PixelPDF ("the app", "we") is a PDF reader and editor that runs entirely on your device. This policy explains what the app does and does not collect. It's written to be honest and specific — if it isn't in this document, we don't do it.
The short version
- We have no account system and no server. You don't sign in, and we never see your files.
- Your documents never leave your device. Reading, editing, signing, converting, and every other feature runs locally.
- The only data collected is by Google's SDKs — advertising (only after you consent where the law requires it), app usage analytics and crash reports (Firebase), and on-device text recognition (ML Kit) — described below. None of it includes your documents.
What we collect
We do not collect, upload, or store your documents, their contents, or any account information — there is no account.
The app includes Google's advertising SDK (Google AdMob) so it can show ads that keep the app free. Through it, the following may be collected:
- Advertising ID and device/ad identifiers — used by Google to show ads and limit how often you see the same one.
- Approximate, coarse signals (e.g. general region, device type) that ad networks use to serve ads.
The app uses Google ML Kit text recognition to read the text of scanned (image-only) pages, for example when you view a scanned page in Reflow mode. Recognition runs entirely on your device with a model built into the app: the page image and the text read from it are never sent to Google or to us. When this feature is used, ML Kit may send Google limited technical data about its own operation:
- Device information (manufacturer, model, OS version and build) and app information (package name and app version).
- A per-installation identifier that is not intended to identify you or your physical device.
- Performance and diagnostic metrics — processing time, image format and size, error codes, and when the feature starts and stops.
The app uses Google Firebase Analytics and Firebase Crashlytics so we can see which features are used and fix crashes. They collect:
- App usage events — for example which screens are opened and which tools are used. Event data never includes document names, file paths or document contents.
- An app-instance identifier and device information (model, OS version, language).
- Approximate location (country or region), derived by Google from your IP address.
- Crash reports — the stack trace and device state at the time of a crash, plus a per-installation identifier. These never include your documents.
We do not collect your name, email, contacts, precise location, or the content of any file you open.
Consent
Where required (the EEA, UK, and similar regions), the app shows a Google-certified consent form (UMP) before any ads load. Ads are not requested until you've made a choice. You can change or withdraw consent later from the app's settings.
Why this data is used
Solely to display and frequency-cap ads, to understand which features are used, to diagnose and fix crashes, and for Google to measure and diagnose ML Kit's performance. We do not use it to build a profile of you, and we do not sell it.
Who it's shared with
- Google (AdMob / Google Mobile Ads, Firebase Analytics, Firebase Crashlytics, and Google Play services) — as our advertising, analytics and crash-reporting provider. Google's handling is governed by its own policy: https://policies.google.com/privacy
- Google (ML Kit) — the technical data listed above, used for diagnostics and usage analytics, sent encrypted (HTTPS) and not passed on to third parties by Google. Details: https://developers.google.com/ml-kit/android-data-disclosure
We do not share data with any other third party, and we do not sell personal information (including under the CCPA — we do not "sell" or "share" as those terms are defined).
Where your files live
On your device only, in storage you control (folders you grant the app access to, plus the app's private storage for things like saved signatures and bookmarks). Uninstalling the app removes its private data.
Data retention
We hold no documents or account data, so there is nothing for us to retain or delete on a server. Firebase Analytics data is kept according to the property's Google Analytics data-retention setting, and Crashlytics crash reports are kept for 90 days. Advertising identifiers are governed by Google's retention policies; you can reset or delete your Advertising ID in your device settings at any time.
Your rights (GDPR / CCPA)
Because we don't hold personal data on any server, there's no account to access, export, or erase on our side. You remain in control on the device: reset your Advertising ID, withdraw ad consent in-app, or uninstall the app to remove its local data. Questions or requests: support@appmetrics.studio.
Children
PixelPDF is intended for a general audience (13+). It is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes, we'll update the date above and post the new version at this URL.
Contact
Questions about privacy? Email support@appmetrics.studio.
PixelPDF · https://appmetrics.studio