Privacy Policy for iPDF

Last updated: August 16, 2026

iPDF ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how our ecosystem handles your information.

The iPDF Ecosystem

The iPDF ecosystem is built entirely around our advanced library synchronization feature, connecting our mobile and desktop platforms. This ecosystem is designed to give you a unified, seamless experience to sync and manage your library across all your devices, while prioritizing your privacy and data security.

Data Collection and Usage

We do not require user accounts or collect personally identifiable information such as your name, email address, or phone number. By default, all documents and files processed by our ecosystem are stored locally on your device. If you choose to use our optional synchronization feature, your data is handled securely as described below.

Cloud Synchronization (Optional)

We offer an optional synchronization feature that allows you to seamlessly sync your library and reading progress across a maximum of 3 personal devices within the iPDF ecosystem.

• Zero-Knowledge Architecture: Your master keys are hashed locally on your device. Our servers only receive and store this irreversible hash. The servers are entirely blind to your original key, and your cloud data folders are strictly named and isolated using this hash, providing a zero-knowledge storage model.
• End-to-End Encryption: All your files, text, and library data are encrypted locally on your device before being transmitted to our servers. We do not hold the decryption keys, meaning we cannot read, access, or decipher any of your synced content.
• Ephemeral Pairing Codes: The one-time passwords (OTP) used to link your devices are strictly ephemeral. They are immediately deleted from our servers upon either a successful connection or the closure of the pairing window, eliminating any window of vulnerability.
• Anti-Brute Force Protection: To prevent code-guessing attacks, device-specific identifiers are used to protect the synchronization process. The system includes protections against repeated pairing attempts to significantly reduce the feasibility of brute-force attacks.
• Data Retention: Your encrypted files are securely stored on our servers strictly for the purpose of keeping your connected devices in sync.
• Data Deletion: You have full control over your data. If you choose to unlink all your connected devices from the synchronization service, all your encrypted files and associated data will be immediately and permanently deleted from our servers.

Permissions

Our applications may require the following permissions to function depending on the platform:

• Camera: Used solely for scanning physical documents. Images are processed locally and are not transmitted to us.
• Photo Library / Storage: Used to allow you to import images or PDFs from your device for processing.
• Notifications: We request access to notifications to alert you when text extraction is complete while the application is active in the background.
• Microphone: Used to allow you to send voice messages in the ask iPDF feature.

Third-Party Services (Data Processors)

We use the following third-party services to provide advanced functionality. Your data may be processed outside your country of residence when utilizing these services:

• Default OCR: The default OCR service uses the iPDF server for text extraction. No files or images are retained, and they are deleted from the server immediately after processing is complete.
• Classic OCR: The classic OCR service also relies on the iPDF server for text extraction. Files are deleted immediately after processing is complete.
• Google LLC (Gemini API): We use this service for AI-powered text extraction from your documents. When you choose to extract text, the content of the document is sent to Google's servers for processing.
  • Please refer to Google's Privacy Policy for more information on how they handle data.
• Mistral AI (if selected): Used as an alternative OCR provider.
  • Please refer to Mistral AI's Privacy Policy.

Data Storage

Unless you opt-in to the Cloud Synchronization feature, all scanned documents, extracted text, and library items are stored entirely locally on your device using your device's internal storage mechanisms. When using synchronization, your data remains fully encrypted during transit and while at rest on our servers. When you uninstall the app, local data is removed (subject to your OS backup settings).

Technical Logs

We may temporarily process technical information required for operating and securing the service, such as server logs (which may include IP addresses and error reports). These logs are retained only as necessary for security and troubleshooting purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. We encourage you to review this page periodically for any changes.