AnnaLyzer privacy policy

Status and reviewed version

Draft for the operator’s review, prepared on 6 November 2026 for AnnaLyzer 2.2.1 Gemma RC2, versionCode 12. This is an evaluation candidate; this document does not certify publication or Google Play approval.

Carlos Blanco, an individual, is the operator of Carapato Labs, this website and the AnnaLyzer and ActaFoto Pro applications. Address supplied by the operator: Carrer es es migjorn s/n, Ferreries, Menorca, Spain. Contact and privacy: info@carapatolabs.com.

Documents, photos and questions

AnnaLyzer opens documents and photos you choose, recognises text and lets you ask questions about their content using compatible installed components. It may process personal or sensitive information contained in the selected files.

Document content, questions and answers are processed on your device in the reviewed flows. No developer-operated server was found to which AnnaLyzer sends those documents to generate answers. Your chosen file provider may download a document from cloud storage under its own terms.

Camera, microphone and reading aloud

The camera is used when you choose to take a photo. Microphone access is requested for dictation, which starts through your action. Android speech recognition is used only when its on-device mode is available; a local alternative uses a downloaded model.

Reading uses bundled voices or an installed voice identified by Android as available offline. Notifications and a playback service support background reading and its controls. Files are opened using Android’s picker without general access to all device storage.

You can revoke camera, microphone or notification permissions in Android settings. The related feature may then be unavailable.

Connections, components and technical data

The app has Internet permission for functions such as optional model and component downloads. Reviewed downloads use HTTPS with providers including Hugging Face and GitHub, which receive your IP address and the technical information needed for the request.

Google ML Kit, the document scanner and Google AI components may install or update resources and transmit technical information. Provider documentation lists device and app information, per-installation identifiers, configuration, events, performance and input or output sizes for diagnostics and statistics. This technical information is distinct from locally processed document text and images.

This version is therefore not described as an app that never connects or never processes identifiers. No advertising, purchases, subscriptions or developer-operated marketing tracking tools were found in the reviewed code.

Storage and retention

The local library stores recent document references and reading progress, including items such as the title, URI, document fingerprint, pages, position and timestamps. Preferences and downloaded models or voices are also stored. They remain until removed through available controls or by clearing app storage.

Images and PDFs may be copied into private cache for processing. Normal flows clean them when content is closed or changed, but an unexpected shutdown may leave temporary files until later cleanup.

Document questions belong to the current session, with a short context held in memory. There is no conversation history hosted on a developer-operated server. Opening another document discards the previous context.

Backups and security

Automatic cloud backup and automatic transfer of private app data are disabled in the reviewed version. Original selected files remain under your control and may have separate external backups.

Private data is stored in the app’s Android-protected space. Security also depends on the device lock, updates and condition. Local processing is not an absolute guarantee against loss, unauthorised access or errors.

Deleting your data

To remove all AnnaLyzer local data, open Android Settings → Apps → AnnaLyzer → Storage → Clear data or Clear storage. You can also uninstall the app. This removes the app’s settings, private library, cache and downloads.

These actions do not delete original documents, exported files or copies stored elsewhere. Remove those separately from their locations if desired.

AnnaLyzer does not require an account, and no developer-operated server database of users was found. There is no remote account you need to request deletion of.

Support and rights

Information you voluntarily send to info@carapatolabs.com is a separate processing activity: include only what is needed and anonymise examples. Email is forwarded through Cloudflare Email Routing to a Gmail inbox; these providers handle delivery and reception. Final retention criteria and proposed legal bases for support remain subject to the operator’s review.

To exercise applicable rights, email info@carapatolabs.com. The developer cannot remotely access or delete documents stored only on your device. You may contact the Spanish Data Protection Agency.

Changes and technical documentation

The final policy must match the distributed build and Google Play Data safety declarations. Update it if engines, SDKs, permissions, downloads or storage change. Technical references: developers.google.com/ml-kit/terms and developers.google.com/ml-kit/android-data-disclosure.