DoCube Privacy Policy

1. Scope and Provider

This policy applies to the iPhone, iPad, and Mac versions of DoCube. DoCube is provided and maintained by the developer listed on its App Store product page. In this policy, “we” means the DoCube developer and “you” means the person using DoCube.

DoCube does not currently require you to create an account with the developer. Accounts you use with Apple or third-party AI services are managed by those providers and are subject to their privacy policies and account settings.

2. Data Processed Only on Your Device

Unless you enable syncing, cloud AI, or submit feedback, DoCube’s main reading and knowledge-management data remains only on your device. Anonymous usage analytics does not include document text; the scope of diagnostic data is described below. Main reading and knowledge-management data includes:

• Documents you import or create, including PDF, EPUB, HTML, Markdown, video, and MinerU files;
• Document text, filenames, covers, tables of contents, subtitles, and media resources;
• Annotations, notes, links, cards, plans, projects, search indexes, and reading progress;
• Text vectors and indexes generated for local semantic search;
• App settings, local model files, and local caches.

3. Anonymous Usage Analytics

Analytics Data Reporting is on by default. While it is on, DoCube collects content-free product usage events to understand whether features work correctly, measure feature usage, improve stability, and plan product updates.

3.1 Data Fields Collected

• Structured properties such as event type, outcome, stage, duration, and count ranges;
• Event time, random event identifier, and random session identifier;
• A random anonymous installation identifier generated for each installation; a new identifier is generated after you uninstall and reinstall the app;
• DoCube version and build number, operating-system version, and device type;
• Language and region settings, whether Pro is unlocked, document-count range, and days since installation;

3.2 Data Explicitly Excluded

Anonymous usage analytics do not upload:

• Document text, subtitles, annotations, notes, or card content;
• Filenames, local paths, document hashes, or web links;
• Search query text, AI prompts, or AI input or output;
• API keys or other account credentials;
• Names, email addresses, telephone numbers, Apple IDs, or advertising identifiers.

3.3 Purpose of the Anonymous Installation Identifier

The anonymous installation identifier is used only within DoCube to calculate sessions, retention, and feature-usage trends. We do not use it to identify a real person, combine it with account identities, third-party data, or advertising data, or track users across apps or websites.

Anonymous usage analytics are transmitted and stored through Apple CloudKit. You can turn off Analytics Data Reporting at any time in DoCube’s privacy settings. When turned off, DoCube stops creating and uploading new analytics events and clears analytics events that have not yet been uploaded from your device.

4. Crashes and Diagnostics

DoCube automatically uploads runtime errors and saves and uploads diagnostic packages after a crash so that we can identify causes, fix compatibility issues, and improve stability. Crash reports are always uploaded and cannot be turned off.

4.1 Diagnostic Data May Include

• Original error messages captured while the app is running;
• Error component, stage, category, severity, retryability, occurrence count, and time;
• An error fingerprint used to group identical errors;
• A randomly generated crash device identifier and crash event identifier;
• DoCube version, build number, device platform, operating-system version, and crash time;
• A structured crash report generated by PLCrashReporter;
• Recent DoCube runtime logs when Upload Logs with Crash Reports is on.

Original error messages and runtime logs may contain feature status, error information, URLs, local paths, search terms, or WebView output. Runtime logs automatically mask common API key, token, password, and Authorization fields, while original error messages are uploaded as generated by the app.

Diagnostic data is transmitted and stored through Apple CloudKit.

5. Sync Features You Choose to Enable

You configure sync features yourself. Once enabled, DoCube may transfer documents, document resources, annotations, notes, cards, plans, projects, reading progress, app settings, and related databases to keep your devices consistent.

DoCube encrypts sync data and settings files before writing them to the sync directory. Some settings may be transferred with sync files. Turning off sync stops future syncing but does not automatically delete copies already stored by the provider; you can delete them through the provider’s account or storage-management tools.

6. Third-Party AI Services

DoCube supports third-party AI services for which you provide your own API key. While a cloud provider is turned off, DoCube does not send content to it. Each time you switch a provider from off to on, DoCube first displays a data-transmission notice and enables the provider only after you confirm.

6.1 Content That May Be Sent

• Text, paragraphs, or subtitles to be translated;
• Source text, context, and custom prompts needed to generate cards;
• Search queries, search-result excerpts, and summarization instructions;
• Text needed to generate video chapters or process subtitles;
• The requested model name and parameters, and the API key you provide.

These requests are sent over HTTPS directly from your device to the provider you enable and do not pass through DoCube-owned servers. Depending on its privacy policy, terms of service, and account settings, the provider may record network addresses, request content, usage, or diagnostic information and may process data in different countries or regions.

6.2 Supported Providers

DoCube may currently support services including DeepSeek, Google Gemini, OpenAI, OpenRouter, Alibaba Cloud Model Studio, xAI, and SiliconFlow. The actual recipient is limited to providers you have configured and enabled. Before enabling one, read the provider’s privacy policy and make sure you have the right to send the relevant content.

6.3 Local Models

DoCube uses a local embedding model downloaded to your device for semantic search. Document content and search text are converted into vectors on your device and are not sent to an online embedding service for semantic search. When downloading a model, the model-hosting platform may receive your IP address, request time, and download information.

6.4 API Keys

API keys are stored in DoCube settings and are used to send requests to the relevant provider on your behalf. If settings sync is enabled, related settings may be included in the sync scope. You can turn off a provider or clear its API key; after the key is cleared, DoCube no longer uses it to make requests.

7. Feedback and Customer Support

When you submit feedback, DoCube invokes the system mail feature and sends the content you enter to our support address. You can choose whether to attach DoCube runtime logs. Your mail provider processes the sender and recipient addresses, message body, and attachments according to its own policies.

Do not include API keys, passwords, unrelated document content, or other unnecessary sensitive information in feedback or attachments. Before providing a sample document, make sure you have the right to do so and remove unrelated content where possible.

8. Purchases and Pro Status

In-app purchases are processed by Apple. We do not receive your bank-card number or complete payment details. DoCube obtains the transaction status needed to verify purchases and restore entitlements from StoreKit. When anonymous usage analytics are enabled, it records whether Pro is unlocked on the device, but it does not upload complete transaction receipts or payment information.

9. Data Recipients and Sharing Principles

We provide data only to the following recipients and only as necessary to deliver the relevant feature:

• Apple: App Store, StoreKit, iCloud, and CloudKit;
• Third-party AI providers that you explicitly enable;
• The mail provider that processes feedback you choose to send;
• Judicial, administrative, or regulatory authorities making a valid request where required by law.

We do not sell or rent your data, provide it to data brokers, use DoCube data to track you across apps or websites, or use it for targeted advertising.

10. Data Retention and Deletion

11. Your Choices and Rights

You can:

• Turn anonymous usage analytics off or back on in privacy settings;
• Turn log attachments for crash reports off or back on in privacy settings;
• Turn off any cloud AI provider and clear its API key;
• Edit your feedback and decide whether to attach logs before sending it;
• Request access to, an explanation of, or deletion of relevant data we store by contacting support.

12. Security Measures

Logs are redacted before upload.

13. Minors

DoCube does not provide services to minors. Minors must not download or use this app.

If we discover that we have collected a minor’s personal information, we will delete it promptly. A parent or guardian may contact us using the contact details in this policy.

14. International Data Processing

Apple, model-hosting platforms, and third-party AI providers may process data outside your country or region. Data is sent to these providers only when you enable the relevant feature or initiate the relevant action. Processing locations, safeguards, and methods for exercising your rights are governed by each provider’s policy.

15. Changes to This Policy

When there are material changes to data fields, processing purposes, recipients, or user choices, we will update this policy and the date shown at the top. For material changes that expand how data is used, DoCube will ask for your confirmation in the app before the new processing begins.

16. Contact Us

If you have questions about this policy, how data is processed, or a deletion request, email docube@icloud.com.

To protect your privacy, do not send account passwords, API keys, or complete documents unrelated to your request in a regular email.