Maglet Privacy Policy

Maglet Privacy Policy

# Maglet Privacy Policy

**Effective 11 September 2026**

This privacy policy applies to the Maglet Android app. It explains what data

Maglet accesses, what stays on the device, what leaves the device, why it is

processed, and how it is deleted.

For privacy questions or requests, contact

[maglet@canaster.in](mailto:maglet@canaster.in).

Shared-storage access

## Shared-storage access

If you grant **All files access**, Maglet periodically searches readable shared

storage for supported documents. It skips `Android/data` and `Android/obb`.

Maglet accepts PDF files. It accepts JPEG, PNG, and WebP images when their path

identifies a document, download, or scan location.

For automatic discovery, Maglet records the source path, file size, and

modification time. It copies each accepted file into app-private storage and

computes a SHA-256 content fingerprint to avoid duplicate copies. Discovery can

run in the background after access is granted. You can revoke this access in

Android settings.

Camera scanning

## Camera scanning

When you tap **Scan**, Maglet opens the Google Play services ML Kit document

scanner. Gallery import is disabled. Maglet requests a PDF result and copies that

PDF into app-private storage. The scanner interface, models, and processing

logic are supplied by Google Play services.

Google states that ML Kit Android SDKs collect device and app information,

device or installation identifiers, performance metrics, API configuration,

input and output sizes, feature versions, event types, and error codes for

diagnostics and usage analytics. Google states that this data is encrypted in

transit and is not transferred by ML Kit to third parties. See

[Google's ML Kit data disclosure](https://developers.google.com/ml-kit/android-data-disclosure).

Data stored on the device

## Data stored on the device

Maglet stores its private copy of each accepted document and a local database.

The database can contain:

- the document title and MIME type;

- issuer or person, relevant dates, names, identifiers, summary, and search

text extracted or inferred from the document;

- virtual-folder names, descriptions, and memberships;

- the model name, index version, and numerical search embedding;

- the content fingerprint, byte size, source path, and source modification

time; and

- processing state, retry times, service endpoint, HTTP status, error code,

and request identifier.

The current Maglet app has no user sign-in or cloud archive. It does not upload

the local archive to a Maglet or Canaster account. Opening and sharing use

Maglet's private copy through an Android content URI.

Data sent off the device

## Data sent off the device

Maglet automatically sends a document for organisation after it is scanned or

discovered. The request goes over HTTPS to `https://api.canaster.in/v1`.

- For a PDF whose text can be extracted on the device, Maglet sends the

filename, the complete extracted text, and the current virtual-folder

catalogue.

- If usable PDF text cannot be extracted, Maglet sends the filename, complete

PDF, and current virtual-folder catalogue.

- For a JPEG, PNG, or WebP document, Maglet sends the complete image, filename,

and current virtual-folder catalogue.

- To create a document's search index, Maglet sends AI-generated search text.

- When you type a search, Maglet first searches locally. It then sends the query

text to obtain a semantic-search embedding.

Pending organisation can continue in the background when a network connection

is available. This processing is used to identify document facts, generate a

title and summary, assign virtual folders, create search data, and retrieve

documents.

Processing services

## Processing services

The production processing service uses Daptin as its gateway and OpenRouter as

its AI provider. Current document-understanding requests use Google Gemini

through OpenRouter. Current embedding requests use an OpenAI embedding model

through OpenRouter. These processors receive the request data needed for the

operation.

The handling and retention of content and request metadata by these processors

is governed by their applicable privacy terms, endpoint policies, and service

account settings. OpenRouter states that it stores request metadata and that

prompt and response logging depends on account settings. Downstream model

providers can have separate retention rules. See

[OpenRouter data collection](https://openrouter.ai/docs/guides/privacy/data-collection)

and

[OpenRouter provider logging](https://openrouter.ai/docs/guides/privacy/provider-logging).

Maglet does not create a server-side document library. Contact

[maglet@canaster.in](mailto:maglet@canaster.in) to request deletion of an

identifiable service record.

Retention and deletion

## Retention and deletion

Maglet keeps local archive data until you delete the affected document, clear

Maglet's app data, or uninstall Maglet.

A confirmed **Delete** removes Maglet's private copy and database entry. When the

document came from automatic shared-storage discovery, the same confirmed

Delete also removes the exact recorded source file from shared storage. Maglet

does not move, rename, edit, or delete a shared-storage source without that

confirmed Delete action.

Processing services can retain content or request metadata as permitted by

their terms, endpoint policies, and account settings.

Sharing and sale

## Sharing and sale

Maglet shares document and query data with the processors named above only to

provide document organisation and semantic search. Maglet has no advertising

SDK. Maglet does not sell personal or sensitive user data. Data can also be

disclosed when required by law or when needed to protect rights, safety, and

service security.

Security

## Security

Maglet uses app-private storage, disables Android backup for the app, and

requires HTTPS for its processing endpoint. No security measure can guarantee

absolute protection.

Your choices

## Your choices

You can use camera scanning without granting All files access. You can revoke

All files access in Android settings. You can pause pending online

organisation. You can delete individual documents, selected documents, or all

documents in a virtual-folder subtree.

Children and policy changes

## Children and policy changes

Maglet is not directed to children who cannot lawfully consent to this

processing. This policy can change when Maglet's data practices change. The

effective date identifies the current version.