Privacy Policy for PDF Craft

Last updated: July 3, 2026 · Effective: July 3, 2026

This Privacy Policy describes how PDF Craft ("We", "Us", "Our") collects, uses, and protects your information when you use our application. By using PDF Craft, you agree to the practices described in this policy.

1. What is PDF Craft?

PDF Craft is a mobile application that provides tools to view, edit, convert, compress, secure, and otherwise work with PDF and image files. Some tools run on your device; others send the file you select to our servers for processing and return the result. Files sent for processing are deleted from our servers immediately after the tool finishes — we do not keep a copy of your documents.

2. Information We Collect

2.1 Account Data

PDF Craft is "guest-first". On first launch we create an anonymous guest account identified only by a random ID — no name or email required. If you create a full account or sign in, we collect:

Email address
First and last name (optional)
Password (stored as a secure hash — never in plaintext)

You may also sign in using Google, in which case we receive your Google-verified email and basic profile (name, profile picture) via OAuth.

2.2 Files You Process

When you use a tool that requires server processing, the PDF or image file you select is uploaded to our backend over an encrypted (HTTPS) connection, processed, and the result returned to your device. We use your files solely to perform the tool you requested, and we delete both the input and the output from our servers right after processing. We do not read, share, or retain the content of your files.

2.3 Purchases

Credits are bought through Google Play In-App Purchases. We receive a purchase token and order ID from Google to verify and grant your credits, and we keep a record of the transaction (product, amount, timestamp) for accounting, fraud prevention, and refunds. We do not receive or store your card or payment details — those are handled entirely by Google.

2.4 Advertising & Device Identifiers

The free version shows ads via Google AdMob, which may use your device's advertising identifier and related signals to serve and measure ads.

2.5 Technical & Log Data

Our servers log limited technical data (such as IP address, timestamps, and request type) to keep the Service secure, enforce rate limits, prevent abuse, and diagnose problems.

3. How We Use Your Information

To run the tool you requested (the file you selected)
To authenticate you and keep you signed in (account ID, email, tokens)
To manage credits and verify purchases (purchase tokens, transaction records)
To prevent fraud and abuse and to secure the Service (IP, logs, purchase audit)
To show ads on the free tier (advertising identifier via AdMob)
To send verification and password-reset emails (email address)

4. Legal Bases (EEA/UK Users)

Where the GDPR applies, we process your data to perform our contract with you (running tools, accounts, purchases), for our legitimate interests (security, fraud prevention, improving the Service), to comply with legal obligations, and — for advertising where required — based on your consent.

5. How We Share Information

We do not sell your personal data. We share it only with service providers that help us run the Service:

Google — Sign-In, Play Billing, the Play Developer API (purchase verification), and AdMob (advertising)
Our hosting/infrastructure provider — to run the backend
Authorities — where required by law or to protect rights and safety

Third-party policies: Google Privacy Policy · Google Ads/AdMob

6. Data Retention

Uploaded files: deleted from our servers immediately after processing.
Account data: kept while your account exists; removed or anonymised after you delete your account, subject to records we must keep by law (e.g. purchase/tax records).
Guest accounts: expire and become eligible for deletion after a period of inactivity.
Logs: kept for a limited period for security, then rotated and deleted.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:

Delete your account at any time in the app: Settings → Account → Delete account
Contact us at laxmi.solutions.2025@gmail.com for any other request

8. Security

We protect data with encryption in transit (HTTPS), hashed passwords, signed access tokens, and access controls. No method of transmission or storage is 100% secure, but we work to protect your information and delete processed files promptly.

9. Children

PDF Craft is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, please contact us.

10. International Transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.

11. Changes to This Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide notice in the app.

12. Contact

Laxmi Solutions — laxmi.solutions.2025@gmail.com