DocuWunder Get the app
Privacy

Your data is none of our business

Last updated: October 2, 2026 · covers the DocuWunder app and this website · translation for convenience, the German version prevails

The short version

DocuWunder connects your device directly to your own Paperless-ngx archive. Your documents never pass through our servers. The app contains no tracking, no ads and no analytics – neither our own nor anyone else’s. The only time you talk to a server we run is when you try the demo (see “The demo server”).

The principle

The app is a window onto your archive. Everything you see and change travels directly between your device and your server, using the address you entered yourself. No detours, no copies stored with us, no account with us.

On iPhone, requests go straight to your server through the iOS networking layer – no browser in between, no stop along the way. Whoever runs your server decides what gets logged there; that’s outside the app’s control.

What stays on your device

Server address and access tokenOn iPhone, the access token is kept in the iOS Keychain – on this device only, excluded from backups and never moved to another device. In the browser, it lives in the web app’s storage. It is only ever sent to your server. It expires after 30 days without use, and signing out deletes it immediately.
CacheThumbnails, so the app stays fast. Clear them any time in Settings with “Clear local data”.
PreferencesColor scheme and display options – they stay on the device.

Delete the app and all of this is gone. Your documents stay untouched on your server.

What the app doesn’t do

No tracking, no behavioral analytics, no advertising identifiers
No connections to third-party servers – even fonts and icons ship with the app
No sharing or selling of data – we simply don’t have any
No crash reports sent to third parties
This website sets no cookies and loads nothing from third-party servers

Permissions the app asks for

Each one only when you first use the feature – and each one optional:

CameraFor scanning. Images go straight into your archive; without the camera you can still add files and photos.
Photos and filesRead-only, and only for what you pick.
Face ID / Touch IDOnly if you turn on the app lock. iOS does the check; the app only learns whether it succeeded. Biometric data never reaches the app.

Apple: App Store, purchases and ratings

Downloads, updates and optional in-app purchases are handled by Apple through your Apple Account; we never see payment details. When the app asks for a rating, iOS shows the dialog and your rating goes to Apple, not to us. Apple’s privacy policy applies.

The demo server

So you can try things out without an archive of your own, the app includes access to a public demo instance. We run it ourselves (controller: see below) on a server in Germany (hosting: Contabo GmbH, Munich).

What is loggedIP address, time, requested address and app or browser identifier of each request, in the server logs – for security and troubleshooting (Art. 6(1)(f) GDPR), deleted after 14 days at the latest.
What you uploadIs visible to everyone currently using the demo and disappears at the next reset. Please don’t upload real or personal documents there.
What isn’tNo personal account, no analysis, nothing linked to you. As soon as you sign in to your own archive, the app stops talking to the demo server.

This website

The website runs on the same server in Germany (hosting: Contabo GmbH, Munich). Visiting it creates the same server logs as the demo server (IP address, time, address, browser identifier; deleted after 14 days at the latest). No cookies, no analytics, no content from third-party servers.

The App Store privacy label

On the App Store, DocuWunder is listed as “Data Not Collected”. We mean that literally: there is no category of data the app collects, links or ties to you. The short-lived logs of the demo server exist only to keep it running and are never analyzed.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority. Because your data stays with you, you can handle most of this yourself: delete sign-in and local data in the app, and manage your documents on your own server. For anything about this website, the demo server or support emails, just write to us.

Controller and contact

Damien Frigewski
George-Stephenson-Str. 6, 1. Etage
10557 Berlin, Germany
Email: dfrigewski@gmail.com

More details in the legal notice. If you email us, we use your address and message only to reply, and delete both once the matter is closed.

When something changes

If anything important changes in this policy, you’ll find it here with a new date – we won’t change it quietly.