Privacy Policy

1. Who we are and what this policy covers

Shenzhen Caractiv Tech Company Limited (“Caractiv”, “we”, “us”, or “our”) is responsible for the personal information it processes in connection with PDF Expert and this website. This policy covers the iOS app, Android app including our official APK, and our related website and support communications. The services available, SDKs enabled, permissions, and privacy controls may differ by platform, region, and app version.

PDF Expert does not require a Caractiv account. An anonymous installation or purchase identifier can still be personal information even though we do not know your name.

2. Documents and on-device processing

Reading, annotation, editing, page organization, scanning, image conversion, signing, OCR, and PDF security tools process document contents on your device. The app stores documents and related information such as thumbnails, annotations, signatures, folders, and preferences in local storage. App analytics events are designed to exclude document contents, filenames, file paths, document passwords, and the text you enter into documents.

Document contents are sent to the conversion provider when you choose and approve cloud conversion, as explained below. If you export, share, print, or select a file from a cloud storage provider, the destination or provider you choose processes that information under its own practices. Your operating system’s backup or cloud-file settings may also affect where copies are kept.

Camera and photo or file selection are used for the scanning and import actions you request. App lock uses the operating system’s biometric or device-passcode check; we do not receive your fingerprint or face template. Document-opening passwords are held for the active session rather than saved as analytics data. Locking the app is separate from encrypting an individual PDF.

3. Optional CloudConvert processing

When you initiate an Office-to-PDF or PDF-to-Office conversion and approve upload, the selected file’s contents and filename are uploaded to CloudConvert for conversion and the result is downloaded to your device. CloudConvert also receives connection information such as your IP address. If you select “Don’t ask again”, the app stores that approval locally for subsequent cloud conversions you initiate. Do not initiate another cloud conversion if you no longer want files sent to the provider; contact us if you need help clearing a saved approval.

CloudConvert’s current published policy states that uploaded files are automatically deleted from its servers within 24 hours at the latest. This is the provider’s published retention period, not a promise of immediate deletion after download. The app attempts to delete remote jobs when uploading or polling fails or you cancel; a network failure can prevent that request from succeeding. Successful jobs rely on the provider’s retention process. Operational logs and records may have separate retention periods.

Read CloudConvert’s Privacy Policy before uploading. You can avoid this transfer by using on-device tools. Upload only documents you are authorized to share, particularly when they contain sensitive or confidential information.

4. Other information processed

• Purchases: Product identifiers, receipts or purchase tokens, subscription and trial status, transaction timing, and related technical information are processed by the purchasing store and RevenueCat to provide and restore Pro access. We do not receive your full payment-card details from the store. Consented attribution identifiers may be linked to purchases for campaign measurement.
• App and device information: Installation and app-instance identifiers, device model, operating system, app version, language, region, IP address, and approximate location inferred from IP may be processed by the services below. PDF Expert does not request precise location, contacts, calendar, or health permissions for its document tools.
• Usage and advertising: Screens viewed, tools used, completion or error categories, counts, timing, size ranges, subscription events, install source, and ad impressions or clicks may be processed for product improvement, advertising, and attribution. Advertising identifiers are used only when permitted by the applicable controls and consent state.
• Diagnostics: Crash stacks, error types and codes, installation identifiers, device and system information, and performance data help diagnose faults. App error reporting removes the original exception message and widget dumps to reduce the risk of document information appearing in reports.
• Support: If you email us, we receive your email address, message, and attachments you choose to send. Please avoid sending sensitive documents unless necessary to resolve your request.
• Website requests: Hosting and delivery infrastructure can receive your IP address, requested URL, browser or device information, referrer, and request time when serving this site. Following a store or third-party link brings you to that provider’s service and privacy policy. We store the language you choose in your browser’s local storage solely to remember your language preference on this website. Clearing site data removes this preference. If browser storage is unavailable, your selected language remains in the page URL.

5. Providers and purposes

Configured services may process the information described above as follows. A service is not active merely because it is listed here; availability depends on the release and its configuration.

• Apple App Store and Google Play: Downloads, billing, refunds, purchase history, and subscription management. See Apple’s privacy information and Google’s Privacy Policy.
• RevenueCat: Purchase validation, subscription entitlements, restoration, and purchase attribution where enabled. See RevenueCat’s Privacy Policy.
• Firebase Analytics, Crashlytics, and Remote Config: Usage measurement, crash diagnosis, and delivery of app configuration. Remote Config uses installation and app information; crash reporting may operate independently of advertising consent. See Firebase privacy information.
• Google AdMob and User Messaging Platform: Advertising for free users, ad delivery and measurement, fraud prevention, and management of regional consent. AdMob is not initialized for active Pro users; the consent service may still refresh privacy choices. See Google Mobile Ads data disclosures.
• AppsFlyer: Install attribution, campaign measurement, and app events. When advertising identifiers are not allowed, the app applies restricted settings and anonymization signals; some event reporting can continue. See AppsFlyer’s Services Privacy Policy.
• Meta: Campaign attribution and selected app or subscription events when configured. Initialization waits for a privacy decision; where the app identifies that consent is required and refused, events are not sent to Meta. Otherwise restricted processing settings apply when advertising identifiers are not allowed. See Meta’s Privacy Policy.
• Google ML Kit on Android: OCR and scanning input is processed on-device. The SDK can send usage, performance, device, and error metrics to Google and contact it for models or updates. See ML Kit’s privacy information.
• CloudConvert: The optional conversion processing described in section 3.

Providers may use subcontractors and may process certain information under their own responsibilities, particularly app stores and advertising services. We may also disclose information when necessary to comply with law, respond to lawful requests, protect rights and security, prevent fraud, or carry out a business transfer subject to applicable privacy obligations.

6. Advertising, analytics, and your choices

Use Settings → Privacy → Manage ad consent to revisit the regional privacy form where one applies. On iOS, use the app’s Tracking control or system settings to manage App Tracking Transparency permission. On Android, your device settings provide advertising-ID controls. Denying tracking does not stop document tools from working, and it does not mean every network request stops. Free users may still receive non-personalized or limited ads, and necessary subscription, consent, configuration, and diagnostic processing can continue.

Firebase’s advertising signals follow the app’s consent state; analytics storage is restricted where the required storage consent is absent, and aggregate or cookieless measurement may remain. Withdrawing consent also triggers removal of previously linked attribution attributes from RevenueCat on a best-effort basis. Withdrawal affects future consent-based processing and does not invalidate earlier lawful processing.

We do not sell your documents. Some sharing of device, advertising, usage, or purchase information for attribution or personalized advertising may be treated as a “sale”, “sharing”, or targeted advertising under certain privacy laws. Use the privacy controls above or email contactus@caractiv.com with an opt-out request. We do not treat permission to use the app as blanket consent to all advertising processing.

7. Legal bases and international processing

Where applicable law requires a legal basis, processing to provide requested tools, cloud conversion, subscription access, and support is based on performing our agreement with you; consent supports processing that requires your permission, including applicable advertising and device-storage uses; legitimate interests support proportionate service security, fault diagnosis, and improvement where permitted; and legal obligations support required compliance and recordkeeping. We seek separate consent where required rather than relying solely on these terms.

Caractiv is based in China. Providers may process data in other countries, including the United States and countries in Europe, with different data-protection laws. Applicable transfer requirements depend on your location and the provider involved. Contact us for information about the destinations and safeguards relevant to your information. This policy does not claim that every provider stores data in your country.

8. Retention, deletion, and security

Local documents and related records remain on your device until you delete them or app data is removed. Deleting a document removes its library record and attempts to remove its local backing file, thumbnail, and related annotation or form data. Copies you export, share, back up, or keep with another provider are outside that deletion. Removing the app does not cancel subscriptions or automatically erase data already held by providers.

We retain support and other personal information only for as long as needed for its purpose, taking account of unresolved requests, security, dispute handling, and legal recordkeeping obligations. SDK and service records have their own purpose-based and configured retention periods. Cloud file retention is described in section 3. Contact us to ask about retention or request deletion of information relating to your installation or purchase; we may need enough information to locate the relevant records.

We use access controls, platform security, and supported encrypted network connections to reduce risks. No storage or transmission method is completely secure. Protect your device, keep software current, use document encryption when appropriate, and retain backups. Do not send passwords or unnecessary sensitive documents in a support email.

9. Your privacy rights

Depending on where you live, you may have rights to access or obtain a copy of personal information, correct it, delete it, restrict or object to processing, receive portable data, withdraw consent, or opt out of targeted advertising and certain sharing. You may also complain to your local data-protection authority. Eligible residents may request review or appeal of a privacy-request decision by replying to our response.

Send requests to contactus@caractiv.com. We may request proportionate information to verify and locate your records; an authorized agent may contact us subject to applicable verification rules. We respond within the periods required by applicable law and will explain any lawful refusal. You will not be penalized for exercising applicable privacy rights. Because we do not operate a Caractiv account system, there is no Caractiv account to close; local deletion and requests concerning provider records are separate steps.

10. Children

PDF Expert is a general productivity tool and is not directed to children under 13 or the higher age at which applicable law requires parental consent. We do not knowingly collect personal information from children in those circumstances without the required authorization. If you believe a child has provided information unlawfully, contact us so we can investigate and take appropriate deletion or protective steps.

11. Updates and contact

We may update this policy when features, providers, or requirements change. We will update the effective date and provide further notice or seek consent where required.

For privacy questions or requests, email contactus@caractiv.com.