Privacy Policy for PacePDF

Ordinary PDF reading, search, editing, conversion and signing process selected documents on your device. PacePDF does not operate a document-upload server or require an account. It accesses documents and images you open, select or choose to manage. PDF contents, filenames, paths, passwords, signatures and raw search phrases are not included in PacePDF's application-defined advertising or analytics event payloads.

An externally opened Android content-provider document may be copied into app-private storage. Android's document, folder and image pickers grant access to selections according to Android permissions. A chosen provider may itself use cloud storage under its own policy. Saving or sharing an output sends it to the destination or application you select; the recipient's processing and privacy policy apply. User-saved outputs are distinct from disposable cache.

All Files Access (MANAGE_EXTERNAL_STORAGE) is optional. It supports discovering and managing PDFs across shared device storage, including metadata, opening, renaming and deletion where Android permits. You can decline it and select documents or folders through Android's Storage Access Framework, or revoke it through Android settings. Legacy read-storage permission is declared through Android API 32. Individual images can be selected through picker or content-URI grants without broad photo-library access.

Camera permission and scanning code are retained, but Scanner is hidden and disabled in version 1.0.3; OCR is displayed as coming soon. The retained scanner uses camera capture and Google Play services ML Kit Document Scanner; retained OCR uses on-device ML Kit text recognition. These are not available document-processing features in this release. Google says ML Kit processes input/results on-device, while its APIs can contact Google for updates and send performance/utilization metrics; see ML Kit Terms & Privacy. Future activation will be reflected in an updated policy. The app does not request microphone or precise GPS-location permission. Network access supports advertising, consent, permitted analytics and Google Play services.

PacePDF stores recents and reading position, favorites, selected-folder/indexed PDF metadata, thumbnails, appearance/preferences, signatures you intentionally save, temporary imports/tool results and SDK-managed privacy choices locally. Search text belongs to the active Reader session. Entered PDF passwords are used for opening/processing protected documents and are not deliberately saved as passwords or sent in application telemetry.

Cleanup follows owning workflows, active-file protection and Android storage management. External PDF imports become eligible for cleanup after 24 hours during later import/cleanup activity, subject to active leases; size pressure can remove older unprotected copies earlier. Incoming shared-image copies have a 48-hour aging routine and a size limit. These are thresholds, not guarantees of erasure at an exact time. Tool-result and unlocked-document lifetimes depend on their own workflows.

Settings Clear temporary cache removes unused thumbnail previews; it does not erase saved PDFs, document working copies, signatures or every local record. Active artifacts are protected from that cleanup. Local records remain until removed by the relevant control, app-storage clearing or uninstall. PDFs saved elsewhere remain until you delete them. Clearing app storage or uninstalling does not delete those outputs or data already processed by Google.

PacePDF displays Google AdMob adaptive banners in Home, Tools, Files and utility/tool screens. Google's Mobile Ads SDK can collect/share IP addresses (including approximate location derived from them), app/ad interactions, diagnostic/performance information, advertising ID, app-set ID and other applicable identifiers for advertising, measurement and fraud prevention. Processing depends on configuration, device, region, consent and ad settings. Eligible advertising partners may process data under their policies; the partner list shown in the applicable consent interface can change.

Personalization and limited-ad availability are managed through Google's SDK and consent signals. Declining consent does not necessarily remove every ad: the SDK may permit limited consent-appropriate requests, and an ad may not be available. PacePDF does not supply document content or raw Reader search phrases to ad requests. See Mobile Ads data disclosure and how Google uses information from apps using its services.

PacePDF uses Google Analytics for Firebase to understand product use and improve the app. Collection starts disabled and is enabled only after the privacy flow settles and the separate analytics permission check allows it.

Application events include pdf_opened (Home, external or tool origin), reader_search_used (matches/no results/no text and a coarse query-length bucket), and tool_completed (tool type and successful outcome). Search telemetry is recorded once when the search session finishes, rather than sending phrases or keystrokes. These payloads do not contain PDF text/images, names/paths, passwords, signatures, raw search phrases or a developer-assigned user ID.

When enabled, Analytics can also process app-instance identifiers, app/device/OS metadata, session/lifecycle information, coarse location derived from IP addresses and automatically collected events, including ad impressions and associated measurement data where available. This is not an exhaustive SDK event list. PacePDF disables Analytics advertising-ID collection and automatic screen reporting; that does not disable AdMob's separate identifier use. Google can still process device information and identifiers as described here. See Analytics data disclosure, Firebase privacy information and Google's Privacy Policy.

Google's User Messaging Platform (UMP) refreshes consent information at startup and shows its server-provided form when required. The published European message targets the EEA, UK and Switzerland. Under that targeting a normal India launch does not receive that European form; this does not mean all privacy or consent obligations are inapplicable in India or other regions.

Ads are requested only when UMP reports they may be requested. An obtained advertising choice alone does not grant analytics permission. Unknown/unresolved states keep product Analytics disabled. In applicable European flows, analytics grant enables collection and denial keeps it disabled. Settings offers Privacy choices when UMP requires that entry point, allowing applicable choices to be reviewed and withdrawn. Withdrawal disables future product Analytics collection when the SDK reports analytics denial; it does not erase previously transmitted records automatically. When UMP reports consent is not required, the app may enable Analytics after startup privacy checks, unless an applicable stored analytics denial is present. There is no separate worldwide analytics opt-out switch in this release.

Document bytes are local unless you choose an external save/share destination. Advertising, consent and permitted Analytics communicate with Google and eligible advertising partners. Android and Google Play services support file selection, updates and platform functions under their policies. PacePDF has no user account database or developer-operated cloud PDF service.

Google documents TLS encryption in transit for Mobile Ads and Analytics SDK data. Local working data uses app-private storage where practical, Android permissions and content-URI controls. Providers/share recipients have their own security practices. No system guarantees complete security. Google and its service providers may process service data outside your country under their policies and applicable safeguards.

Manage local data through recents/favorites controls, eligible document deletion, the thumbnail-cache control and Android storage/permission controls. Reset/delete the Android advertising ID through Android controls. Choose whether/where to save/share documents and use Privacy choices where available.

Google controls service-side retention under its policies and account settings. PacePDF does not promise a fixed retention period or immediate deletion of all Google-held data. For questions or applicable access, correction, objection or deletion requests, contact isashaikh2005@gmail.com. We will assess the request and information we can identify/control; local deletion does not identify or remove every SDK record. Google's own privacy controls/request mechanisms may also apply. Rights depend on applicable law.

PacePDF is a PDF productivity utility. It does not ask for a birth date or verify ages. If you believe a child's information was processed through PacePDF or its integrated services, contact us so the concern can be investigated. This does not promise that integrated SDKs never process information from a child's device.

Feature, permission or service changes may require an updated policy. Revisions will be published at the PacePDF privacy page with an updated date.

Isa Shaikh — isashaikh2005@gmail.com.