SugarDoc

1. Summary

The app does not collect your name, email, phone number, location or contacts, and there is no sign-up. It shows no ads and uses no ad SDK and no advertising ID. Documents are opened on your device only and are never uploaded to our servers or to a conversion server.

2. How documents reach the app and where they are processed

• The app only receives documents you pass to it from another app (KakaoTalk, email, a file manager, etc.) with Open with or Share, or that you pick yourself in the Android system file picker. The app does not request all-files access or photo, media or storage permissions.
• Identifying, parsing and displaying documents, find in document, and text selection and copy all happen on your device. We run no server that receives or converts documents, and your documents and their contents are never sent to us or to third parties.
• The view that displays Korean word-processor documents (a WebView inside the app) is blocked from the internet in three ways: network loads are disabled, requests to any address outside the app are refused, and a Content Security Policy is applied. External images or addresses inside a document are not loaded in this view.
• If you tap a link inside a PDF, the app asks you first and opens the web address (http or https only) in your browser only if you agree.
• Original files are never modified or deleted. The app never writes to a file another app has passed to it.
• Password-protected documents are opened on your device with the password you enter. The password is never stored, and for protected documents no preview image, thumbnail, text excerpt or reading-position marker is stored.

3. Share, open with another app, print, save page as image

• Share and Open with another app make a temporary copy of the document and grant read access only to the app you choose. What happens next follows that app's policy. Temporary copies are kept in an app-private temporary folder and deleted within 24 hours.
• Print / Save as PDF uses the Android print framework; you choose where to print or save on the print screen.
• Save page as image (Pro) saves the page you choose as a new PNG file in your device's photo storage. For distribution-restricted documents this feature and printing are hidden.

4. Received-documents inbox and stored copies

So you can find a document again without searching through chats or email, and resume where you left off, the app keeps a copy of documents you receive.

• Copies are stored in the app's private storage on your device, which other apps cannot read. A copy's file name is a value computed from its contents; the original file name is recorded separately, on the device only, to show it in the inbox list.
• Copies and inbox records are excluded from Android backup (Google account cloud backup) and from device-to-device transfer.
• After you first open a document, the app shows a one-time notice about keeping copies. If you choose Don't keep there, or switch off Keep documents in Settings, later documents are held as a temporary copy only while you read them and deleted when you close them.
• Stored copies are cleaned up automatically: when copies take more than 500 MB in total, the least recently opened go first, and documents not opened for 90 days are deleted. Documents you have pinned and the document currently open are excluded from automatic cleanup. Documents larger than 100 MB are not kept, only held while you read them.
• When a copy is cleaned up, its list entry (display name, date received, reading position) stays, so you can resume if you receive the same document again. Removing an entry from the list, or Clear all in Settings, deletes the entry and its copy together. Your original file is untouched.
• A small thumbnail (first-page preview) is created on the device for the list, never for password-protected documents.
• Uninstalling the app deletes all copies, thumbnails, inbox records and reading positions.

5. Usage stats and crash reports

Both options are on by default, and each can be switched off in the app's Settings > Privacy. Neither ever includes document contents, file names, document hashes, file locations (URIs) or the app that sent a document. Activity from while an option was off is not sent later, even if you turn it back on.

Send anonymous usage stats (Firebase / Google Analytics)

To see at which step documents fail to open and how quickly they open, the app sends events whose values are each picked from a fixed list. No free-form text is sent.

• How the app was entered (launcher, Open with, Share, inbox, file picker)
• Document opened or failed: format (PDF, HWP, HWPX, etc.), ranges of file size, page count and opening time, the failing step and error type (for example damaged, password required, too large)
• Whether a preview or a hand-off to another app was offered, how a reading position was restored, why a non-document file was rejected
• PDF engine level, WebView version range and rendering mode
• Where the Pro screen was shown, and the kind of action used (print, share, open with another app, save page as image)
• User properties: how the app was first entered, and a range for how often it was opened directly
• Device information that Firebase sends by default (model, OS version, app version, language, app instance ID, etc.)

Send crash reports (Firebase Crashlytics)

When the app crashes or hits an error, sends technical details (error type and location, device model, OS version, app version, document engine version, WebView version range, etc.). File paths and URIs are removed from error messages before sending; document contents and file names are never included.

The advertising ID permission is removed from this app so it is never used. Turning an option off stops collection and sending from that point on. Data already sent is kept according to Google's retention settings; turning the option off in the app does not delete existing data on Google's servers. If you would like it deleted, please contact us below.

• Privacy and Security in Firebase
• Firebase SDK data disclosure

6. Pro purchase

• Pro (app lock, save page as image) is a one-time purchase through Google Play Billing (KRW 6,900 in Korea, no recurring charge). Payment details such as your payment method, name and billing address are handled by Google Play and are not shared with us.
• The app only checks the purchase state provided by Google Play to turn on Pro features. On devices using the same Google account, Restore purchase in Settings applies it again.
• Opening and reading documents is fully available without paying.
• Refunds and purchase history follow Google Play's policies and procedures. Google Play Terms of Service
• The app may show the Google Play in-app review dialog. Reviews are handled by Google Play.

7. App lock (Pro) and screen protection

• App lock uses the Android system biometric and screen-lock prompt (fingerprint, face, PIN, pattern or password). The system performs the check; the app never receives biometric data such as fingerprints or face data, or your screen-lock credentials; it only learns whether the check succeeded.
• App lock protects the app when you open it directly and the inbox. Documents opened from another app with Open with are not locked. App lock does not encrypt the document files themselves.
• In Settings you can block screenshots (off by default) and hide the app's preview in the recent-apps screen (Android 13 and later, on by default).

8. Permissions

Firebase and Google Play libraries may also declare ordinary permissions they need to work (for example WAKE_LOCK, install-referrer check); these give no access to your documents or personal information. The app does not request all-files access (MANAGE_EXTERNAL_STORAGE), photo, media or storage permissions, drawing over other apps, battery-optimization exemption, the advertising ID, location, contacts, camera or microphone. You can see the permissions the app actually declares in its Settings > Permissions this app uses.

9. Data stored on your device

• Inbox: document copies, thumbnails, display names, dates received, pinned state (section 4).
• Reading position: page, scroll position, zoom and a position marker (up to 32 characters of text near where you were reading) for each document. You can switch off remembering reading positions in Settings; no position marker is stored for password-protected documents.
• App settings: keeping documents, usage stats and crash reports, screen protection, when the Pro card was shown, the cached purchase state.
• This data lives only in the app's private storage, is excluded from Android backup and device transfer, and is deleted when you uninstall the app.

10. Processors and international transfers

We do not run servers of our own; we entrust data processing to the services below. They may process and store data outside the Republic of Korea (for example in the United States and other countries where Google operates data centers). Documents, their contents and file names are never transferred.

If you switch off usage stats and crash reports in Settings, nothing is transferred for them. Pro purchases are processed by Google Play under its own policies; we only check the purchase state.

11. Retention and deletion

Data whose retention period has ended or whose purpose has been fulfilled is destroyed without delay in a way that cannot be recovered.

12. Your rights

You can do the following yourself or by request:

• Turn usage stats and crash reports on or off at any time in the app's Settings
• Switch off keeping documents and remembering reading positions in Settings, and remove inbox entries one by one or all at once
• Ask us to access, correct, delete or stop processing data we handle, using the contact details below. Usage stats are not linked to information that identifies you directly, so please include your app version and what you are asking for; we handle what we can verify, and point you to Google's procedures for data that Google processes.

13. Third-party services and open source

The open-source components that parse and display documents (a Korean word-processor document engine, the Android PDF library and open fonts) are bundled in the app, run on your device only and send no data anywhere. License notices are available in the app's Settings.

14. Security measures

• The document view runs with network access, file access, access to other apps' content and DOM storage switched off; scripts and external resources inside documents are never run or loaded.
• Zip bombs and abnormally large documents are stopped at limits on uncompressed size and entry count, and you are offered a preview or another app instead.
• Files that are not documents are handed to another app without making a copy.
• Copies are kept in app-private storage that other apps cannot read, and excluded from backup.
• Usage stats and crash reports carry only predefined values; automated tests check that no file names, paths or URIs slip in.

15. Children's privacy

The app is not directed primarily at children under 14 and does not collect age information. If you learn that data of a child under 14 has been processed, or if you are a parent or legal guardian requesting deletion, please contact us below. We will delete what we can verify without delay.

16. Changes to this policy

If the way the app handles data changes, we update this page and its effective date. If we add ads or a feature that sends new data off your device, we will update this policy before releasing that version.

17. Contact and privacy officer

For questions about data handling, or to request access, correction, deletion or suspension of processing, please email us.

• Developer: simpest (SugarMount)
• Privacy officer: Stephen, Jeong (simpest)
• Email: sugarmount21@gmail.com
• App page: https://mvgood21.github.io/en/apps/doc-viewer/

Users in Korea can also report or seek advice on privacy violations to the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr).

Effective date: October 5, 2026