PDF Flow Privacy Policy

Effective Date: June 15, 2026

Parties: You (hereinafter referred to as "User") and PDF Flow Developers (hereinafter referred to as "We")

Thank you for choosing PDF Flow! We value your privacy. This policy clearly explains how we collect, use, and protect your information to ensure compliance with Apple App Store review rules and GDPR and other relevant regulations.

I. Information We Collect

We only collect the minimum information necessary to achieve core functions, with no redundant data collection:

Permission-related information (obtained only after you authorize):

Camera Permission: Used to capture documents to generate PDFs (flash assistance supported), only temporarily accessing the camera during shooting;

Storage/File Access Permission: Used to import PDF files locally on your device, or save edited PDF documents, only reading/writing files you actively select, and not accessing other irrelevant data on the device;

The above permissions can be turned off at any time through your device settings. Turning them off will disable the corresponding function, but will not affect the normal operation of other functions.

Basic Device Information (Unidentified or Anonymous):

Device Basic Information: Device model, iOS system version, app version. This information is used solely for app compatibility, crash fixes, and performance optimization.

Advertising Related Data: To provide in-app advertising (IAA) services, we may collect the Device Advertising Identifier (IDFA) with your explicit authorization for ad delivery, attribution, and performance statistics.

Tracking Permission Request (ATT): When we need to use IDFA, a system tracking permission pop-up will appear upon first app launch or before accessing IDFA. You can choose "Allow Tracking" or "Request App Not to Track." If you refuse, we will not read the IDFA, and this will not affect core functions such as photo scanning and PDF editing. You can also modify the authorization status at any time through your device's "Settings – Privacy & Security – Tracking."

Usage Behavior Data: Anonymized feature usage records (such as scan count, PDF editing operation type). This data is used solely for analyzing user habits, optimizing product features, and improving ad accuracy. Personally identifiable information has been removed from the data.

OCR Recognition Data: The recognition process is completed locally on your device. The recognition results are returned only to you and are not uploaded to our servers, nor is the recognized text data stored.

II. Purpose of Information Use

All collected information will only be used for the following purposes and will not be used for any other purpose:

Providing core services: Enabling functions such as photo scanning, PDF import, annotation, and OCR recognition;

Providing in-app advertising: Displaying relevant advertisements based on anonymized data to improve ad relevance while ensuring ad compliance;

Optimizing product and advertising experience: Fixing bugs, improving

application stability, and optimizing ad performance based on device information and anonymized usage behavior data;

Compliance requirements: Cooperating with regulatory investigations or fulfilling legal obligations within the scope required by law.

III. Data Storage and Security

Storage method: Data from photo scanning, editing annotations, and OCR recognition is stored locally on your device by default and is not uploaded to cloud servers. Basic device information, anonymized behavior data, and advertising-related data will be stored encrypted.

Storage period: Basic device information and usage behavior data will only be retained for the period required for the purposes described in this policy. When you uninstall the app or contact us via email to request deletion, we will delete your information. For anonymized statistical data that cannot directly identify individuals, we may retain it for a longer period for product analysis.

When the storage period expires or the data is no longer needed, we will anonymize the data (removing all personally identifiable information and converting it into statistical data that cannot be linked to specific users). Anonymized data will only be used for product analysis and optimization and will no longer be considered personal information.

Security: We employ industry-standard security measures to prevent data leakage, loss, or tampering. However, we cannot rule out risks beyond our control, such as force majeure or cyberattacks. You must properly safeguard your device and app access permissions.

IV. Data Sharing and Disclosure

We will never sell or rent any of your personal information, and will only share or disclose it under the following limited circumstances:

1．With your explicit authorization;

2．To comply with applicable laws and regulations, or to respond to court subpoenas or regulatory orders;

3．Advertising Partnerships and Technical Support: We will share anonymized IDFA and advertising attribution data with in-app advertising service providers (such as AdMob) solely for ad placement and performance statistics, and these service providers must comply with relevant privacy regulations;

4．We will entrust data processing to service providers that provide us with technical support (such as crash statistics tools and data analysis tools), requiring them to process the data only according to our instructions and not for their own purposes, while also assuming responsibility for data security and confidentiality.

V. Your Rights (Compliant with GDPR Requirements)

In accordance with the General Data Protection Regulation (GDPR) and related data protection regulations, you have the following core rights, which you can exercise through the contact information at the end of this policy:

1．Right to Access Data: To inquire whether we have collected your personal information and details of the information collected;

2．Right to Correct Data: To request that we correct any errors or incompleteness in your personal information;

3．Right to Erasure Data (Right to Be Forgotten): To request that we delete your personal information that no longer needs to be stored;

4．Right to Withdraw Consent: To withdraw your consent to data collection by disabling access permissions in your device settings or uninstalling the application;

5．Right to Data Portability: To request that we provide a copy of your personal information in a structured format to facilitate transfer to other service providers;

6．Right to Object: To object to the processing of your personal information based on legitimate interests.

7．Opt out: Turn off tracking via your device's "Settings - Privacy & Security - Advertising" to refuse IDFA collection and personalized advertising.

VI. Third-Party Services

This application integrates necessary third-party SDKs, used only to implement core functions or in-app advertising. Data processing for these SDKs follows their respective privacy policies:

Crash Statistics SDK: Collects only application crash logs (excluding personal information) for bug fixing;

Advertising SDK: Collects anonymized IDFA and advertising behavior data for ad delivery and attribution. Specific data processing rules are detailed in the corresponding service provider's privacy policy.

We are not responsible for the privacy practices of third-party SDKs. We recommend you review the privacy policies of the third-party service providers for details.

VII. Children's Privacy

This application is not intended for children under 16 years of age (or younger as defined by your country). We do not intentionally collect children's personal information. If we discover unintentional collection of children's information, we will immediately delete the relevant data and terminate the service.

VIII. Policy Updates

We may update this policy based on feature adjustments or changes in regulations. For significant changes to the Privacy Policy, we will notify you via in-app pop-ups; minor changes will be published on this page. Your continued use of the application constitutes acceptance of the updated policy.

IX. Contact Us

If you have any questions, complaints, or need to exercise the above rights regarding this Privacy Policy, please contact us through the following methods:

Email: [email protected]