PDF Tools privacy

Older 1.0.x versions used cloud conversion

The earlier PDF Editor 1.0.x app used the Aspose cloud service for document conversion. Choosing that conversion feature could send your file to the conversion provider. The local-processing description here applies to the rebuilt update; it is not a promise that every operation in an older installed version stays on the device.

Check your installed version before converting a sensitive file. If you are unsure which version or conversion path you use, contact app@vircit.com before sending the document.

Who is responsible

VIRCIT OÜ is responsible for this app’s personal-data processing. Registered company details are in the legal notice. For app privacy questions or requests about your data, contact app@vircit.com.

Why we process personal data

Our GDPR grounds depend on the purpose:

• Providing requested subscription access, entitlement checks, restoration and optional downloads: performance of our service contract, Article 6(1)(b).
• Optional workflow statistics and enabled reminder messaging: your consent, Article 6(1)(a). You can withdraw it in the app’s settings; this does not affect earlier lawful processing or the separate subscription service.
• Answering general support enquiries and following up on reported problems: our legitimate interest in helping customers and resolving issues, Article 6(1)(f). Support needed to provide your purchased service also forms part of that service contract.
• Protecting subscription access against misuse: our legitimate interest in keeping the service secure, Article 6(1)(f), limited to information necessary for that purpose.
• Records required by applicable law: compliance with the relevant legal obligation, Article 6(1)(c).

Optional measurement is not a condition of buying or using paid document tools. The providers named below can have separate responsibilities and legal grounds for their own processing.

Documents and recognized text

Imported PDFs, page images, annotations, signatures and recognized text are stored in the app’s local library. The rebuilt app’s document tools do not upload document content for PDF processing, OCR or conversion.

You control the files you import and the copies you export, share or print. Selecting a cloud-backed file may first download it from that provider. Sharing, saving to another provider or printing can send a document to the destination you choose; that destination has its own practices. A local operation does not make a document exported elsewhere private.

Local documents remain until you delete them or remove their app data. Keep independent exports of important files. Android’s rebuilt-app policy excludes its data from cloud backup and device transfer; uninstalling or replacing the device does not automatically restore the library, PIN or app identity. iOS system backups and file-provider behavior depend on the platform and your settings. The app PIN protects access to the app; it does not encrypt an exported PDF.

Optional text-recognition downloads

Device OCR and optional downloaded language packs run recognition on the device. The optional PaddleOCR packs are downloaded from Hugging Face and its delivery subdomains. These requests expose the technical connection information needed to deliver the files, such as an IP address and request time. Device OCR can also require platform-managed language downloads. Your document is not part of the model-download request. Once the pack is installed, its recognition can be used offline. Languages and recognition quality depend on the selected engine and version.

Subscriptions and necessary online processing

Apple or Google handles store payment details. Apphud helps the configured app associate purchases and subscription status with an app profile, restore access and present subscription information. These services use app/profile identifiers, purchase and entitlement information, device/app information and technical connection data. Turning off optional workflow statistics does not stop the network activity needed for these separate subscription services.

We do not ask you to send payment-card details to support. Purchases, restoration and status refresh can require a connection. Existing cached access is checked according to subscription state; this notice does not promise permanent offline paid access. Store records and service-provider records can remain subject to their applicable retention and legal requirements.

Provider privacy information

Read the providers’ own information for their services: Apphud Privacy Policy, Apple Privacy Policy, Google Privacy Policy and Firebase privacy and security information, plus Hugging Face Privacy Policy for optional pack downloads. Which services apply depends on your platform, installed version and enabled features. These links do not replace this app notice.

Optional workflow statistics

Share usage statistics is off by default. If you enable it, the app records allowlisted workflow metadata: UTC day, workflow type, app version, platform and started, completed, failed or cancelled outcome. The local history is bounded to 500 events and can be exported. When Apphud is configured, best-effort outcome counters and the latest completion day can be associated with the existing app profile. This is pseudonymous data, not a promise of anonymity.

These events exclude document names, contents, recognized text, file paths, page images, document identifiers, receipt bodies and raw exception bodies. Disabling statistics stops new measurement and publisher calls, invalidates queued work and clears local history. It cannot recall information already transmitted. Missing statistics do not establish that a person did not use the app.

Notifications and permissions

Notifications are optional. Where configured and enabled, Apple Push Notification service, Firebase Cloud Messaging and Apphud can process a device push token, app/profile association and delivery information to provide reminders or app messages. You can change the app’s notification choices and the system permission. Device and provider delivery remain dependent on the installed build and configuration.

Camera, files/photos and biometric access are used for the document or unlock action you choose. A request for system permission explains the relevant purpose. Support does not need your biometric data or app PIN.

Support and your choices

If you email app@vircit.com, we receive your address, message, any attachments you choose and delivery information needed to reply. Include only what is needed. Do not send private documents, passwords, PINs, store sign-in links or complete payment details unless a specific safe support process has been agreed.

We use support correspondence to answer and follow up on your request. It is retained while needed for that purpose, an active related issue, applicable record-keeping duties or legal claims; service-provider copies may follow separate retention cycles. Online service providers may process data outside your country. Contact us for the relevant recipients and transfer safeguards. Deleting local files does not automatically erase store transactions or previously transmitted service records.

You can delete local documents, disable optional statistics or notifications, and ask us about app-profile data. Removing the app does not cancel a store subscription; manage that in the store account that purchased it. We update the notice when relevant processing changes.

Your data protection rights

Subject to applicable conditions, you can request access, correction, deletion, restriction or portability of your personal data by emailing app@vircit.com. You may object to processing based on our legitimate interests for reasons connected with your situation. We will stop unless overriding grounds or legal claims justify continuing. Consent can be withdrawn at any time without affecting prior lawful processing.

You can complain to the Estonian Data Protection Inspectorate or the competent authority where you live, work or believe an infringement occurred in the EU/EEA.