Privacy Policy

1. Who we are

PenguinPDF is an independent Android application for annotating, filling, signing, and exporting PDF documents. This privacy policy covers both the PenguinPDF app and the penguinpdf.com website.

If you have questions about this policy, please contact us.

2. Information we collect

The app — documents stay local by default. PenguinPDF processes documents on your device:

• PDF files you open are read from and saved back to your device's local storage. They are never uploaded to our servers.
• The local library may store document metadata, extracted page text, OCR text, search indexes, and semantic-search embeddings on your device so search works locally.
• Drafts, annotations, signatures, settings, entitlement state, and trusted-certificate settings are stored locally on your device.
• We do not require an account, and the app does not use ads, ad SDKs, tracking pixels, or app analytics.

Camera, gallery, scanning, and OCR. Camera permission is requested only if you choose to capture a photo of your handwritten signature. Signature photos, gallery images, scanned PDFs, OCR output, and extracted strokes are handled on your device and are not sent to PenguinPDF. PenguinPDF uses Google ML Kit and Google Play services document-scanner components for OCR and document scanning; Google states that ML Kit input data and results are processed on-device, while ML Kit SDKs may collect app, device, identifier, diagnostics, and usage data.

Purchases and license verification. If you buy, restore, or refresh paid access, Google Play handles payment processing. PenguinPDF uses limited purchase and license information needed to confirm your access, keep paid features working, prevent abuse, and handle refunds or revocations. We do not receive your payment card details.

WebDAV sync. If you configure WebDAV sync, document data is sent only to the WebDAV server address you specify. PenguinPDF does not operate a relay for WebDAV sync and does not receive, intercept, or store your synced files. Your WebDAV server URL, username, and password are encrypted and stored locally on your device.

PDF passwords, certificates, and signatures. Passwords and signing certificate material used to open or sign PDFs are handled locally and are not sent to PenguinPDF. If you choose online signature validation, revocation checking, long-term-validation evidence collection, or timestamping, the app may contact certificate authority, OCSP, CRL, or timestamp-authority URLs associated with the document, certificate, or settings you provide.

The website — contact form only. When you use the contact form at penguinpdf.com/contact-us, we collect:

• Your name and email address (so we can reply)
• The subject and message text you write
• Your IP address (used by Cloudflare Turnstile for spam detection — see §4)

The website does not use analytics, advertising cookies, or tracking pixels.

3. How we use your information

We use contact form submissions solely to respond to your inquiry. We use purchase and license data to validate purchases, issue and refresh entitlements, prevent abuse, process refunds/revocations, and operate the license service. We do not sell or rent personal data and do not share it with third parties for advertising.

4. Third-party services

A small number of third parties are involved in delivering the app or website:

Google Play and Google Play Billing — The app is distributed through the Google Play Store, and Google Play handles payment processing for paid entitlements. Google's own Privacy Policy governs that relationship.

PenguinPDF license server — The app contacts our license server when validating, restoring, or refreshing paid entitlements. The license server does not receive your PDFs or payment card details.

Google ML Kit and Google Play services document scanner — OCR and document scanning use Google-provided on-device components. Google's ML Kit Terms & Privacy, ML Kit data disclosure guidance, and Google Privacy Policy apply to Google's SDK behavior.

Cloudflare Turnstile — The contact form on this website uses Cloudflare Turnstile to prevent spam. Turnstile may analyse your IP address and browser signals to determine whether a submission is human. No persistent cookies are set. Cloudflare's Privacy Policy applies.

Google Fonts — This website loads the Nunito typeface from Google Fonts. Your browser makes a request to Google's servers for the font file. Google's Privacy Policy applies to that request.

Your configured WebDAV provider, certificate authorities, OCSP/CRL responders, and timestamp authorities — These services are contacted only when you choose the related sync, validation, or signing features. Their own privacy policies apply.

5. Data retention

Contact form emails are kept in our inbox until no longer needed and are then deleted. Purchase and license records are kept while needed to provide paid entitlements, handle refunds or revocations, prevent abuse, and satisfy operational or legal requirements. Your PDF files are not stored by PenguinPDF unless you intentionally send one to us, such as by attaching it to a support request.

6. Your rights

Depending on where you live, you may have rights including access to, correction of, or deletion of personal data we hold about you (for example under GDPR, CCPA, or similar laws). Because most app data is stored only on your device, deleting the app or clearing its data removes local copies controlled by the app. For data held by PenguinPDF, please contact us and we'll respond within 30 days.

7. Children's privacy

PenguinPDF is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our contact form, please contact us so we can delete it.

8. Changes to this policy

If we make material changes to this policy, we will update the effective date at the top of this page. We encourage you to review it periodically. Continued use of the app or website after changes constitutes acceptance of the updated policy.

9. Contact

Privacy questions or requests can be sent via our contact page. Please include "Privacy" in your subject line.