Privacy Policy — Smart PDF Scanner & Editor
This policy explains what data Smart PDF Scanner & Editor accesses, how it is used, and what is — and is not — sent off your device. Smart PDF Scanner & Editor is designed to run entirely on-device. We do not operate a backend, do not require an account, and do not show ads.
1. Summary
| Data sent to our servers | None. We do not run a server. |
| Personal data we collect | None. No name, email, phone, location, contacts, or device identifiers. |
| Analytics / tracking SDKs | None. |
| Advertising SDKs | None. |
| Third-party data sharing | None. |
| Account required | No. |
| Children's data | We do not knowingly collect data from children under 13. |
Everything you scan, edit, sign, convert, or annotate stays on your device unless you explicitly share it (e.g., via the system Share Sheet, email, or by copying it to a folder you choose).
2. What data the app accesses on your device
Smart PDF Scanner & Editor processes the following data locally on your device in order to provide its features. Nothing in this section leaves your device.
2.1 PDF and document files
- Files you explicitly open via the Android Storage Access Framework (SAF) picker.
- PDFs / images you import from your gallery for scanning, conversion, or signing.
- Word (.docx) files you import for Word → PDF conversion.
- Files produced by the app (scanned PDFs, edited PDFs, exports, signed PDFs) saved to
Downloads/PagePilot/andPictures/PagePilot/on your device.
2.2 Camera images
- Photos captured by the in-app document scanner.
- Used solely to build the resulting PDF and discarded once processing completes. The full-resolution camera frames are not retained after the scan session ends.
2.3 OCR text
- Text extracted from PDFs and scanned images via Google ML Kit's on-device text recognition.
- ML Kit runs locally on your device — recognition does not require an internet connection after the model is downloaded once (see §3).
- Extracted text is shown to you for copying, sharing, or saving inside the resulting PDF as an invisible searchable layer. We do not store or transmit the recognized text.
2.4 Signatures
- Signatures you draw or type are stored on-device as image files in the app's private storage so you can re-use them.
- You can delete saved signatures at any time by long-pressing them in the signature library row.
2.5 Recent files
- The app keeps a local Room database of the files you have recently opened, containing: the file URI, the display name, file size, page count, and last-opened timestamp.
- Used only to populate the "My Scans" and "Recent" lists in the app.
- Cleared when you remove items from the list, uninstall the app, or clear the app's data.
2.6 Settings
- App preferences (dark theme choice, OCR language) are stored locally via Android Jetpack DataStore.
3. Network use
Smart PDF Scanner & Editor declares the INTERNET permission for one
purpose: allowing Google Play Services to download the on-device ML Kit
text-recognition models the first time you use OCR. After the model is on your
device, OCR works fully offline.
- No telemetry is sent to us.
- No file content is uploaded to any server.
- ML Kit's behavior is governed by Google's own privacy policy: https://policies.google.com/privacy
4. Permissions and why we ask for them
| Permission | Why it is needed |
|---|---|
CAMERA | Capture photos in the document scanner. |
INTERNET | Allow Google Play Services to fetch ML Kit OCR models once. No other network traffic. |
android.hardware.camera (feature, not required) | Declared so the app can run on devices without a camera (other features still work). |
The Storage Access Framework picker is used for reading and writing files,
so Smart PDF Scanner & Editor does not request the broad
READ_EXTERNAL_STORAGE / MANAGE_EXTERNAL_STORAGE
permissions. You see and approve each file the app touches.
5. Third-party libraries
Smart PDF Scanner & Editor is built with the following libraries. None of them transmit your file content off-device:
- Google ML Kit (text recognition, document scanner) — runs on-device after a one-time model download via Google Play Services.
- AndroidX CameraX — captures camera frames locally.
- PdfBox-Android (tom_roush), Pdfium-Android (legere) — render and edit PDFs locally.
- Apache POI — read/write Word .docx files locally for the PDF↔Word converters.
- AndroidX Room, DataStore, Navigation, Compose — Android framework libraries used locally.
- Coil — local image loading into the UI.
We do not include Firebase, Google Analytics, Crashlytics, Facebook SDK, ad networks, or any other tracker SDK.
6. Data sharing
We do not sell, rent, or share any data with third parties. We do not have your data to begin with — it stays on your device.
When you tap Share inside the app, Android shows you the system share sheet so you can choose where to send the file. That hand-off is your decision and is governed by the privacy policy of the app you pick (e.g. WhatsApp, Gmail, Drive).
7. Data retention and deletion
Because we do not collect data, there is nothing for us to delete.
To remove data on your device:
- Delete a PDF / scan from "My Scans" → "Remove from list" also deletes the file from disk.
- Long-press a saved signature in the signature picker to delete it.
- Clear the app's storage from Android Settings → Apps → Smart PDF Scanner & Editor → Storage → Clear data to wipe the recents database, settings, and signature library.
- Uninstall the app to remove everything we put on the device.
Files you have already exported to Downloads/PagePilot/,
Pictures/PagePilot/, or any folder you picked via SAF are normal
user files — uninstalling the app does not delete those, and
you can delete them from your file manager.
8. Children's privacy
Smart PDF Scanner & Editor is not directed at children under 13. We do not knowingly collect any personal information from children. Because the app does not collect personal information from anyone, this section is included for completeness.
9. Security
Files processed by the app stay in your device's storage and are protected by Android's standard sandboxing. Files we write into the app's private storage (cache, recents database, signature library) are not readable by other apps. The optional Password tool encrypts a PDF using AES via PDFBox; the password is never stored by us — losing it means the PDF cannot be recovered.
10. Your rights
Since we do not collect personal data, there is no data subject request to make to us. Local data control sits with you — see §7.
If you are in the EU/UK, you have rights under the GDPR/UK GDPR (access, erasure, portability, etc.). Because we are not a controller of any data about you, these rights are exercised by you directly on your device (uninstall / clear data).
11. Changes to this policy
If we update this policy we will publish the new version at the URL listed in the app (Settings → Privacy policy) and update the Effective date above. Material changes will be flagged in the app's release notes on Google Play.
12. Contact
Questions or feedback about this policy:
Email: babaleshkumar97iitg@gmail.com
Appendix — Google Play Data Safety form answers
The following table maps to the Google Play Console Data safety section. Use it directly when filling out that form.
| Question | Answer |
|---|---|
| Does your app collect or share any of the required user data types? | No |
| Is all of the user data collected by your app encrypted in transit? | N/A (no data is transmitted) |
| Do you provide a way for users to request that their data is deleted? | Yes — uninstall the app or clear app data from system settings; "Remove from list" also deletes the file from disk. |
| Does your app comply with the Families policy? | Not designed for children under 13. |
| Are you committed to following the Play Families Policy? | Not in the Designed for Families program. |
| Independent security review | None claimed. |
Per-category answers
- Location — Not collected.
- Personal info (name, email, address, phone, race/ethnicity, etc.) — Not collected.
- Financial info — Not collected.
- Health and fitness — Not collected.
- Messages (email, SMS, in-app) — Not collected.
- Photos and videos — Accessed on-device only, not collected by the developer. Used to perform the user-requested operation (scan, convert, sign). Not transmitted.
- Audio files — Not accessed.
- Files and docs — Accessed on-device only, not collected by the developer. Used to perform the user-requested operation. Not transmitted.
- Calendar — Not accessed.
- Contacts — Not accessed.
- App activity (interactions, search history, installed apps) — Not collected.
- Web browsing — Not accessed.
- App info and performance (crash logs, diagnostics, performance data) — Not collected. We do not include Crashlytics or any equivalent SDK.
- Device or other IDs (advertising ID, IMEI, MAC, etc.) — Not collected.
Security practices
- Data is encrypted in transit: N/A — no data is transmitted.
- Users can request that their data is deleted: Yes — uninstall or clear app data.
- Following Play Families policy: app is not in Designed for Families.
- Independent security review: none.