Editify ("we", "our", "the app") is an offline PDF editor for iOS. We have built Editify with privacy as a foundation. This policy explains, plainly, what we do and do not collect.
Document privacy: Editify processes documents on your device and does not automatically upload them to a developer-operated server. The app keeps local export records and aggregate diagnostic counters. You can review and manually share a diagnostic summary; it is never sent automatically. Network exceptions and sharing you choose are described below.
1. Information We Do Not Collect
Editify does not automatically send the developer:
The contents of any PDF, image, document, or scan you open or create with Editify.
Your name, email address, phone number, or location (unless you contact us directly by email).
Your browsing history, screen recordings, or a stream of your in-app activity. Aggregate task counters stay local unless you choose to share their summary.
Device identifiers used for advertising (IDFA), or any other tracking identifiers.
Editify does not include any third-party analytics, advertising, crash-reporting, or tracking SDKs.
2. Information Processed Locally on Your Device
The app keeps the following operational data locally. This data is not automatically sent to the developer:
Your documents: imported and prepared files can be held in private app caches for processing and preview. Completed files can be saved to the app library, Photos, or a destination you select. A cloud file provider or sharing app you choose may transfer those files under its own settings and policy.
App preferences: theme, language, recently opened files, favorites — saved in standard iOS UserDefaults.
Export allowance and delivery records: local preferences record use of the three one-time exports and completed operation identifiers. A private receipt index uses local file paths, sizes, and modification times to recognize the same output and avoid charging it twice. These records are separate from the diagnostic summary.
Diagnostic counters: aggregate counts of prepared, completed, canceled, or failed exports, paywall openings, purchase and restore outcomes, and import outcomes. The summary contains the app version and these counts. It does not contain file names, paths, document contents, document hashes, email addresses, advertising identifiers, or device identifiers.
You can inspect the diagnostic summary in Settings, clear its counters, or explicitly share it using the system share sheet. Clearing diagnostics does not reset the export allowance. Editify makes no automatic diagnostic uploads. Removing the app removes its local data; files you exported to other destinations are managed there.
3. Permissions We Request
Editify only asks for the permissions it needs to perform a task you initiate:
Camera — required only when you choose to scan a document with the camera scanner. Images are processed locally.
Photo Library — required only when you choose to import images or save converted files to Photos.
Files — required to open PDFs from iCloud Drive or other file providers you select.
You can revoke any permission at any time in iOS Settings → Editify.
4. In-App Purchases
Editify offers monthly and yearly Pro subscriptions and a separate lifetime purchase through Apple StoreKit. Existing subscription products remain recognized. Apple handles payment information, billing, and renewals. On your device, Editify reads and verifies StoreKit transaction and entitlement information, including the product identifier, product type, expiration date, revocation status, and upgrade status, to determine access and restore purchases. The app does not receive your Apple ID credentials or payment method and does not upload transaction records to a developer-operated server.
Editify connects to the network only in these specific situations:
When you use the "Web Page to PDF" feature and provide a URL — we load that URL in a local WKWebView to render the page.
When you tap a link in this Privacy Policy, the Terms, or the in-app paywall — the iOS system opens that link in your default browser.
When StoreKit communicates with the App Store to load products and eligible offers, purchase, restore, or verify access.
If you enable a TSA (Time Stamping Authority) for a digital signature, the device sends a cryptographic message imprint (hash) to the configured TSA to request a timestamp. The timestamp request does not contain the PDF file itself.
When you explicitly share a document or diagnostic summary, contact support, or use a cloud file provider. The selected app, recipient, or provider handles that transfer.
There are no automatic document or diagnostic uploads to the developer. Ordinary network requests to a website, Apple, or a TSA can expose connection information, such as an IP address, to that service.
6. Children's Privacy
Editify is not directed to children under 13 and does not knowingly collect any information from them. The app is rated 4+ in the App Store and contains no advertising or social features.
7. Data Retention & Your Rights
Document processing and operational records remain local; Editify has no developer-operated document or analytics backend. You retain ownership and control of your documents. You can delete library files in the app, clear the diagnostic counters in Settings, or uninstall the app to remove its local data. Exported files remain at the destinations you chose. If you email support or explicitly share information with us, we receive the information you choose to send.
If you reside in the EU, UK, California, or other regions with comprehensive privacy laws (GDPR, CCPA, KVKK), the rights granted to you under those laws (access, deletion, portability, etc.) apply. Contact us about information you have chosen to send us.
8. Changes to This Policy
If we materially change how Editify handles data, we will update this page and the "Last updated" date at the top. Continued use of Editify after a change indicates acceptance of the revised policy.