit (text recognition, face detection, subject segmentation, language ID, translation, document and code scanner) | Reading text, finding the face for ID photos, translation. Runs on the device. Some models and translation language packs are downloaded once from Google, then work offline. Your images and text are not sent with that download. As Google states, ML Kit may send Google basic diagnostic and usage information about these features (not your images or text) |
| PdfBox-Android · Android PdfRenderer | Building and editing PDF files — local |
| Room · WorkManager · AndroidX Biometric | Local database · reminders · fingerprint — local |
| Google Mobile Ads (AdMob) · User Messaging Platform | Showing ads and asking for ad consent where the law requires it — connects to the internet |
| Google Play Billing · Play In-App Review | Buying Waraqa Pro · asking for a store rating — through Google Play |
There is no Firebase Analytics, no Google Analytics, no Crashlytics, no Sentry, and no server of our own.
6. Ads and purchases
Ads: AdMob may collect the advertising identifier, approximate location from the IP address and ad interaction data to show and measure ads. Where the law requires it (for example in the EU and UK), the app asks for your consent first, and you can change your choice at any time from the app’s settings. See how Google uses information from apps that use its services. You can reset or delete the advertising ID from Android settings.
Purchases: payment is handled entirely by Google Play. The app only learns whether your Waraqa Pro purchase is active — never your card or payment details.
7. Controlling and deleting your data
- Delete a document: it goes to the trash, from where you can restore it or delete it for good.
- Vault: move a document out of the vault or delete it from there.
To erase everything at once: clear the app’s data from Android settings (Settings → Apps → Waraqa PDF → Storage → Clear data), or uninstall the app.
What can remain afterwards — your own choice: backup files and PDFs you exported or shared stay where you saved them. Delete them from your file manager.
8. Children
The app is a document tool and is not directed at children under 13. It collects no data you enter, regardless of age, but the free version shows ads governed by Google AdMob’s policies.
9. Data security
Your documents live in the app’s private storage, which Android isolates from other apps, and never travel over the network.
Vault files are encrypted with AES-GCM using a key held in the Android Keystore. Password-protected backups are encrypted with a key derived from your password.
The connections of the ad system, Google Play and the language-pack downloads to Google’s servers use encrypted HTTPS.
The security of the device itself — screen lock, device encryption — remains yours to manage.
10. Changes to this policy
Any future update that adds a feature which collects data or uses the network will be accompanied by an update to this policy before that feature ships, along with a new “Last updated” date above.
11. Contact
For any question about privacy in this app:
Developer: Nagarix
Email: privacy@nagarix.app
Appendix: how the above was verified
Every statement above is based on inspecting the code, not on assumption:
| Claim | How it was verified |
|---|---|
| Documents and text are never uploaded | The source contains no HTTP client and no server address; the only network traffic comes from the Google SDKs listed above |
| The permissions listed are accurate | Read from the merged AndroidManifest of the release build |
| No cloud backup | allowBackup="false" and data-extraction rules that exclude every domain from cloud backup and device transfer |
| The vault is encrypted | AES/GCM stream cipher with a key from the Android Keystore |
| No analytics or crash reporting | Audited the Gradle dependencies: no Firebase Analytics, Crashlytics or other analytics SDK |