Our Privacy Principles
FinePrint Shield is designed to be local-first. Your documents are stored and processed on your device by default, and we never sell or rent your personal data. Certain features — such as AI Deep Analysis, Secure Share links, and Premium Web App access — require secure online processing, and only run when you explicitly initiate them. This policy explains what data we handle, how, and why.
Local-First Document Processing
By default, documents you import, scan, upload as PDFs, or create in FinePrint Shield are stored locally on your device inside an encrypted document vault. Standard document operations — viewing, organizing, editing, annotating, stamping, and signing — are performed on-device and do not transmit your document contents to our servers.
OCR Processing
OCR (optical character recognition) is used to extract text from scanned pages, photos, and image-based PDFs. Standard on-device OCR runs locally and does not send document contents off your device. Where a higher-accuracy OCR mode is offered, it may transmit page images or extracted text to secure processing servers strictly to return the recognized text; content processed this way is used only to fulfill your request and is not retained after processing.
AI Deep Analysis (User-Initiated)
AI Deep Analysis and the AI document assistant are optional features that run only when you explicitly start an analysis or send a question. When you initiate one of these actions, the relevant document text (or your question and the necessary context) is transmitted over an encrypted connection to trusted AI processing providers to generate the analysis or response.
Content sent for AI processing is used only to produce your result. We do not use your document contents to train third-party foundation models, and content sent for AI processing is not permanently retained by us after the analysis is delivered. Analysis results returned to you are stored on your device with the associated document.
Secure Share Links
Secure Share lets you generate a link to share a specific document or analysis with another person. When you create a Secure Share link, the shared content is uploaded to our secure storage so the recipient can access it via the link.
Secure Share data is automatically deleted approximately 24 hours after creation. You can also revoke a Secure Share link at any time from within the app, which removes the associated content before the automatic deletion window. Do not use Secure Share for content you are not authorized to share.
PDF Uploads and Document Processing
You can import PDFs and other supported document types into FinePrint Shield. Imported files are stored in your local encrypted vault. Their contents are only transmitted to our processing infrastructure when you take an action that requires it — for example, running AI Deep Analysis, using a cloud OCR mode, or generating a Secure Share link.
Local Encrypted Storage, PIN, and Biometrics
Documents in the vault are stored using on-device encryption. You can additionally protect access to the app with a PIN and/or biometric authentication (such as fingerprint or face unlock) provided by your device's operating system. Biometric credentials themselves never leave your device and are not transmitted to or stored by FinePrint Shield.
Accounts and Authentication
You can use core local features without creating an account. If you choose to create an account (for example, to enable cross-device access, backups, or Premium features on the Web App), we collect the minimum information needed to operate that account, such as an email address and authentication identifiers from supported sign-in providers.
Premium Web App Access via Link Code
Premium features on the Web App are unlocked using a Link Code generated in the Android app. The Link Code authenticates your Premium entitlement for the Web App session and does not itself grant access to your local documents on the Android device. Link Codes can be rotated or revoked from within the Android app.
Subscriptions: Google Play and RevenueCat
Premium subscriptions are purchased and billed through Google Play on Android. Google processes your payment information under Google's privacy policy and terms; we do not receive or store your full payment details.
We use RevenueCat as a subscription management provider to validate purchases, track entitlement status across devices, and support features such as restoring purchases and activating Premium on the Web App. Information shared with RevenueCat is limited to what is needed to manage your subscription (for example, purchase tokens and pseudonymous user identifiers). RevenueCat processes this information as our service provider.
Diagnostics and Analytics
We may collect limited diagnostic information (such as crash reports and basic device information) to keep the app stable and secure. Where product analytics are used, they are limited to aggregated, non-identifying usage events used to improve the product. We do not use analytics to read the contents of your documents, and we do not sell analytics data. If analytics are not currently implemented for a given surface of the app, no analytics data is collected there.
Sharing and Disclosure
We do not sell or trade your personal data. We share information only with service providers that help us operate FinePrint Shield (such as cloud infrastructure, AI processing providers, RevenueCat for subscription management, and Google Play for billing), and only to the extent necessary to provide the service you requested. We may also disclose information where required by law or to protect the rights, safety, or security of our users or the service.
Data Retention
Local documents remain on your device until you delete them or uninstall the app. Content processed by AI Deep Analysis or cloud OCR is used transiently to produce your result and is not retained by us after processing. Secure Share content is automatically deleted approximately 24 hours after link creation, or sooner if you revoke the link.
Account records, subscription entitlement data, and limited diagnostic or analytics data are retained only as long as needed to operate the service, meet legal and accounting obligations, prevent abuse, and enforce our terms.
Your Rights and Deletion Requests
Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data we hold about you, and to object to or restrict certain processing. You can delete local documents at any time from within the app. To request access, correction, export, or deletion of account data, or to exercise other applicable privacy rights, contact us at support@merdorian.com. We may need to verify your identity before acting on a request.
Children's Privacy
FinePrint Shield is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact support@merdorian.com so we can remove it.
International Users
FinePrint Shield may be used from many countries. When you use cloud-powered features, data may be processed in countries other than your own. We use appropriate safeguards with our service providers to protect that data in transit and at rest.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the app or legal requirements. When we make material changes, we will notify you through the app or by other reasonable means and update the "Last updated" date above.
Contact
Questions about this Privacy Policy or our data practices? Email support@merdorian.com.