Privacy policy

01The short version

• Your papers (photos and PDFs of documents such as Aadhaar, PAN, driving licence, RC, insurance, certificates) are encrypted and stored on your phone.
• If you turn on the cloud copy, the app encrypts everything on the phone first and stores only encrypted data in the place you pick: the hidden app folder of your own Google Drive, your WebDAV/Nextcloud server, a pendrive or a phone folder.
• From Google the app asks for one permission only: https://www.googleapis.com/auth/drive.appdata. It cannot see or change your other Google Drive files.
• The developer runs no server, has no account system, and never receives your papers, your PIN or your encryption keys.
• No ads, no analytics of our own, no selling or sharing of data.

02What stays on your phone

Everything you add lives in the app's private storage on your phone, encrypted with a key held by the Android Keystore. This includes the paper pages, the details the app reads from them (type, number, name, expiry date, words for search), your folders, people and vehicle groups, notes, your emergency card and a log of copies you shared.

Reading a paper happens on the phone. Text recognition and QR reading use Google ML Kit models that are built into the app and run on the device; your images are not sent anywhere to be read. PDF signature checks also run on the phone.

The app turns off Android's own cloud backup of its data, so the system does not copy it to Google on your behalf. The only copy that ever leaves the phone is the encrypted one described next, and only if you turn it on.

03The encrypted copy

The cloud copy ("vDrive cloud") is off until you turn it on and choose where it goes. When it is on:

• A random 256-bit key is created on your phone. Pages and the list of papers are encrypted with AES-256-GCM using keys derived from it. Object names are derived with HMAC, so names of your papers are not visible either.
• That key is never uploaded in readable form. A copy of it is locked with your 6-digit PIN (Argon2id, then AES-256-GCM) and stored next to the data, so that you, on a new phone, can open your copy with the PIN.
• The encrypted objects are written to the storage you chose and kept up to date when your papers change (on Wi-Fi, unless you allow mobile data). Nothing goes to the developer.

To show you which account is connected, the app reads the e-mail address of the connected account from that storage service and keeps it only on your phone.

04Google user data

If you connect Google Drive, Leet Drive uses Google's sign-in on your phone and requests a single OAuth scope:

What the app does with it

• Stores encrypted objects in the hidden app folder: your encrypted papers, the encrypted list of papers, the PIN-locked key, and encrypted backups of Leet Assistant and Leet Browser (section 07).
• Reads those same objects back to sync, and to restore your papers on a new phone.
• Deletes objects it no longer needs, and all of them when you tap "Remove the copy".
• Reads your account e-mail address (from the Drive API "about" information) once, to show you which account is connected. It stays on your phone.

All of this happens directly between your phone and Google. The data in the folder is encrypted before upload, so Google cannot read your papers, and the developer never receives the data, the e-mail address or your sign-in tokens.

05Limited Use

In plain words: data from your Google account is used only to provide the backup and sync feature you turned on. It is not used for ads, not sold, not used to build profiles, not used to train AI models, and not read by any person. It is not transferred to anyone else; it only moves between your phone and your own Google Drive.

06Other storage you choose

Instead of Google Drive you can choose another place. The same end-to-end encryption applies to every one of them.

Each storage provider's own privacy policy applies to your account with them. They hold only encrypted data from Leet Drive.

07Backups of other Leet apps

Leet Assistant and Leet Browser (by the same developer) can hand their own backups to Leet Drive on the same phone. Only apps signed with the developer's key can do this. Each app encrypts its backup itself before handing it over; Leet Drive never opens it. Leet Drive keeps the two newest copies of each on the phone and, if the cloud copy is on, puts them, encrypted again, in your chosen storage.

08Permissions, and why

The app does not ask for your location, contacts, call log, SMS or microphone. Files you add come from Android's file picker, so the app sees only the files you pick.

09Third-party code

• Google Play services sign-in: shows Google's own sign-in and permission screen when you connect Google Drive. Google's privacy policy applies to your Google account.
• Google ML Kit (text recognition, barcode scanning): runs on the phone. Google states that ML Kit may send limited diagnostic and usage information about the library itself (for example performance and errors) to Google; it does not send your images or the text read from them. See ML Kit terms.
• Open-source libraries for PDFs and cryptography run entirely on the phone.

There are no advertising, analytics, crash-reporting or tracking SDKs in the app.

10How to delete your data

The cloud copy

• In Leet Drive, open vDrive cloud and tap Remove the copy. The app deletes every Leet Drive object from that storage. Your papers stay on the phone. "Turn off" only stops syncing and leaves the copy where it is.
• To stop all access from Google's side, remove Leet Drive at myaccount.google.com/permissions.
• To delete the hidden app folder from Google's side as well, open Google Drive on the web, go to Settings → Manage apps, find Leet Drive and choose Delete hidden app data.
• For a WebDAV server, pendrive or phone folder you can also delete the Leet Drive files there yourself (on WebDAV they are in the Leet vDrive folder).

On the phone

Delete single papers in the app, or uninstall Leet Drive (or clear its storage in Android Settings) to remove everything it stored on the phone.

We hold no copy of your data, so there is nothing for us to delete on request. If you need help, write to us (section 14).

11Security and honest limits

• All network traffic to storage services uses HTTPS.
• A 6-digit PIN is short. The PIN lock is made deliberately slow (Argon2id, 64 MB), but someone who already holds your encrypted copy could try many PINs offline. Use a PIN that is not easy to guess, and protect your storage account with a strong password and two-step sign-in.
• Anyone who can unlock your phone and open the app can see your papers. Turn on the app lock if others use your phone.
• Copies you share through Android's share sheet go to the app and person you choose; their handling is outside Leet Drive.

12Children

Leet Drive is not directed at children under 13. We do not knowingly collect any data from anyone, of any age.

13Changes to this policy

If the app starts doing something new with your data, this page is updated first and the effective date above changes. The app will not use Google user data in a new way without asking you.

14Contact

Leet Drive is built by an individual developer, not a company. A real person answers.

Write in English or Hindi. Grievances are acknowledged within 24 hours and resolved within 15 days.