Privacy Policy
Information on how personal data is collected, handled, and protected when using CodEasy (CodEasy AI) and browsing the official website, built upon the foundational principles of Privacy by Design and Privacy by Default.
Data Controller and Contact Details
The Data Controller under Regulation (EU) 2016/679 (GDPR) is GDDev (independent software developer). For any questions or data requests, contact us at:
Local-First Architecture & Privacy by Design
Unlike traditional cloud apps, CodEasy does not operate remote servers for user data. All scans, text extraction, neural intelligence, search indexing, and category classifications run completely on your device.
- Zero document telemetry: Photos and OCR text are never sent across the web.
- No cloud account required: You do not need to register with an email or password.
- Full user ownership: You maintain total control over your physical device storage.
Types of Data Processed and Purpose
Document Data (Processed locally): Document photos, extracted metadata (expiration dates, names, amounts), and barcode numbers are stored in an encrypted/isolated SQLite database on your device to enable quick lookups.
Website Analytics (Umami): The official website uses Umami Analytics, a privacy-first, cookieless analytics solution that does not track users across websites, does not store personal identifiable information, and fully complies with GDPR.
Requested Device Permissions
Integrated Third-Party Services
The free version of the application utilizes Google AdMob to display advertisements and support maintenance. AdMob may collect pseudonymous identifiers (advertising ID) in accordance with Google's policies. Optional cloud backup connects directly to your personal Google Drive account via the official Google Drive REST API.
Legal Basis of Processing
Local processing is conducted on the basis of executing the software requested by the user. Third-party advertising and crash reporting are handled under explicit consent and legitimate interest as specified in Google Play settings.
Data Retention Period
Because data is retained entirely on your smartphone, your files are stored indefinitely until you choose to delete them or uninstall the app. Uninstalling the app permanently purges all local databases and images unless you saved an external backup.
Recipients and International Transfers
GDDev never sells, rents, or transfers user document data to third parties. Any network interactions involving Google Play Services or AdMob are covered by standard contractual clauses approved by the European Commission.
Technical & Data Security Measures
Files are stored in the private application sandbox provided by the Android OS, preventing other installed apps from accessing your documents. Furthermore, CodEasy supports optional device biometric security (fingerprint/face recognition) to lock the app upon launch.
Protection of Minors
The application does not knowingly collect information from children under 14 years of age.
Data Subject Rights (GDPR Arts. 15-22)
Under GDPR, you have the right to access, rectify, port, or erase your data at any time. Because your data is on your own device, you exercise these rights directly within the app by editing or deleting your documents, or clearing app storage in Android settings.
Right to Lodge a Complaint
If you believe our data handling infringes data protection laws, you have the right to lodge a complaint with a supervisory authority, such as the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or the supervisory authority of your EU Member State.
Updates to This Privacy Policy
This policy may be updated periodically to reflect new features or legislative changes. The most current version is always available on this page.