Privacy Policy

Overview

PDF Editor is an offline document editor for iPhone, iPad and Mac. It was built on a simple principle: the documents you open are often the most sensitive files you own — contracts, receipts, medical letters, passports — and they should never leave your control. This policy explains what the app handles, where it lives, and what travels over the network (nothing).

The app collects nothing

We do not collect, store, transmit, sell, or share any personal data. There is no analytics, no crash reporting, no advertising, and no user account. There is no sign-up and no login. We do not build a profile of you, and there is nothing to opt out of.

• No account — the app never asks who you are.
• No analytics or crash reporting SDK of any kind.
• No advertising and no ad identifiers.
• No email capture and no onboarding gate.

Network requests the app makes

None. The app has no network entitlement at all.

This is worth stating precisely, because it is a stronger promise than "we respect your privacy". An app must declare the capabilities it needs; PDF Editor does not declare network access, so the operating system will not grant it. Your documents cannot be uploaded because there is no route by which to upload them — not because we have chosen not to.

Where your data lives

Documents stay wherever you keep them — on your device, or in a file provider you have chosen such as iCloud Drive. The app reads and writes them where they are and keeps no copy of its own, beyond a working file used to protect against data loss while you are editing.

Text recognition, page detection and every other kind of processing run entirely on your device. Nothing is sent away to be recognised, converted or analysed.

Saved signatures are stored in a file inside the app's own storage, readable only by this app and protected so that it cannot be read while the device is locked. The file is excluded from backups, and nothing about a signature is synced. A signature never leaves the device it was created on.

The list of recent documents is stored on your device as security-scoped bookmarks. You can turn it off and clear it at any time in Settings.

Camera and photos

The camera is used only while you are scanning, and the images are processed on your device. Importing from your photo library uses the system picker, which gives the app access only to the items you pick. Scans become a PDF you control; nothing is uploaded, and no image is kept anywhere else.

Sharing is yours to initiate

When you tap Share, the app hands your document to the system share sheet, and you choose where it goes — Mail, Messages, AirDrop, a file provider, or another app. From that point the receiving app's and service's own terms and privacy policy apply. The app itself never sends anything on your behalf.

Your documents, your responsibility

You are responsible for the documents you open, edit, redact, sign and share, and for keeping your own backups. Editing a PDF is not risk-free: always check the result before relying on it, and keep the original until you have.

Redaction removes the page objects that intersect the areas you mark and saves without an incremental revision, so removed content is not recoverable from the saved file. You must still check the result yourself before sharing a redacted document.

Children’s privacy

The app collects no data from anyone, of any age. It is not directed at children, and because nothing is collected there is nothing to delete.

Changes to this policy

If this policy changes, the updated version will be posted here with a new date at the top. Because the app collects nothing, any change is likely to be a clarification rather than a change in what we do.

Contact

Questions about this policy? Email Show email address.