TagoKoto Privacy Policy

Last updated: 4 November 2026

This Privacy Policy explains how the TagoKoto Android app (package com.alexpolo01.tagokotoapp) and this website handle information. TagoKoto is a vault for documents, images and saved logins that you keep on your own phone.

1. Who is responsible

TagoKoto is developed and published by ALEX POLO (“the developer”, “we”, “us”).

Contact for privacy questions: alexpolo01@gmail.com

2. What the developer collects

The app does not send your data to the developer. There is no TagoKoto account and no TagoKoto server. We do not receive your documents, images, recognised text, tags, folders, saved logins, PIN, backup passphrase or Google account email address. The app contains no advertising, analytics or crash-reporting service added by the developer.

There are a few limited cases where we may receive information:

• If you email us. We receive your email address and whatever you choose to write or attach. We use it only to reply to you. Retention: alexpolo01@gmail.com. Please do not send us copies of sensitive documents.
• Google Play statistics. If you install TagoKoto from Google Play, Google provides developers with install statistics and with crash and performance reports from devices whose owners have chosen to share diagnostic data with Google. Google collects these, not the app. They are covered by Google's privacy policy.

3. What you store in the app

Everything you put in TagoKoto stays in the app's private storage on your device. This can include sensitive information such as identity documents, contracts, financial or medical paperwork, and passwords. The vault holds:

• documents and images you scan or import (PDF, JPEG, PNG) and their thumbnails;
• text recognised from your documents;
• metadata you add: titles, tags, folders, favourites, “Private” markings and expiry dates;
• earlier versions of documents you replace (version history);
• a private-view activity log on your device recording when protected items were opened;
• saved logins in the built-in password manager: site, email address or username, password, and an optional link to a document;
• app settings, and security data such as a hash of your PIN.

The vault is kept in app-private storage. Android does not let other apps read it, so your documents do not appear in your gallery, file manager or photo-backup apps. TagoKoto does not request access to your shared storage or media.

4. How your vault is protected

• Encrypted files. Document and image files are encrypted with AES-256-GCM before they are written to storage. The key is generated randomly on your device.
• Encrypted database. Titles, tags, folders, recognised text, saved logins, the activity log and settings are kept in a database encrypted with SQLCipher. It uses a separate key, also generated randomly on your device.
• Keys on your device. The encryption keys are kept in Android's Keystore-protected secure storage on your device. They are not sent to the developer.
• PIN. Your PIN is not stored. The app stores only a salted, one-way hash of it (PBKDF2).
• Biometric unlock (optional). Fingerprint or face checks are handled by Android. The app learns only whether a check succeeded. It never receives your biometric data.
• Other protections. TagoKoto locks automatically when you leave it or after a period of inactivity. It blocks screenshots and screen recording on screens that show vault content. You can mark items or folders “Private” so they need a second unlock. When you copy a saved password, it is marked as sensitive to Android (on Android 13 and later), and the app clears the clipboard after 45 seconds if the password is still there.

No security measure is perfect. Your protection also depends on your device, your PIN and how you use the app. While the vault is unlocked, its content can be seen on screen. Any copy you share or export is outside the vault's protection.

5. Scanning and text recognition

Camera scanning uses Google's ML Kit document scanner, which Google Play services provides. Google documents that this scanner runs on the device. The app receives only the pages you choose to keep.

TagoKoto uses ML Kit text recognition to read text in your documents so you can search it and get tag suggestions. Recognition runs on your device. The app does not upload your documents or their text for this.

6. Google components in the app

TagoKoto relies on Google Play services and Google's ML Kit for document scanning, text recognition and Google sign-in. Google states that ML Kit features may contact Google servers, for example to download models or updates. Google also states that they may send Google diagnostic and usage information, such as device and app information, identifiers, performance metrics and error codes. Google controls this information, not the developer, and we do not receive it. See Google's ML Kit data disclosure and the Google Privacy Policy.

7. Permissions

• Camera: to scan documents when you choose to.
• Biometrics (fingerprint or face): to let you unlock the app if you turn biometric unlock on.
• Notifications and vibration: to remind you about document expiry dates you set. A reminder shows the document's title and expiry date. Depending on your device settings, it may appear on your lock screen.
• Network access: used for Google sign-in and the optional Google Drive backup, and by the Google components described in section 6.

When you import a file, you choose it in Android's file picker, and the app receives only the files you pick. TagoKoto does not request access to your location, contacts, or shared storage and media.

8. When data leaves your device

Your vault content leaves the app only through actions you choose.

Sharing a document

“Share” gives an unencrypted copy of the document to the app you pick in Android's share menu, such as an email or messaging app. The app warns you before doing this. From then on, that app and anyone you send the file to control the copy, under their own terms and privacy policies. We do not receive it, and we cannot delete it.

Password-protected PDF export

This creates a PDF copy protected with a password you choose and hands it to the app you pick. Anyone with the file and the password can open it. Choose a strong password and share it separately.

Time-limited copy

This writes a temporary unencrypted copy inside the app's private storage and passes it to the app you pick. TagoKoto deletes its temporary copy right after sharing, after 15 minutes, when the app locks or when the app restarts, whichever comes first. This does not delete any copy the receiving app has already saved.

Optional Google Drive backup

Cloud backup is off by default. If you turn it on and connect a Google account:

• Where it goes: to your own Google Drive, in a folder named “TagoKoto Backups”. The app asks only for Google's drive.file permission, which limits it to files the app created. TagoKoto does not use any server of its own for this.
• What is sent: each document's file, title, file type and recognised text, plus all saved logins. These are encrypted on your device with AES-256-GCM before upload. The key comes from a backup passphrase you choose (using PBKDF2). The passphrase is never stored or sent.
• What is visible without your passphrase: the folder name and file names (random identifiers), and a manifest file listing them. The manifest also contains the technical values needed to derive the key from your passphrase. The number, size and timing of backup files are also visible. Your Google account email address is used by Google sign-in and shown in the app. It is not sent to the developer.
• Google's role: Google provides the sign-in and stores the backup files under your Google account terms and Google's privacy policy. The developer cannot access your Google account or Drive.
• Limits: backups run only when you tap “Back up now”. Tags, folders, favourites, “Private” markings, expiry reminders, version history, the activity log, settings and your PIN are not included. If you lose your backup passphrase, nobody can decrypt the backup.

Android device backup

TagoKoto does not currently opt out of Android's own system backup. If your phone backs up app data to your Google account, Android may include TagoKoto's private storage. The vault's files and database are encrypted before they are written to storage, so they would be included only in encrypted form.

9. Keeping and deleting your data

On your device

• Your content stays on your device until you delete it.
• Deleting a document permanently removes it, its encrypted file and its earlier versions from the vault.
• Settings → Delete all data (requires your PIN) deletes your documents, files, tags, folders, version history, activity log and settings. It also erases the vault's encryption keys and your PIN from the device's secure storage.
• Uninstalling TagoKoto, or clearing its storage in Android settings, removes all of the app's private storage from the device.
• If you turn on the optional setting that erases the vault after repeated wrong PIN attempts, the vault is deleted when that limit is reached.

What you must remove yourself

• Google Drive backups are not deleted when you delete a document, delete all data or uninstall the app. Later backups also do not remove documents you have since deleted from the vault. To remove backups, delete the “TagoKoto Backups” folder from your Google Drive. Disconnecting Google Drive in the app removes the app's access to your Drive, but it does not delete files already stored there.
• Shared or exported copies stay in the apps and with the people you sent them to. Delete them there.
• Android device backups are managed in your device and Google account settings.

Data held by the developer

Because TagoKoto has no accounts and the developer does not receive your app data, we hold no app account or vault content to delete. To ask us to delete correspondence you sent us, contact us using the details below.

Recovery

Your encryption keys stay on your device and the developer holds no copy of your data. If you forget your PIN, lose your device, or delete your data without a backup you can restore, we cannot recover your documents.

10. This website

This website is a set of static pages. It uses no cookies, no analytics, no advertising and no forms, and it does not ask you for any information. The hosting provider processes standard technical request data, such as IP address and browser type, to deliver the pages and protect the service, under its own privacy policy.

11. Children

TagoKoto is a general productivity app and is not directed at children. The developer does not knowingly collect personal information from children. The app itself does not send personal information to the developer.

12. Your choices and requests

You control your data in the app. You can view, edit, export, back up and delete it, and you can leave Google Drive backup off. Depending on where you live, you may have legal rights over personal information that the developer holds, such as rights of access or deletion. Since we hold no app data, such requests would cover only correspondence you have sent us. Contact us to make a request.

13. Changes to this policy

If the app's handling of data changes, we will update this policy on this page and change the “Last updated” date above.

14. Contact

ALEX POLO
Email: alexpolo01@gmail.com