Effective date: October 10, 2026 • Last updated: October 15, 2026
Application: Caliba (Android) • Package: com.polyforge.magicpage • Developer / Publisher: PolyForgeOnline • Contact: support@polyforgeonline.com
Caliba processes supported documents, scans, and OCR text locally on your device during normal in-app workflows. All PDF viewing, editing, scanning, OCR text recognition, QR/barcode scanning, Studio, and Invoicing happen locally on-device in private application storage (context.filesDir / context.cacheDir) or via Android Storage Access Framework (SAF) / Android Photo Picker (PickVisualMedia). PolyForgeOnline does not operate a cloud document-processing service for these workflows, and Caliba does not upload document contents to PolyForgeOnline-operated servers as part of normal local processing.
During normal in-app document processing, Caliba handles scans, extracted text, and PDF content locally. The app's advertising and diagnostic components may process technical information as described in this policy; this is separate from the processing of document content.
If you choose to share, export, print, or open a file in another application or service, that destination may receive the file. The receiving application or service may store or transmit it according to its own functionality and privacy practices. Caliba does not control how that destination handles the file after sharing.
Caliba declares and requests only the minimum Android permissions required for document productivity, advertising, and subscription features:
android.permission.CAMERA: Camera permission (android.permission.CAMERA) — requested only at runtime for local scanning/capture. Used locally via Android Jetpack CameraX, OpenCV, and bundled Google ML Kit for real-time document boundary detection, document capture, and QR/barcode scanning. All frames are processed in volatile memory on-device and are never uploaded or transmitted.com.google.android.gms.permission.AD_ID: Android Advertising ID permission injected by Google Mobile Ads SDK (version 24.4.0) on the free ad-supported tier to serve ads, detect fraud, and manage ad frequency. Inactive for Caliba Pro users. Can be reset or deleted anytime in Android Settings.android.permission.INTERNET & android.permission.ACCESS_NETWORK_STATE: Used exclusively for third-party SDK network operations: Google Mobile Ads ad delivery, Google User Messaging Platform (UMP) consent checks, Google Play Billing purchase verification, and optional user-initiated font downloads from raw.githubusercontent.com/google/fonts for PDF rendering. Document content never touches the network.On the free tier, Caliba displays advertisements served by Google Mobile Ads SDK (v24.4.0). Google may process the Android Advertising ID (AD_ID), approximate IP location, ad interaction events, and SDK diagnostics for advertising, analytics, and fraud prevention. Advertisements and ad tracking are disabled for Caliba Pro users.
In applicable regions (including the EEA, UK, and Switzerland), Caliba uses the Google User Messaging Platform (UMP) to request consent before initializing ads. Users can review, update, or revoke consent choices at any time via Manage Ad Privacy in the app navigation drawer or reset/delete their advertising identifier in Android System Settings (Settings → Google → Ads).
Caliba Pro upgrades (docnextg_pro_monthly, docnextg_pro_yearly, docnextg_pro_lifetime) are processed exclusively through Google Play Billing. PolyForgeOnline never receives or stores payment card, banking, or billing address details. Subscriptions can be managed or cancelled anytime via Google Play Store (Subscriptions). Refunds are governed strictly by Google Play refund policies.
When a user explicitly taps to download an optional font in the app, Caliba makes a read-only HTTPS request to raw.githubusercontent.com/google/fonts and transmits zero user or document data.
Google ML Kit sends operational technical diagnostics to Google (play.googleapis.com) such as latency, error codes, and device model; these diagnostics contain no document images or extracted text. Google Mobile Ads processes ad-related telemetry on the free tier. Google Play Billing verifies subscription entitlement tokens.
All SDK network communications use HTTPS/TLS encryption. PolyForgeOnline operates no user account system. Documents are stored in private sandbox storage and can be deleted individually in-app or permanently cleared by uninstalling the application. Advertising ID can be reset or deleted via Android Settings.
If you have questions about privacy, contact us at support@polyforgeonline.com.