PDF Lab — Privacy Policy

PDF Lab (“the App”) is a mobile PDF tools application built with a privacy‑first approach. Most document operations (merge, split, compress, convert, scan, OCR, watermark, sign, etc.) are performed locally on your device. We do not upload or store your document contents on our servers.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies globally.

Who We Are (Controller / Operator)

• App: PDF Lab
• Operator: Blue Sparrow (solo developer based in India)
• Website: https://bluesparrow.dev
• General contact: info@bluesparrow.dev
• Privacy contact: privacy@bluesparrow.dev

Quick Summary

• Your files stay on your device: We don’t collect your PDF contents.
• Sign‑in is used for fairness and subscriptions: Google Sign‑In helps us apply free‑tier limits and link purchases to your account.
• Limited usage tracking: We store per‑tool usage counters and basic operation logs (like success/failure and file sizes) to enforce limits and improve reliability.
• No ads: We don’t run ad networks and we don’t sell your personal information.

Information We Collect

We collect only what is necessary to operate the App, provide support, and run subscriptions.

1) Account Information (Google Sign‑In)

If you sign in with Google, we may receive and store:

• Google/Firebase user ID (UID)
• Name / display name
• Email address
• Profile photo URL (if available)
• Account creation and last login timestamps

Why: authentication, linking usage limits and premium status to your account, and account support.

Where stored: Firebase Authentication and Cloud Firestore (Google Firebase).

2) Usage Limits, Subscription Metadata, and Operational Logs

To run the free tier fairly and keep the App reliable, we may store:

• Monthly usage counters per tool (for example: merge count, split count, PDF→image count)
• Subscription tier/status and related metadata (for example: free, monthly, annual, lifetime; active/expired)
• Reset date / timestamps used to compute monthly limits
• Optional operation logs such as:
  • operation type
  • timestamp
  • success/failure
  • number of input files processed
  • approximate file sizes (input/output)
  • processing time
  • error messages (when something fails)

What we do not store in the cloud: the content of your PDFs/images, extracted text from your documents, or your document pages.

Where stored: Cloud Firestore (Google Firebase). Some usage data is also cached locally on your device for offline‑friendly operation.

3) Purchases and Subscription Processing

If you buy premium, purchases are handled by the app store and our subscription provider:

• Google Play / Apple App Store: processes payments (we do not receive full payment card details)
• RevenueCat: helps validate entitlements and manage subscription state across devices

RevenueCat may process identifiers needed to validate purchases and provide subscription features.

4) App Preferences and Local Data

We store certain settings locally on your device, such as theme/appearance preferences, feature settings (for example: chosen output formats), and cached usage counters for performance and offline support.

5) Support, Feedback, and Bug Reports (Optional)

If you contact us from inside the App (support/feedback/bug report forms), we collect what you submit, such as:

• your email address
• your message
• optional name/subject
• optional device/app metadata you choose to include (helpful for troubleshooting)

These messages are sent to us using a Blue Sparrow email delivery service endpoint (BSMail) to deliver your support request.

6) Camera, Files, and Storage Access

• Camera (Scan to PDF): used only when you choose to scan; captured images are processed on your device.
• File access (pick/save/share): used to read input files you select and to save output files you create.

7) Web Content (HTML / Web Page to PDF)

If you convert a web page to PDF, the App loads the URL you provide inside a device webview. The website you visit may collect data under its own privacy policy. We do not receive the content of those pages unless you choose to share files with us.

Information We Do Not Collect

• We do not upload or store your PDF contents on our servers.
• We do not sell personal information.
• We do not use advertising SDKs.
• We do not collect precise location data.
• We do not access contacts.

How We Use Information

We use information to:

• provide sign‑in and account features
• enforce free‑tier usage limits and show remaining usage
• activate premium features and verify subscription status
• provide customer support and respond to messages
• improve reliability and fix bugs (using high‑level operational logs)
• protect the App from abuse (for example, preventing limit bypass)

Sharing and Disclosure

We share information only as needed to operate the App:

Service Providers

• Google Firebase (Authentication, Firestore, Remote Config): account and usage data storage; configuration for usage limits
• RevenueCat: subscription entitlement management
• Google Play / Apple App Store: purchase processing and subscription management
• Google Sign‑In: authentication
• Google ML Kit (on‑device): used for OCR features; document content remains on your device
• Blue Sparrow BSMail service: delivers support/feedback messages you send us

Business and Compliance

If required to comply with applicable requirements, we may disclose limited information. We aim to disclose the minimum necessary.

International Use and Transfers

PDF Lab is operated from India and is available globally. Our service providers may process data in multiple countries. We use reputable providers and expect appropriate safeguards for data transfers where required.

Data Retention

We keep information only as long as needed for the purposes described:

• Account data: while your account is active; if you delete your account, we stop using it and remove or anonymize associated records within a reasonable period.
• Usage counters and subscription metadata: as needed to enforce limits, prevent abuse, and support your account.
• Support messages: as long as needed to address your request and maintain support history.
• Local device data: stored until you clear it in the App settings or uninstall the App.

Security

We use reasonable technical and organizational measures to protect information, including:

• encrypted connections (TLS) for network traffic
• provider‑managed encryption at rest (for example, within Firebase services)
• least‑privilege access controls

No system can be guaranteed 100% secure, but we work to protect your information.

Your Rights and Choices (Global)

Depending on where you live, you may have rights such as access, correction, deletion, objection/restriction, and portability (where applicable).

EU/EEA/UK/Switzerland (GDPR / UK GDPR)

If you are in the EU/EEA/UK/Switzerland, you may have additional rights under GDPR/UK GDPR, including the right to object to processing and the right to withdraw consent where consent is used.

United States (including California)

If you are in the United States, you may have rights under state privacy laws. We do not sell personal information and we do not share it for cross‑context behavioral advertising.

Brazil (LGPD)

If you are in Brazil, you may have rights under LGPD, such as confirmation of processing, access, correction, deletion/anonymization (when applicable), portability, and information about sharing.

India and Other Regions

We respect privacy rights globally and will respond to legitimate requests regardless of location. Depending on your country/state, additional rights may apply.

How to Exercise Rights

Email us at privacy@bluesparrow.dev with your request. We may ask for reasonable information to verify your request. We aim to respond within 30 days.

Children’s Privacy

PDF Lab is not directed to children under 13 (or the age defined by local requirements). We do not knowingly collect personal information from children. If you believe a child provided personal information, contact privacy@bluesparrow.dev.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last Updated” date and may provide in‑app notice for significant changes.

Contact

Questions or requests:

• Privacy: privacy@bluesparrow.dev
• General: info@bluesparrow.dev
• Website: https://bluesparrow.dev