Privacy Policy

WhiteLake Pty Ltd (ACN 642 302 887) · Last updated 23 September 2026

Our approach to privacy

WhiteLake Pty Ltd (“WhiteLake”, “we”, “us”) makes Docusy, a document scanner for iPhone, iPad and Mac. We respect your right to privacy and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what information the Docusy app does — and does not — collect, and how it is handled.

In short: your scanned documents stay on your device, Docusy does not require an account, and the only information we receive is de-identified app-usage and crash diagnostics that are not used to identify you (to improve the app) and the purchase information needed to provide subscriptions — plus, only if you choose to invite friends, a minimal invite record kept in Google Cloud Firestore.

Your documents stay on your device

Everything you do with your documents in Docusy happens locally on your device. Scanning, image enhancement, text recognition (OCR), receipt and data extraction, translation, and signing are all performed on-device using Apple’s built-in frameworks. The contents of your documents — images, recognised text, extracted data and translations — are never uploaded to WhiteLake or sent to any third party. They stay in the app’s local storage on your device unless you choose to share or export them yourself.

Information we collect

Docusy does not require you to create an account or sign in, and we do not ask for your name, address, phone number or payment-card details. The information we do receive falls into four categories.

1. Analytics and diagnostics

To understand how the app is used and to fix problems, Docusy uses Google Firebase (Analytics, Crashlytics and Remote Config). Through these services we may receive:

  • App-usage and feature-interaction events — for example which screens are viewed and which features are used, with parameters such as the selected language, export format, page count, subscription plan and price, and error codes. This data is not used to identify you personally.
  • Crash and diagnostic logs — when the app encounters an error or crashes, technical details (the error type and message, and the location in the code) are recorded so we can diagnose and fix it.
  • A device/app-instance identifier generated by Firebase; your IP address may also be seen by Google’s servers as part of delivering these services.

Analytics collection is disabled in development builds. This information is processed on our behalf by Google as our service provider — see Google’s privacy policy at policies.google.com/privacy and Firebase’s data practices at firebase.google.com/support/privacy.

2. Purchases and subscriptions

Docusy is free to download. Some premium features are unlocked through an optional auto-renewing subscription purchased via Apple’s in-app purchase system. Apple processes all payments — we never receive or store your payment-card details. We use RevenueCat to manage subscriptions and verify entitlements; RevenueCat receives purchase and transaction information and your subscription status. See RevenueCat’s privacy policy and Apple’s privacy policy.

3. Information you send us

If you contact us — for example by emailing Press support@whitelake.com.au — we receive your email address and whatever information you choose to include, so that we can respond.

4. Inviting friends (optional)

Docusy lets you invite friends so that you each get a free week of Docusy Premium. Only if you use this feature, Docusy stores the following in Google Cloud Firestore, a database operated by Google (Firebase) on our behalf and hosted in Google’s Australian region (Sydney):

  • Your invite code — the six-character code you share with friends, and when it was created;
  • Accepted invites — when a friend accepts an invite, which code they used and when they started using Docusy with it.

Each record is labelled with a pseudonymous identifier: a hashed (scrambled) form of the ID the App Store assigns when an Apple Account downloads Docusy. It is not your name, email address or Apple Account, and invites do not need an iCloud account. The records contain no names, email addresses, contacts or document content, and are used only to credit free weeks and to stop an invite from being used twice. The Docusy app reads these records to see that a friend has accepted your invite. To protect the invite records from misuse, the app also asks Apple and Google (Firebase App Check) to confirm that requests come from a genuine copy of Docusy; this check does not use your personal information. We keep invite records while the invite feature is available, and delete them 24 months after the last activity on the record. To have your invite records deleted sooner, email support@whitelake.com.au and include your six-character invite code so we can find them — we will delete them within 30 days, except for the minimum needed to stop an invite reward being claimed twice.

Your friend’s free week is redeemed through Apple’s App Store offer codes, so Apple handles the redemption like any other App Store purchase.

Invite records are stored in Google’s Sydney region. Google may access them from other countries, including the United States, to operate, support and secure its services, under its data processing terms. For users in the EEA or UK, these transfers are protected by the European Commission’s Standard Contractual Clauses, which are included in Google’s terms.

How we use this information

  • To operate, maintain and improve the Docusy app and its features;
  • To diagnose crashes and fix bugs;
  • To provide and manage subscriptions and premium features;
  • To respond to your support requests and feedback.

We do not sell your personal information, and we do not use the contents of your documents for any of these purposes.

Disclosure and third parties

We do not disclose your personal information except to the service providers that help us run the app, namely:

  • Google (Firebase) — analytics, crash reporting and remote configuration, and (only if you use the optional invite feature) storing invite records in Cloud Firestore;
  • RevenueCat — subscription management;
  • Apple — app distribution and payment processing.

We may also disclose information where required by law, such as in response to a valid legal request. These providers may store and process data on servers located outside Australia, including in the United States. Where information is transferred overseas, these providers operate under recognised safeguards (such as standard contractual clauses or the EU–US Data Privacy Framework), and we take reasonable steps to ensure it is handled consistently with this policy.

How long we keep information

Usage data associated with the Firebase app-instance identifier is retained for no more than 14 months, and crash reports for around 90 days, after which they are deleted or survive only in aggregated, non-identifying form. Purchase and subscription records are kept for as long as needed to provide and verify your subscription. Emails you send us are kept only as long as needed to handle your enquiry and for a reasonable period afterwards. Invite records (see “Inviting friends” above) are deleted 24 months after the last activity on the record.

Security

We take reasonable steps to protect information from misuse, loss and unauthorised access. No method of transmission or storage is completely secure; while we and our providers use appropriate safeguards, we cannot guarantee absolute security.

Access, correction and your choices

Because Docusy stores your documents only on your device and requires no account, most of your information never leaves your control. You can:

  • Stop analytics and diagnostics at any time by uninstalling the app;
  • Manage or cancel a subscription in your Apple ID / App Store settings;
  • Request access to, or correction of, any personal information we hold about you, in accordance with the Privacy Act, by emailing support@whitelake.com.au.

Complaints

If you have a complaint about how we handle your personal information, please contact us at support@whitelake.com.au, or write to us at 13 Ferris Street, Annandale, New South Wales, 2038, Australia. We take complaints seriously and will respond as soon as practicable. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If you are in the EEA, UK or Switzerland

Docusy is available worldwide. If you are in the European Economic Area, the United Kingdom or Switzerland, we process the limited personal data described above on these legal bases: our legitimate interest in understanding how the app is used and fixing problems (analytics and diagnostics), the performance of a contract with you (providing the app, subscriptions and support), and compliance with legal obligations where applicable.

If you use the optional invite feature, we process invite records because this is necessary to provide the invite offer you chose to use (Article 6(1)(b) GDPR), and in our legitimate interest in preventing misuse of the offer (Article 6(1)(f)), which covers the checks that stop a reward being claimed twice.

You also have the rights provided by the GDPR and equivalent laws — to access, correct, delete or receive a copy of your personal data, to restrict or object to its processing, and to lodge a complaint with your local supervisory authority. To exercise any of these rights, email support@whitelake.com.au. Please note that analytics data is held against a random app-instance identifier rather than your identity, so if we cannot link data to you we may be unable to fulfil some requests, as permitted by Article 11 GDPR.

Children

Docusy is not directed at children and we do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes take effect when posted on this page, so please review it periodically. The “last updated” date above shows when it was last revised.

Contact us

WhiteLake Pty Ltd (ACN 642 302 887)
Email: support@whitelake.com.au
13 Ferris Street, Annandale, New South Wales, 2038, Australia