PDFVault — Privacy Policy
PDFVault is a document scanner and vault designed to keep your documents on your device. This policy explains exactly what the app does and does not do with your data.
Your documents, scans, OCR text, and AI results are processed entirely on your device. They are never uploaded to us or to any third party.
The short version
- Your documents, scans, OCR text, and AI results are processed entirely on your device. They are never uploaded to us or to any third party.
- We do not operate any servers that receive your content. We have no analytics, no telemetry, no advertising SDKs, and no tracking.
- The app makes only two kinds of network connection, neither of which sends your documents: a one-time AI model download and purchase processing.
What stays on your device
All of the following happen locally and never leave your device:
- Captured images, scanned PDFs, and any documents you import.
- OCR (text recognition) output and document metadata.
- On-device AI results: smart file names, folder suggestions, summaries, Q&A, semantic search, and PII detection.
- Your biometric data (Face ID / Touch ID / Android biometrics). This is handled by the operating system; the app only receives a success/failure result.
- Vault contents, passwords you set on PDFs, and app settings.
Network connections the app does make
1. AI model download (Hugging Face). The optional on-device AI features require model files (up to ~635 MB total) that are downloaded once from Hugging Face (huggingface.co, served via its CDN). This download transmits only the standard information inherent to any internet request (such as your IP address) to Hugging Face. No document content is sent. You can decline the AI features and delete the models at any time.
2. Purchases (RevenueCat). One-time purchases are processed through Apple's App Store / Google Play and validated using RevenueCat. To manage and restore purchases, RevenueCat processes your purchase history and a randomly generated app-user identifier. This is used solely to deliver and restore your purchase. It is not linked to your identity by us, and it is not used for advertising or cross-app tracking. See RevenueCat's privacy policy at revenuecat.com/privacy.
Permissions
- Camera — to scan documents. Images stay on your device.
- Photo Library — to import images/documents you choose. Access is used only for files you select.
- Face ID / biometrics — to unlock your vault. Handled by the OS.
The app does not request microphone or location access.
Data sharing and selling
We do not sell your data, and we do not share your documents with anyone. The only third party that processes any data is RevenueCat, strictly for purchase delivery, as described above.
Children's privacy
PDFVault is not directed at children and does not knowingly collect data from children.
Data retention and deletion
Your documents live on your device. Deleting a document in the app, or uninstalling the app, removes local data. To request deletion of purchase records held by RevenueCat, contact us at the email below.
Contact
Questions about this policy can be sent to: support@derivativebutsmart.com