PDFKit Privacy Policy

Effective October 12, 2026. Updated October 13, 2026. Version 2026-10-13-v5.

1. Scope and developer

This policy explains how the PDFKit app, its PDF and image Action extensions, and its PDF Share extension process data. It also covers information you voluntarily send when contacting support. The developer is Xu Rui (徐瑞), an individual developer. For privacy questions or requests, contact xuruiprod@gmail.com.

This policy applies to the current PDF and still-image conversion features of PDFKit. Usage rules and support information are provided in the separate PDFKit Terms of Use & Support.

2. On-device processing and no automatic collection

The app requires no account or sign-in and includes no advertising, analytics, or cross-app tracking features. It does not upload your selected PDFs, images, file names, page selections, ordering, watermark text, or PDF passwords to developer servers, or automatically send conversion content to the developer or an analytics service.

Files and related information that you provide through a system picker or share menu are used on your device to preview, select pages, reorder images, add text watermarks, convert, and export. The app creates local working copies and outputs; it does not modify your originals. A password for a protected PDF is used only to open the document during the current task and is not written to persistent app storage.

The app does not provide cloud document storage or synchronization. When you select an iCloud source or send a file through system sharing, the system or your chosen service handles the relevant transfer, as described in Section 5.

3. System pickers and permissions

The iOS photo picker provides the items you select; the app does not request access to your entire photo library. Saving converted images requests permission to add images to Photos (add-only access). If you deny that permission, saving to Photos is affected, but system sharing remains available.

Files imported through Files or a share menu are limited to those you provide or authorize. The app does not scan other unauthorized folders. You can cancel a selection or change Photos add permission in iOS Settings. Revoking a permission does not automatically undo completed processing or recall exported copies.

4. App Group working files and retention

The main app and its extensions use a local App Group container for managed working files: input copies, previews, conversion outputs, archives, and necessary task records. This container allows the app's components to work together; it is not a developer cloud database. The managed working directory is marked as excluded from device backups. Other system and destination backup rules apply separately.

PDF-to-image export files are cleaned up after receivers finish reading them. A generated image-to-PDF file is retained on the result screen for repeated saving or sharing. It is cleaned up when the task ends, or scheduled for cleanup after ten minutes of result inactivity. An active sharing or receiving operation keeps its file available until the read finishes. Ending or cancelling a task does not guarantee that every file disappears at the same instant.

Working payloads share an approximately 512 MiB quota. A PDF queued by the Share extension can wait for the main app to open; queued imports have a 24-hour expiration mechanism and may be reclaimed earlier under storage pressure. Files left by an abnormal process exit are reclaimed during later startup or housekeeping. Cleanup failures are reported and retried later. Suspension, no subsequent launch, or an unfinished receiver read may delay cleanup; there is no guaranteed deletion deadline in seconds.

Copies saved to Photos, Files, or another app are managed by that destination and are not deleted by working-file cleanup. Manage those copies in their destination. iOS controls uninstallation and App Group data removal. Uninstalling the app does not recall shared files or remove copies held elsewhere.

5. System services, recipients, and the website

Conversion runs on the device without a remote conversion service. Downloads from iCloud, system keyboard services, Apple purchase services, and recipients you choose through system sharing may use the network and process data under their own rules. Check the file and destination before sharing. ZIPFoundation is used only for local archive processing, not analytics or uploads.

Apple manages App Store purchases, billing, and refunds. The app does not access payment-card details or create in-app payment accounts. Refer to the policies of Apple and your chosen cloud, email, or receiving services for their processing practices.

The public policy and support pages contain no embedded analytics scripts, advertising, or external tracking resources. Website hosting and delivery services may, depending on their configuration, generate access records needed for operation and security, such as an IP address, request time, and requested path. Website visits are separate from the app's processing of conversion files. The developer does not use these pages to build cross-site tracking profiles and does not claim that the hosting service produces no logs.

6. Support email: purposes, legal basis, and minimization

The developer receives your email address, message, and any attachments only when you choose to send an email. Necessary information is used to answer your request, investigate the issue you report, handle a privacy request, or protect relevant rights as permitted by law. Support material is not repurposed for unrelated uses.

Depending on applicable law, the basis for necessary processing may be responding to your support or rights request, performing relevant service obligations, valid consent, or a legitimate interest recognized by that law after a necessity assessment. This section is not a blanket authorization to process information beyond what applicable law permits. Separate consent or guardian consent is obtained where legally required.

Prefer steps to reproduce an issue and redacted screenshots. Do not send PDF passwords, payment details, or unrelated personal files. Attachments are optional. The developer retains information only for a reasonable period needed to handle the request, and where applicable law requires retention or handling a dispute makes it necessary. Information is then deleted or de-identified when its purpose ends. No unverified fixed retention period is promised. Email services and records subject to lawful retention follow the relevant system rules.

7. Security, disclosure, and your rights

The app uses system-authorized file access, managed local working directories, and protections for active file reads. The developer applies access controls and data minimization appropriate to the support information handled and does not sell conversion files or support information. Necessary information is disclosed only for services needed to handle support, at your explicit direction, or as required by applicable law. No system is guaranteed to be absolutely secure.

You can cancel conversion, end a task, change permissions, and manage files in their export destination. For support information actually retained by the developer, you can email a request to access or obtain a copy, correct it, delete it, withdraw consent-based processing, or exercise other applicable rights, including restriction or objection. The developer may ask for the minimum information necessary to verify identity and the request's scope, and handles requests under applicable law. Withdrawal does not affect processing that was lawful before withdrawal. If retention is legally required, the applicable scope will be explained.

The app has no user accounts, so no account deletion process is needed. The developer cannot remotely delete files from your device or another recipient, or recall copies you sent to third parties. You may also seek assistance from the relevant data protection or consumer authority.

8. Children and minors

The app is intended for a general audience and is not specifically directed at children. It has no age or identity collection process. Minors should obtain any guardian assistance or consent required by their local law when using the app or sending support information. A guardian who discovers that a child has voluntarily sent unnecessary personal information may contact the developer for handling under applicable law. This section does not impose an additional minimum age for using the app.

9. Changes and contact

Material changes to data practices will be reflected in this policy and the store privacy declaration, with notice provided as required by law. New permissions or processing that requires consent will not rely on continued use as a substitute for that consent.

PDFKit Privacy Policy
PDFKit Terms of Use & Support
Email: xuruiprod@gmail.com. Use the subject “PDFKit Privacy Request” and describe the matter you want addressed.