Introduction
This Privacy Policy explains what information PDF4you (the “app”) collects, how it is used, and the choices you have. The app is provided by RovitaTech (“we”, “us”). Questions? Write to rovitatech@gmail.com.
1. The Short Version
- You choose a file and a tool. We send the file over an encrypted connection to our server, convert it, and send the result back to you.
- We do not show ads, we do not sell your data, and we do not use your files for advertising or to train any product.
- You can use the app, and buy PDF4you Pro, without an account. An account is optional; it lets you keep Pro on your other devices.
- We use a few trusted service providers to run the app (hosting, sign-in, email and purchases). They are listed in section 6.
2. Information We Collect
2.1 Your files
When you convert or edit a document, the app uploads the file or files you selected, plus the options you chose (for example page ranges, image quality, a watermark text or a signature you drew). If you use Protect PDF or Unlock PDF, the password you type is also sent so the server can perform the action. We use this only to produce the result you asked for. We do not look at the content of your files.
2.2 Account information (optional)
If you create an account we collect your email address and a password. Passwords are handled by our sign-in provider and stored only in hashed form. We never see them in readable form after they are entered. If you use “forgot password”, we send a one-time code to your email address. This email, and the confirmation email when you create an account, is sent through our email provider (see section 6).
2.3 An anonymous ID (everyone)
So the app can work without an account, it creates a random, anonymous user ID the first time you use it. It contains no name or email. We use it to let you use the service, to apply the free-plan limits (a daily number of conversions, file size and batch size) and to prevent abuse. If you later sign in, this ID is replaced by your account ID.
2.4 Purchases
If you buy PDF4you Pro, the payment is processed by Apple (App Store) or Google (Google Play). We never receive your card or payment details. Our purchase provider, RevenueCat, receives your app user ID and information about your purchase and subscription (product, dates, renewal and cancellation status) so we can unlock Pro features and let you restore them on another device.
2.5 What is stored on your device
The app stores on your phone: your theme choice (light or dark), how many free conversions you have used today, and your sign-in session, which is kept in the phone’s secure storage (Keychain on iPhone, Keystore on Android). Converted files are saved in a temporary folder and stay on your device until you delete them or the system clears its cache. Choosing Save or Share copies the file where you choose.
2.6 Technical and log information
Like most online services, our servers and hosting providers automatically record technical information about each request, such as your IP address, the time, the type and size of the file, the tool used, the app version, and error messages. We use this to keep the service running, find and fix problems, and protect it from abuse.
2.7 What we do not collect
We do not use advertising or analytics SDKs, we do not track you across other apps or websites, we do not collect your contacts, location, photos library, microphone or camera, and the app only opens files that you choose with the system file picker.
3. How We Use Information
- To convert, edit and return your files, and to run the features you use.
- To create and secure your account and keep you signed in.
- To apply free-plan limits and to provide Pro features you have bought.
- To process, restore and manage purchases and subscriptions.
- To keep the service safe, prevent abuse and fraud, and fix bugs.
- To answer your messages and provide support.
- To meet our legal obligations.
We do not use your data for advertising and we do not sell it.
4. Legal Bases (EEA, UK and Similar Laws)
Where the law requires a legal basis, we rely on: performing our contract with you (converting your files, running your account, providing Pro); our legitimate interests in keeping the service secure, preventing abuse, and improving reliability; legal obligations; and, where we ask for it, your consent, which you can withdraw at any time.
5. How Long We Keep Information
- Uploaded files and converted results: kept only as long as needed to complete the conversion and let you download the result, and then deleted promptly.
- Account information: kept while your account exists. If you delete your account in the app, it is deleted immediately. If you ask us to delete it by email instead, we delete or anonymise your personal data within 30 days. In both cases we keep only what we must keep by law.
- Anonymous ID and usage limits: kept while needed to apply limits and prevent abuse.
- Purchase records: kept for as long as needed for accounting, tax and dispute purposes.
- Server logs: kept for a limited period, and longer only where needed to investigate abuse or a security incident.
6. Who We Share Information With
We share information only with service providers that help us run the app, and only what they need for that purpose. They act on our instructions and are bound by their own privacy commitments.
- Supabase: Sign-in, accounts and anonymous sessions. Information involved: email, hashed password, user ID, session tokens, IP address.
- Railway (or our hosting provider): Runs our conversion server. Information involved: uploaded files while being processed, results, request logs.
- Brevo: Sends our account emails, for example your password reset code. Information involved: your email address and the content of that email.
- RevenueCat: Manages purchases and Pro status. Information involved: app user ID, purchase and subscription details, IP address and device information.
- Apple / Google: Take payments and run the app stores. Information involved: handled under their own privacy policies.
We may also disclose information if the law requires it, to protect people’s safety or our rights, or in connection with a merger, sale or reorganisation of our business (we would tell you and you could delete your account first).
We do not sell your personal information and we do not share it for cross-context behavioural advertising.
7. International Transfers
Our servers and providers may be in countries other than yours, including the United States. When information is transferred outside the EEA or UK we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
8. Security
Files and requests travel over encrypted HTTPS connections. Your sign-in session is kept in your phone’s secure storage. Access to our servers is limited and protected. No system is perfectly secure, so we cannot guarantee absolute security. Please do not upload files you are not permitted to share, and keep your password private.
9. Your Choices and Rights
Everyone: you can use the app without an account, sign out at any time, delete the files the app saved on your device, and cancel a subscription in your Apple ID or Google Play settings.
Deleting your account and data: open the app’s Settings and tap Delete account. Your account is deleted immediately and permanently. This does not cancel a store subscription: Apple or Google bills it, so cancel it in your store account settings. If you no longer have the app, write to rovitatech@gmail.com from the email address on your account and we will delete or anonymise your data as described in section 5.
EEA, UK and similar: you may ask us to access, correct, delete or export your personal data, to restrict or object to some processing, and to withdraw consent. You may also complain to your local data protection authority.
California and similar US states: you have the right to know what personal information we collect, to access and delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define it.
To use any right, email rovitatech@gmail.com. We may ask you to confirm it is you, and we will reply within the time the law requires (normally within 30 days).
10. Children
PDF4you is not directed to children under 13 (or under 16 where that is the age of digital consent in your country). We do not knowingly collect their personal information. If you believe a child has given us information, write to rovitatech@gmail.com and we will delete it.
11. Changes to This Policy
We may update this policy from time to time. We will change the effective date above, and if the changes are significant we will tell you in the app or by email. Please check this page now and then.
12. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us at:
RovitaTech
Email: rovitatech@gmail.com