PDFly

Privacy Policy

Effective date: September 22, 2026 · Last updated: October 27, 2026

This policy explains how GumLabs handles information in connection with PDFly (the “App”).

1. About this policy

App: PDFly
Developer: GumLabs
Android package: com.pdflyapp.reader

PDFly is a PDF and office-document reader/editor for Android — it lets you view, scan, merge, split, compress, sign, and convert PDF, Word, Excel, PowerPoint, EPUB, text and image files. This policy covers the App as distributed on Google Play and applies to anyone who downloads or uses it.

2. Information we access and collect

Documents on your device. To show your documents in the Home and Browse screens, PDFly lists the document and image files stored on your device (file name, type, size and date). With your permission it can read any of these files so you can open, edit, convert or share them. This list is built on your device and is never uploaded.

Search inside your documents (local text index). So that you can search for words inside your documents, PDFly extracts the text of documents on your device in the background — including on-device text recognition (OCR) for scanned pages — and stores it in a local index. This feature is on by default. The index stays on your device and is never uploaded. You can turn it off or clear the index at any time in Settings → Index document text.

Data you create in the App. Recent and favorite file lists, notes and highlights, bookmarks and reading positions, signatures you create, scanned pages and text recognized from them are stored only on your device (in the App's private database and settings) and are never uploaded to any server we operate. Passwords you choose to “remember” for protected PDFs are encrypted (AES-256-GCM) with a key held in your device's Android Keystore and never leave your device. If you add the PDFly “Recent files” widget to your home screen, it shows the names of your recently opened files there.

Account and contact information. PDFly has no user account or sign-in system, so we do not collect your name, email address or phone number through the App. If you email us for support, we receive whatever information you choose to include in that email.

Crash reports. Google Firebase Crashlytics collects crash and error reports — device model, Android version, app version, technical stack traces and a random installation identifier — so that we can find and fix bugs. Crash reports do not include your document content.

App usage (analytics). When analytics is on (see Section 8), Google Firebase Analytics records how the App's features are used — for example that a file of a certain type was opened, a PDF tool was used, a scan was completed, how long a document was read, that the PRO screen was shown or a purchase succeeded, failed or was cancelled, and when ads are loaded or shown. Firebase also collects standard information such as an app-instance identifier, your device's advertising ID (where your device settings allow it), device model, Android version, country or approximate region (derived from your IP address) and how the App was installed. Analytics events do not include file names or document content. Firebase may also record basic session information (such as when a session starts and ends) for the same purposes.

Advertising. If you do not have PDFly PRO, Google AdMob shows ads in the App and may collect your device's advertising ID, IP address, device information and ad interactions to serve, measure and (where you allow it) personalize ads.

3. Purchases (PDFly PRO)

PDFly PRO is offered as weekly and monthly auto-renewing subscriptions and as a one-time Lifetime purchase. PRO removes ads and watermarks and unlocks unlimited OCR and PDF tools; without PRO, the number of tool uses per day is limited, and that daily counter is kept only on your device.

All purchases are processed by Google Play Billing. We do not operate our own payment servers and never see or store your payment card or billing details — the App only receives from Google Play which PRO product you own and its status, which it uses to unlock PRO on your device. Subscriptions renew automatically until you cancel them; you can cancel or manage them at any time in the Google Play Store under Payments & subscriptions.

4. Document processing, OCR and AI

All document processing — opening, rendering, merging, splitting, compressing, signing and converting PDF, Word, Excel, PowerPoint, EPUB and text files — happens on your device using local libraries; no document content is sent to any server we operate. Document scanning and text recognition (OCR) use Google ML Kit's on-device Document Scanner (provided through Google Play services) and on-device Text Recognition: your images and the recognized text are processed on your device and are not uploaded for processing. As described in Google's ML Kit terms, ML Kit may contact Google to download models and updates and may send Google anonymous metrics about API performance and usage. PDFly does not use any cloud-based or third-party AI service to process your documents.

The optional Read aloud feature passes the text being read to the text-to-speech engine you have selected on your device; that engine's own privacy practices apply to it.

5. How information is used

Data stored on your device is used only to provide the App's features to you (finding, viewing, editing, organizing, searching and converting your files, reminders and the widget). Crash reports are used to identify and fix bugs. Usage analytics are used to understand which features are used so we can improve the App, and to measure ad performance. Advertising data is used by Google to serve and measure ads. Purchase status is used to unlock PRO features and to stop showing ads.

6. App permissions

PDFly requests the following permissions, each used only for the stated purpose:

  • All files access (Android 11 and later) or storage access (Android 12 and earlier for reading; Android 9 and earlier for writing) — to list, open, edit and save the documents on your device and to build the optional local text index described in Section 2. Without it you can still open individual files through the system file picker.
  • Camera — for scanning documents; scanned images are processed on your device and are not uploaded.
  • Notifications — for optional daily reading reminders (off by default, controlled in Settings) and to show the progress and result of file-processing jobs such as merge, split, compress and sign.
  • Foreground service — keeps a long file-processing job running if you leave the App while it works.
  • Run at startup — re-schedules your reading reminders after the device restarts, only if you have turned reminders on.
  • Biometric / device credential — only for the optional App Lock; the check happens on your device and no biometric data is sent anywhere.
  • Advertising ID and Android ad services — used by Google AdMob as described in Sections 2 and 8.
  • Google Play billing — to make PRO purchases through Google Play.
  • Internet and network state — used by the Google services listed in Section 7; PDFly itself has no server of its own to connect to.

You can manage granted permissions in your device settings. Turning a permission off may stop the related feature from working.

7. Service providers

PDFly uses only the following third-party services, all provided by Google. We do not operate any other servers, and we do not sell your data or share it with data brokers.

  • Google AdMob — shows banner, interstitial and app-open ads to users without PRO, and collects the data described in Section 2 for ad delivery and measurement. See Google's Privacy Policy.
  • Google User Messaging Platform — shows the ad-consent form in regions where consent is legally required and stores your choice.
  • Google Firebase — Crashlytics (crash reports), Analytics (app usage, see Section 8 for when it is on) and Remote Config (lets us adjust settings such as ad frequency and the free daily tool limit remotely; it uses a Firebase installation identifier and does not receive your documents). See Firebase's Privacy and Security page.
  • Google Play Billing — processes PRO purchases; we never see your payment details.
  • Google Play In-App Review — may show Google Play's rating prompt after you have used the App for a while.
  • Google Play In-App Updates — checks with Google Play whether a newer version of the App is available and, if so, offers to update it. Google Play handles this check and download.
  • Google ML Kit — on-device document scanning and text recognition, as described in Section 4.

PDFly's “Open from cloud” feature uses Android's built-in system file picker (Storage Access Framework) to let you open files from cloud storage apps installed on your device, such as Google Drive, Dropbox or OneDrive. This works entirely through the operating system: PDFly never receives your cloud account credentials, never connects to any cloud storage API directly, and only receives the specific file you pick. Edits are not synced back to your cloud storage account. Documents leave your device only when you choose to share or export them yourself.

8. Advertising, analytics and your choices

Consent. When the App starts, it checks with Google's User Messaging Platform whether consent is required where you are. In regions where it is legally required (for example the European Economic Area, the United Kingdom and Switzerland), you are asked before ads are requested and before analytics turns on, and you can change your choice at any time in Settings → Ad privacy choices. In other regions, ads and analytics turn on automatically once this check has completed. Analytics and ads stay off until the check is done.

Your options. You can reset or delete your advertising ID, or opt out of ads personalization, in your device's settings (Settings → Google → Ads on most Android devices), and you can opt out of interest-based advertising via Google Ads Settings. PDFly PRO stops ads from being shown in the App; crash reports and usage analytics still apply to PRO users as described above. For any other privacy request, contact us (Section 15).

9. Data retention and deletion

Your documents' data in the App — file lists, the local text index, notes, highlights, bookmarks, saved passwords, signatures and settings — stays on your device until you delete it or uninstall the App; we do not keep copies on any server. Crash reports and analytics data are retained by Google according to Firebase's retention settings.

To delete your local data, clear the text index in Settings, delete individual items in the App, use Android Settings → Apps → PDFly → Storage → Clear data, or uninstall the App to remove everything PDFly stores on your device.

PDFly has no user account, so there is no separate account-deletion process — clearing the App's data or uninstalling it removes everything PDFly stores.

10. Security and international processing

Your documents stay on your device unless you share or export them yourself. Saved PDF passwords are encrypted using AES-256-GCM with the encryption key held in your device's Android Keystore, never stored in plain text. The App is excluded from Android's automatic cloud backup (allowBackup is disabled), so its local data is not copied to Android cloud backup.

Because PDFly itself does not operate servers that receive your document data, there is no PDFly-side international transfer of your files. Data collected by Google's services (Firebase, AdMob, Play) may be processed on Google's servers in various locations worldwide, subject to Google's own safeguards; see Google's Privacy Policy.

11. Privacy requests

Because almost all of your data is stored only on your device, you can access, export or delete it directly at any time in the App or in your device's app settings, without needing to contact us. For data processed by Google (AdMob, Firebase, Play Billing), your rights are also governed by Google's privacy practices — see policies.google.com/privacy.

For privacy questions and requests, contact sinn061094@gmail.com.

12. Children’s privacy

PDFly is not directed at children and we do not knowingly collect personal data from children under the age required by applicable local law (e.g., 13 under COPPA in the United States).

13. This policy website

This page is hosted by Vercel. Serving a page involves processing technical request information, such as an IP address and request metadata. See Vercel’s Privacy Policy for information about its practices.

This page does not include an analytics script, advertising script, contact form or file upload feature.

14. Changes to this policy

We may update this policy to reflect changes to the App or our data practices. The revised policy will appear on this page with an updated “Last updated” date. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

15. Contact

GumLabs
Email: sinn061094@gmail.com