Privacy Policy for PDF Craft

Last updated: September 15, 2026 · Effective: September 15, 2026

This Privacy Policy describes how PDF Craft ("We", "Us", "Our") collects, uses, and protects your information when you use our application. By using PDF Craft, you agree to the practices described in this policy.

1. What is PDF Craft?

PDF Craft is a mobile application that provides tools to view, edit, convert, compress, secure, scan, and otherwise work with PDF and image files.

On your device: browsing and opening files, viewing PDFs, comparing PDFs, and scanning documents with the camera.
On our servers: most editing and conversion tools. When you run one, the file you selected is uploaded, processed, and the result is returned to your device. Files sent for processing are deleted from our servers immediately after the tool finishes — we do not keep a copy of your documents.

2. Information We Collect

2.1 Account Data

PDF Craft is "guest-first". On first launch we create an anonymous guest account identified only by a random ID — no name or email required. If you create a full account or sign in, we collect:

Email address
First and last name (optional)
Password (stored as a secure hash — never in plaintext)

You may also sign in using Google, in which case we receive your Google-verified email and basic profile (name, profile picture) via OAuth.

2.2 Files on Your Device

To let you browse, open, and save documents anywhere on your phone, PDF Craft asks for permission to access files on your device (on recent Android versions, "All files access"). The app uses this access only on your device to list folders, show and open your PDFs and images, and save tool results (by default to an ilvPdf folder in your internal storage). Browsing your files does not upload them. A file leaves your device only when you run a server-based tool on it (section 2.4) or upload it to your own Google Drive (section 2.6).

2.3 Document Scanner

The scanner uses your camera through Google's ML Kit document scanner, provided by Google Play services. Scanning, edge detection, and cropping happen on your device, and the scanned pages are saved to your device. They are uploaded only if you choose an option that needs our servers (for example "Merge to PDF").

2.4 Files You Process

When you use a tool that requires server processing, the PDF or image file you select is uploaded to our backend over an encrypted (HTTPS) connection, processed, and the result returned to your device. We use your files solely to perform the tool you requested, and we delete both the input and the output from our servers right after processing. We do not read, share, or retain the content of your files. Uploads are limited in size (currently 50 MB per file); larger files are rejected before upload.

2.5 Data Stored Only on Your Device

To make the app convenient, PDF Craft keeps some information locally in the app's storage on your phone. It is not sent to our servers:

Your recently opened files, favourite files, recently used and favourite tools
Your theme and language choice, and tool settings you've used before
Password hints you choose to save when protecting a PDF. These are stored on your device without encryption, so don't use the actual password as a hint. You can remove them in Settings → Storage → Password Hints → Clear.

Uninstalling the app or clearing its data removes this information. Files the app saved into your storage (such as tool results) stay until you delete them.

2.6 Google Drive (Optional)

If you choose to connect Google Drive in the Cloud tab, you sign in with your Google account and PDF Craft requests permission to:

View your Google Drive files, so the app can list them and let you open, download, share, or use them in a tool; and
Create files in your Drive, so the app can upload files you choose into a PDF Craft folder.

Drive files move directly between your device and Google Drive. We do not store your Drive files, your Drive file list, or your Google access tokens on our servers. A Drive file reaches our servers only if you download it and then run a server-based tool on it, and it is handled like any other processed file (section 2.4).

PDF Craft's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Drive data for advertising, do not sell it, and do not use it to train AI models.

You can disconnect at any time with Sign out in the Cloud tab, or revoke access at myaccount.google.com/permissions.

2.7 Purchases

Credits are bought through Google Play In-App Purchases. We receive a purchase token and order ID from Google to verify and grant your credits, and we keep a record of the transaction (product, amount, timestamp) for accounting, fraud prevention, and refunds. So that a purchase is credited to the right account even if the app closes mid-purchase, the app attaches your PDF Craft account ID to the purchase as Google Play's obfuscated account identifier. We do not receive or store your card or payment details — those are handled entirely by Google. If a purchase is refunded or cancelled, Google notifies our servers so the corresponding credits can be revoked.

2.8 Advertising & Device Identifiers

The free version shows ads via Google AdMob — banner ads and full-screen ads — and AdMob may use your device's advertising identifier and related signals to serve and measure ads. If you watch a rewarded ad to earn credits, AdMob sends our servers a signed confirmation that includes your PDF Craft account ID, so the reward is added to the right account.

2.9 Technical & Log Data

Our servers log limited technical data (such as IP address, timestamps, request type, and your app language) to keep the Service secure, enforce rate limits, prevent abuse, and diagnose problems.

3. How We Use Your Information

To run the tool you requested (the file you selected)
To authenticate you and keep you signed in (account ID, email, tokens)
To manage credits and verify purchases and rewarded ads (purchase tokens, account ID, transaction records)
To prevent fraud and abuse and to secure the Service (IP, logs, purchase audit)
To show ads on the free tier (advertising identifier via AdMob)
To send verification and password-reset emails (email address)
To connect to your Google Drive when you ask it to (on your device only)

4. Legal Bases (EEA/UK Users)

Where the GDPR applies, we process your data to perform our contract with you (running tools, accounts, purchases), for our legitimate interests (security, fraud prevention, improving the Service), to comply with legal obligations, and — for advertising where required — based on your consent.

5. How We Share Information

We do not sell your personal data. We share it only with service providers that help us run the Service:

Google — Sign-In, Google Drive (only if you connect it), Play Billing and the Play Developer API (purchase verification and refund notifications), AdMob (advertising and rewarded-ad verification), and the ML Kit document scanner (on-device, via Google Play services)
Our hosting/infrastructure provider — to run the backend
Authorities — where required by law or to protect rights and safety

Third-party policies: Google Privacy Policy · Google Ads/AdMob · Google API Services User Data Policy

6. Data Retention

Uploaded files: deleted from our servers immediately after processing.
Account data: kept while your account exists; removed or anonymised after you delete your account, subject to records we must keep by law (e.g. purchase/tax records).
Guest accounts: expire and become eligible for deletion after a period of inactivity.
Purchase and credit records: kept as long as needed for accounting, refunds, fraud prevention, and legal obligations.
Logs: kept for a limited period for security, then rotated and deleted.
Data on your device (section 2.5): stays on your device until you clear it, clear the app's data, or uninstall the app.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:

Delete your account at any time in the app: Settings → Account → Delete account
Disconnect Google Drive with Sign out in the Cloud tab, or at myaccount.google.com/permissions
Remove saved password hints in Settings → Storage → Password Hints
Reset your advertising ID or opt out of personalised ads in your Android device settings
Contact us at laxmi.solutions.2025@gmail.com for any other request

8. Security

We protect data with encryption in transit (HTTPS), hashed passwords, signed access tokens, and access controls. No method of transmission or storage is 100% secure, but we work to protect your information and delete processed files promptly.

9. Children

PDF Craft is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, please contact us.

10. International Transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.

11. Changes to This Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide notice in the app. Previous versions remain available on this page.

12. Contact

Laxmi Solutions — laxmi.solutions.2025@gmail.com