DWG OfficeZip
Support

DWG OfficeZip — Privacy Policy

Android and iOS (iPhone, iPad) app · package com.mahmuttari.dwgviewer

Effective: 30 September 2026 · Last updated: 14 October 2026 · Türkçe

Summary: DWG OfficeZip has no app server of its own, and the app sends no personal data to the developer. Drawings and documents you open are processed on your device. The app connects to the internet only for features you use: the basemap you choose, address search, servers you configure and, on Android, Google Drive. On Android, if you have connected your Google account, the app also reads the test user list from this website (5.6). The free edition of the Android app shows Google AdMob ads; the iPhone and iPad app shows no ads. No analytics or tracking tools are used.

1. Controller and contact

The app is developed and published by Mahmut Tarı as an individual developer. For privacy questions, deletion requests and notices: support@dwgofficezip.com

E-mails you send to this address (your address, name and whatever your message contains) are used only to answer your request, are not shared with third parties and are not kept longer than needed once the request is resolved; they are deleted when you ask.

2. Scope

This policy covers the Android app on Google Play and the iPhone / iPad app prepared for the App Store. Both use the same drawing viewer: sections 3 and 4 apply to both. Android-only topics are in section 5, iPhone- and iPad-only topics in section 6.

3. Data processed on your device

DataWhyWhere it stays
Drawings and documents you open or create in the app (DWG, DXF, DGN, PDF, office documents, CSV, text, archives, images)Viewing, measuring, editing, creating new files, exportingOn your device. Parsing and file creation happen on the device. The app does not send your files to the developer or to any third party; a file leaves the device only in uploads, downloads and shares that you start (sections 4 and 5).
Notes, photo notes, saved views, recent files, thumbnails, settingsOpening the app with your preferences and where you left offOn your device.
LocationOnly when you turn on GPS, to show where you are on the drawing or mapOn your device, used momentarily. The app does not store your location or send it anywhere. If a basemap is on, map tiles for the area on screen are requested from the provider you chose (section 4).
Camera imageScanning QR codes; on iPhone and iPad also when you choose to take a photo for a noteQR images are decoded on the device and are neither stored nor sent. A photo you add to a note stays on the device with the note.
Map provider API keys (optional)Using an Esri, Google, Azure Maps, HGM Atlas or Mapbox basemap with your own keyOnly on your device (on Android also excluded from device backups). A key is sent only to its own provider, inside map requests.
Server addresses you enter (WMS, XYZ, server index)Getting maps or files from those serversOn your device.
Error logSo you can see later why something went wrongOn your device (on Android excluded from device backups). It is never sent automatically; only if you choose to share it, it goes to the app you pick.
Subscription statusDeciding whether paid features are unlockedPurchases and payment are handled by the store (Google Play or the App Store). The app keeps only the active plan and its period on the device.
Purchase diagnostics (Android only)Finding the cause of a purchase problem on Google PlayOn your device: a technical record of the purchase steps (error codes, plan and period names, app and device version). It is never sent automatically; it leaves the device only if you copy it in the Diagnostics window and choose to send it to us.

4. Features that connect to the internet

These connections are made only when you use the feature. With every internet request the other side sees your device's IP address and standard technical information (such as the browser component's identifier). These providers process what they receive under their own privacy policies; the developer has no access to it.

FeatureWhat is sentTo whom
Basemap (off by default)Map tile requests for the area on screen, which reveal the map area you are looking at and the zoom level. For Google and Azure Maps also the bounds of the visible area (for the copyright notice); for Google, when a session is opened, the map type, language and region. Your own key, if you entered one.The provider you choose: OpenStreetMap Foundation (tile.openstreetmap.org); Esri (server.arcgisonline.com, ibasemaps-api.arcgis.com, static-map-tiles-api.arcgis.com; for historical imagery wayback.maptiles.arcgis.com and Esri's release list file hosted on Amazon S3, s3-us-west-2.amazonaws.com); with your own key Google Maps Platform (tile.googleapis.com), Microsoft Azure Maps (atlas.microsoft.com), HGM Atlas (atlas.harita.gov.tr) or Mapbox (api.mapbox.com); or a WMS / XYZ server you enter.
Capture date of satellite imageryWhile an Esri satellite or historical imagery basemap is selected: the coordinate of the point in the centre of the screen and the zoom levelEsri imagery metadata service (metadata.maptiles.arcgis.com); once, Esri's list of imagery versions (s3-us-west-2.amazonaws.com) to find which version to ask
Zone from address (address search in the coordinate system picker)The address text you type. Province and district are matched offline first; when you stop typing, the address is searched online, limited to Türkiye.Nominatim, OpenStreetMap Foundation (nominatim.openstreetmap.org)
Map in the coordinate system pickerMap tile requests for the visible areaThe provider of your selected basemap; OpenStreetMap if no basemap is selected or if Google, Mapbox or WMS is selected
Server index and links in QR codesA file download requestThe server at the address you enter or in the QR code you scan
Opening links, sharing, opening in another appThe file, text, link or coordinate you chooseThe app or website you choose
Test user list (Android only, only while a Google account is connected)A request to download the list, at most once a day. Your e-mail address and other account details are not sent; the comparison happens on the device (5.6).This website (dwgofficezip.com/testers.json) and its hosting service

Providers' privacy policies: Google · Apple · OpenStreetMap Foundation · Esri · Microsoft · Mapbox

5. Android app (Google Play)

The topics in this section apply to the Android app only.

5.1 Google sign-in and Google Drive (optional)

Connecting Google Drive is optional. If you choose to connect, you sign in on Google's own page in the browser (OAuth 2.0 with PKCE) and the app requests these scopes: openid, email, profile and https://www.googleapis.com/auth/drive. The access is used only for actions you start in the app:

  • Account information (name, e-mail, profile photo): kept on the device to show which account is connected; the profile photo is loaded from Google's server.
  • Access and refresh tokens: kept on the device so you do not have to sign in every time, encrypted with an AES-256/GCM key generated in the Android Keystore, and excluded from device backups.
  • Your Drive files: browsing and searching Drive, opening files (Google Docs, Sheets and Slides are fetched as PDF), making offline copies, uploading, creating folders, and deleting, sharing or unsharing a file you choose. When you share a file with a specific person, the e-mail address you type is sent to Google and Google sends that person a notification e-mail. Files move directly between your device and Google; there is no server in between.
  • Converting an office document to PDF: when you choose this, the document is temporarily uploaded to your own Drive, converted to Google's format, downloaded as PDF, and the temporary copy is deleted from Drive.

DWG OfficeZip's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. Accordingly:

  • Google user data is used only to provide user-facing features.
  • Google user data is never used for advertising and never transferred to ad networks.
  • Google user data is never sold.
  • Google user data is not read by humans, except with your explicit consent and only for the duration of a support request you raise. The app has no server, so your data is not accessible to the developer anyway.

Revoking access: tapping Sign out on the Google Drive card in Files › Cloud deletes the tokens and account information from the device and sends a revocation request to Google. You can also remove access at any time on your Google Account's third-party apps & services page.

5.2 WebDAV servers (optional)

If you configure your own WebDAV server, its address, username and password are kept on your device; the password is encrypted with an AES-256/GCM key generated in the Android Keystore, and these records are excluded from device backups. They are sent only to the server you entered.

5.3 Advertising (free edition only)

The free edition of the Android app shows Google AdMob interstitial ads. To serve and measure ads and to prevent abuse, Google may process your device's advertising ID, your IP address and technical information about the device. Google processes this data under its own policy; the developer has no access to it. Details: How Google uses information from sites or apps that use its services.

Where the law requires it (for example in the European Economic Area and the United Kingdom), a consent form is shown through Google's User Messaging Platform (UMP) before ads are requested. Paid plans (Ad-Free, Premium, Super) show no ads; the app does not start the ads SDK and does not request ads.

5.4 Google Play

Subscriptions are bought, renewed and cancelled through Google Play Billing; your payment details stay with Google and are not passed to the developer. The app also uses Google Play's in-app update service to check whether a new version is available.

5.5 License codes

If you were given a license code, it is verified on the device without going online; the licensee name and expiry date inside the code are kept only on the device.

5.6 Test users

People invited to try the app can have paid plans unlocked until a set date. For this the developer publishes a signed list on this website (dwgofficezip.com/testers.json). The list contains no readable e-mail addresses, only a salted SHA-256 hash of each address, the plan unlocked and the end date. This hash, and the developer's own record used to build the list, are the only personal data the developer keeps, and only for people who agreed to be test users.

While a Google account is connected, the Android app downloads this list at most once a day and compares your connected account's hash on the device; your e-mail address is not sent to the website. As with any web request, the hosting service can see your IP address and the browser component's identifier during the request (section 13). If no Google account is connected, the list is never requested. The iPhone and iPad app has no such feature. To be removed from the test user list, just write to support@dwgofficezip.com.

6. iPhone and iPad app (App Store)

The iPhone and iPad app uses the same drawing viewer, so sections 3 and 4 apply to it as well. Differences from Android:

  • No ads. The app contains no ads SDK, does not use the advertising identifier and does not track you across apps.
  • No Google sign-in, no Google Drive and no WebDAV.
  • Purchases are handled by Apple. Subscriptions are bought, renewed and cancelled through the App Store (StoreKit); your payment details stay with Apple. The app only reads from StoreKit, on the device, which subscription is active.
  • Nothing is sent to the developer. The error log stays on the device.
  • Updates come from the App Store. The app has no update check of its own.
  • Files you save go to the app's documents folder and appear in the Files app under On My iPhone (On My iPad) › DWG OfficeZip.

7. Permissions

All permissions are optional and are requested when you use the related feature. If you decline, only that feature does not work; you can withdraw permissions at any time in the device settings.

PermissionAndroidiPhone and iPad
LocationWhen you turn on GPS (precise or approximate location)When you turn on GPS, only while the app is in use
CameraWhen scanning a QR codeWhen scanning a QR code and when taking a photo for a note
PhotosNot requested; you pick images with the system file picker and the app can access only the file you pick.Access to your photos may be requested when you add a photo to a note or open an image, and add-only access when you save an exported image to Photos.
FilesNot requested; you open files with the system picker or with "Open with / Share". If you add a folder in Open file, access is granted to that folder only.Not requested; you open files from the Files app or the share sheet.

8. Sharing of data

We do not sell, rent or share personal data for marketing. Data leaves your device only in the cases below, and each time it is started by a feature you use:

  • Map and address services — the providers in section 4.
  • Servers you configure — WMS / XYZ, server index, a link in a QR code; WebDAV on Android.
  • Google (Android) — when you connect Google Drive; ad delivery in the free edition; Google Play purchases and updates.
  • Apple (iPhone and iPad) — App Store purchases.
  • This website (Android) — downloading the test user list while a Google account is connected; your e-mail address is not sent (5.6).
  • Share / open in another app — the app you choose.

Because the developer has no app server, your in-app data is not held by us. The developer holds only the e-mails you send for support (section 1) and, for test users, e-mail hashes (5.6).

9. Retention and deletion

App data (settings, notes, tokens, encrypted passwords, map keys, offline copies, cache) stays on your device and is removed when you uninstall the app. On Android, files you saved to Download/DWGViewer and Pictures/DWGViewer stay on the device until you delete them; on iPhone and iPad, saved files are deleted together with the app. Files in your Google Drive and on your own servers stay there.

If your device's own backup is on (Android backup, or an iCloud / computer backup), the app's settings and notes may be included in it. On Android, sign-in tokens, server passwords, map keys and the error log are excluded from backups. Step-by-step deletion: Account and Data Deletion.

10. Children's privacy

The app is intended for engineering and technical use, is not directed at children under 13 and does not knowingly collect data from children.

11. Security

Connections to the app's built-in services (map providers, address search, Google, the stores) use HTTPS/TLS. On Android, unencrypted connections to Google sign-in, Drive and advertising domains are blocked at operating-system level. Google tokens and server passwords are encrypted with an AES-256/GCM key generated in the Android Keystore. If a server address you enter starts with http://, the connection to that server is not encrypted; use https:// where possible.

12. Your rights (GDPR and Turkish Law No. 6698)

You have the right to access, correct and delete your data and to object to its processing. Because your data is kept on your device, you can exercise these rights directly on the device (signing out in the app, clearing app data, uninstalling). You can also write to support@dwgofficezip.com about any request; you will receive an answer within 30 days at the latest.

13. This website

dwgofficezip.com sets no cookies and loads no analytics, advertising or third-party resources (fonts, scripts). Your language choice is stored only in your browser's local storage. The hosting provider may keep technical request data, such as IP addresses, in server logs in order to serve the pages.

14. Changes

If this policy is updated, the "Last updated" date on this page changes; significant changes are announced in the app.