Privacy Policy

Offline PDF works entirely on your device. It has no account, no advertising, no analytics and no tracking, and it does not send your documents, or anything about you, to us or to anyone else. On Android it does not even have permission to use the internet.

Your documents leave the app only when you send them somewhere yourself: when you share, save, print or back them up. The only information that can reach us is what you choose to email us and the reports that app stores give developers. Both are explained below.

Offline PDF is made by Georgios Tsimpilis, trading as Mental Bound, a sole proprietorship in Greece:

• Address: Alexandroupoleos 20, 115 27 Athens, Greece
• VAT number: EL115720389
• General Commercial Registry (G.E.MI.) number: 196367602000
• Email: support@mentalbound.com

For the personal data described under "What can reach us", we are the controller under the EU General Data Protection Regulation (GDPR).

The app keeps the following in its private storage on your device, which other apps cannot read. None of it is sent to us, and we have no access to it.

• Your library: the documents you add or create; the previous version of each document, kept when you save so that you can go back to it; and the documents you delete, which stay in Recently deleted for 30 days and are then removed for good.
• An index of your library: a small picture of each document's first page, its number of pages and the page where you stopped reading.
• Unsaved work: if the app closes before you save, your changes are kept for up to 14 days so that the app can offer them back.
• Your settings: for example the language, Night reading, the App lock and the backup folder you chose.
• Your signature: if you keep the signature you draw, so that you can place it again.
• A short error log: the last 20 problems the app ran into, saying what went wrong and where in the app. It never contains what a document says, and the app takes the names of your documents out of it. It is read only when you choose Report a problem.

Passwords that you type to open protected documents are held in memory while the app runs and are never stored.

A document that another app opens with Offline PDF is copied into the app's private storage so that it can be read. It is added to your library only if you choose Keep or start changing it; otherwise it is removed. Several documents shared with the app at once are added to your library.

Copies that the app makes for other apps are removed automatically: a copy made for printing once printing is done (or at the next start), a copy made for sharing the first time the app starts at least a day after you shared it, and the photos taken with the camera for a new document once the document is made.

Uninstalling the app deletes everything above. On Android 10 and later, the system first asks whether to keep the app's data; if you keep it, reinstalling the app brings your library back.

The app never sends anything by itself. A document leaves only through something you do:

• Share sends a document, or a clean or smaller copy of it, to the app you choose.
• Save to device writes a copy where you choose.
• Print hands a copy to your device's printing service.
• Backup copies your documents into a folder you choose. If a cloud service keeps that folder in sync, Google Drive for example, that service uploads the copies; the app itself does not.
• Links in a document open in your browser, after the app asks you.
• Copying text puts it on your device's clipboard, where other apps can read it when you paste it.

Once something reaches another app or service, that app's or service's own privacy policy applies.

Some tools help you send less:

• A photo that you add to a document leaves out the place and the time its camera recorded.
• A Clean copy keeps only the pages. It leaves out the document's details, such as its title and author, and its attached files, scripts, comments and form fields. It does not look inside pictures, which can carry details of their own.
• Redact removes what it covers from the file itself, not only from view.

Check a redacted document or a clean copy before you send it.

On Android, the app asks for no permission to use the internet, your contacts, your location, your files or your photos. It uses the system's own features, which hand it only what you choose:

• App lock uses your device's screen lock, fingerprint or face recognition through the system's prompt. This is the only permission the app has. The app learns only whether unlocking succeeded; it never receives your fingerprint, your face or your screen-lock code.
• Photos are chosen in the system's photo picker; the app receives only the photos you pick.
• The camera is your device's own camera app; the app receives only the pictures you take.
• Files and folders are opened and chosen through the system's pickers; the app can reach only what you choose.

Android's cloud backup is turned off for the app, so your documents are not copied to your Google account. From Android 12, moving to a new device with Android's own device-to-device transfer can bring your library along.

From Android 13, the list of recent apps shows no picture of what the app has on screen. The app writes nothing about your documents to the device's system log, which can end up in bug reports.

When you email us. If you write to support@mentalbound.com, including through Report a problem, we receive what you send: your email address, your name if your email shows it, your message and anything you attach. Report a problem prepares the email in your own email app, where you can read it and change it before you send it, or discard it. Besides your words, it contains the app's version, your device's model and Android version, and the recent errors from the error log. The app sends nothing itself.

Your email becomes a request in our support system, together with our replies. An AI model (Claude, by Anthropic) helps us sort requests and prepare replies; a person reads every request and sends every reply. We use what you send only to answer you and to fix problems in the app. The legal bases are taking the steps you ask us to take (Article 6(1)(b) GDPR) and our legitimate interest in fixing problems (Article 6(1)(f) GDPR). A request is deleted 24 months after its last message; our daily backups can hold a deleted request for up to 30 more days.

These service providers process your email for us:

• Proton Mail, our mailbox.
• Mailgun (EU region), which carries incoming mail into our support system.
• Supabase (Frankfurt), which stores our support system's data.
• Vercel, which runs our support system.
• Anthropic, which helps us sort requests and prepare replies, and may process the text of requests and replies outside the EU, under its data-processing agreement.

Through the app stores. The store you get the app from, Google Play or, once the app is offered there, Apple's App Store, sells you the app and handles payment, refunds and downloads under its own terms and privacy policy. We never see your card or payment details. The store tells us about sales and refunds, for example an order number, date, country and price, which we keep in our accounts for as long as tax law requires (Article 6(1)(c) GDPR). If you have agreed to share usage and diagnostics with Google or Apple, the store also gives us crash reports and statistics about the app, such as device models and Android versions, which do not tell us who you are; we use them only to find and fix problems (Article 6(1)(f) GDPR). If you review the app, we see your review and the name the store shows with it, and we may reply there.

We do not sell personal data, we do not use it for advertising, and we make no automated decisions about you.

Under the GDPR you may ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it, restrict its use or give it to you in a portable form. You may also object to its use. Write to support@mentalbound.com; we reply within one month. You may also complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the data protection authority where you live or work.

What the app keeps on your device is in your own hands: you can delete documents, stop the backup, and remove the app with everything it keeps.

Offline PDF is not meant for children under 13, and we do not knowingly receive personal data from them. If you believe a child has emailed us, write to us and we will delete the email.

Your documents are protected by your device's own security, such as its screen lock and the encryption of its storage. Anyone who can use your device while it is unlocked can open the app, unless you turn on the App lock in Settings. Because the app keeps no copy in the cloud, back up what you cannot afford to lose (Settings, Backup).

If we change this policy, we will update its version and date. If a change matters to you, we will say so in the app's release notes before it takes effect. The app always contains the version that applies to it, in Settings, About.

Mental Bound, Alexandroupoleos 20, 115 27 Athens, Greece · support@mentalbound.com