EzDocument — Privacy Policy

Last Updated: October 19, 2026

The short version

• **Your documents stay on your device.** We don't upload, read or store your scans, PDFs, books, signatures or edits.
• **No account needed.** The app never asks for your name, email or phone number.
• **We don't sell your data, show ads or track you across other apps and websites.**
• To keep the app working and improve it, we use a few services: Firebase from Google (crash reports, usage statistics, remote settings, app integrity checks) and RevenueCat (purchases). None of them receives the contents of your documents.

The rest of this policy explains the details.

1. Who we are

EZ Document ("the app", "we", "us") is made by an independent developer. If you have a question about this policy or your data, email **thtuan1995@gmail.com**.

2. Your documents and files

Everything you create or bring into the app is stored in the app's private storage on your device. This includes scanned pages, imported PDFs, images and EPUB books, signatures, text you edit, redactions and earlier versions of edited files. The library database is encrypted, and its key is kept in your device's secure storage (iOS Keychain or Android Keystore).

We have no server that stores documents, and the app does not upload them anywhere. A document leaves the app only when you choose to share or export it, for example through the system share sheet, to another app, to Files or to email.

Your phone's own backup (iCloud or Google backup) may include the app's data, depending on your device settings. Apple or Google handles that backup, not us.

3. Processing on your device

These features run entirely on your device. They don't send your pages or text to us:

• **Text recognition (OCR)** uses Google ML Kit Text Recognition.
• **Language detection** uses Google ML Kit Language Identification.
• **Translation**, on supported Android devices, uses Gemini Nano through Android's on-device AI system (AICore).
• **PDF editing and redaction** happen inside the app.

Google's system services may download or update the on-device models these features need. Google handles those downloads under its own terms.

4. Files the app downloads

When you edit Chinese, Japanese or Korean text in a PDF, the app downloads the matching open-source font (from the Google Fonts collection) through the jsDelivr content delivery network. As with any download, the network sees your IP address. No document content is sent.

5. Information collected automatically

### Crash reports (Firebase Crashlytics)

If the app crashes, it sends a crash report: device model, operating system version, app version, the technical details of the crash and a random Crashlytics installation ID. Crash reports don't include your documents, images, file names or recognized text.

### Usage statistics (Google Analytics for Firebase)

To learn which features people use and where they get stuck, the app records:

• which screens are opened;
• feature events, such as "scan completed", "PDF edited" or "upgrade screen viewed";
• the app language and whether Premium is active;
• the app version, device model and operating system;
• an approximate country or region, which Google derives from your IP address;
• a random app-instance ID.

The app does **not** use the advertising identifier (IDFA on iOS) and does not track you across other companies' apps or websites. Usage statistics never include your documents, file names or text. Development builds send nothing.

### Remote settings and app integrity (Firebase Remote Config and App Check)

The app fetches settings from Firebase Remote Config, for example how many free edits are included. It also uses Firebase App Check to confirm requests come from the genuine app. App Check works through Apple App Attest or DeviceCheck on iOS and Google Play Integrity on Android. Both services use a random installation ID and tokens issued by Apple or Google. They receive no personal or document data.

### Purchases (RevenueCat, the App Store and Google Play)

When you buy Premium or make a tip purchase, Apple or Google processes the payment. **We never see your card or payment details.** RevenueCat manages purchases for us and receives:

• a random anonymous user ID;
• your purchase and subscription status and history;
• transaction IDs, the product, the price and the store country.

This lets the app unlock Premium and restore your purchases.

6. Permissions

The app asks for a permission only when you use the feature that needs it, and you can turn each one off in your device settings at any time.

• **Camera:** to scan documents.
• **Photos:** to import images you choose.
• **Files:** to import PDFs or EPUB books you choose.
• **Microphone (iOS):** iOS requires this text because of a media-playback component used for media inside EPUB books. The app never records or accesses your microphone.

7. How we use information

We use the information described above only to:

• provide the app's features and unlock purchases;
• find and fix crashes and bugs;
• understand which features are used, so we can improve them;
• protect the app and its services from abuse;
• answer your support requests.

Where the EU or UK GDPR applies, our legal bases are:

• performing our contract with you (app features and purchases);
• our legitimate interest in keeping the app stable, secure and useful (crash reports, usage statistics, integrity checks).

8. Sharing

We share data only with the service providers named in this policy, so they can provide their services to us:

• Google (Firebase);
• RevenueCat;
• Apple;
• Google Play;
• jsDelivr;
• Resend and Telegram, for support requests (see section 9).

We don't sell or rent personal data. We don't share it for advertising. We don't let anyone else use it for their own purposes. We may disclose information if the law requires it.

9. Support requests

If you contact support through our website, we collect the email address and issue description you give us. We use them only to answer you:

• Resend (an email delivery service) sends you an email to confirm the request.
• The request is then forwarded to our private Telegram channel so we can review it and reply.

We don't use this information for marketing.

10. How long we keep data

• **Your documents:** on your device until you delete them or uninstall the app.
• **Crash reports and usage statistics:** kept by Google for a limited period under the retention settings of our Firebase project, then deleted.
• **Purchase records:** kept by RevenueCat and the app stores as long as needed to provide your purchases and to meet tax and accounting obligations.
• **Support emails:** kept until your request is resolved, plus a reasonable period in case you follow up.

To prevent abuse of the free allowance, the app stores a count of free PDF edits you've used in your device's secure storage. On iOS this count can remain after you reinstall the app. It contains only a number.

11. Your choices and rights

• Delete documents in the app at any time. Uninstalling the app removes them from your device, except anything kept in your device backups.
• Turn off camera, photo or file access in your device settings.
• Cancel subscriptions in your App Store or Google Play account settings.

Depending on where you live (for example under the GDPR, the UK GDPR or the CCPA/CPRA), you may have the right to:

• access the personal data we hold about you;
• correct or delete it;
• object to or restrict how we use it;
• receive a copy of it.

To use these rights, email **thtuan1995@gmail.com**. We don't know who you are from the anonymous IDs above, so we may ask for details that help us find your records, such as a purchase receipt. You can also complain to your local data protection authority.

12. International transfers

Our service providers may process data in the United States and other countries. Where required, they rely on safeguards recognized by law, such as the EU Standard Contractual Clauses.

13. Security

Your library is encrypted on the device, and the app uses encrypted (HTTPS) connections to the services above. No method of storage or transmission is completely secure, but we work to protect your information.

14. Children

The app is not directed to children under 13, and we don't knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

15. Changes to this policy

We may update this policy when the app or the law changes. We will post the new version on this page with a new effective date. If the changes are significant, we will also tell you in the app or in the release notes.

16. Contact

Email: **thtuan1995@gmail.com**