This policy explains what PDF Maker & Scanner (the “App”) does with your information. Bluedots (“we”, “us”) is the developer of the App and the party responsible for the limited data described below.
The short version: your documents, scans, photos and the text inside them stay on your device. We do not have a server that receives them, we cannot see them, and we do not sell or share them with anyone. Scanning, text recognition (OCR), translation and QR reading all run on your device.
The following stays in the App’s private storage on your phone, or in a location you choose yourself. It is not transmitted to us.
PDF passwords you set are used to encrypt the file and are not stored by us or transmitted anywhere. If you protect documents with the locked area, unlocking uses your device’s own biometric or screen-lock verification through the Android system — the App never receives your fingerprint, face data or device PIN.
If you use the backup feature, backup files are written to the folder you select using the Android file picker (for example a folder on your device or in your own cloud drive). That destination is under your control and governed by that provider’s terms, not ours.
The App participates in Android’s built-in backup, so your settings can be restored when you set up a new device. This is operated by Google under your device’s backup settings, which you can turn off in Android Settings.
The App uses a small number of services that receive limited technical data. It shows advertising, and it includes usage analytics limited to how the App’s own features are used. Neither ever receives the contents of your documents.
If you subscribe to Pro, advertising is switched off entirely.
| Service | Purpose | Data involved |
|---|---|---|
| Firebase Crashlytics (Google) | Diagnosing crashes and stability problems | Crash stack traces, device model, OS version, app version, and a randomly generated installation identifier. No document content and no file names. |
| Google AdMob | Showing the advertising that keeps the free version free | An advertising identifier, approximate location derived from your IP address, device model, OS version, app version, and which ads were shown or tapped. Whether ads are personalised depends on the choice you make in the consent form. No document content, no extracted text, no file names. |
| Google User Messaging Platform | Asking for, recording and letting you change your advertising consent where the law requires it | Your consent choices, and the country the request came from. Reachable again at any time from Settings → Ad privacy choices. |
| Firebase Analytics (Google) | Understanding which features are used and whether the subscription is priced and presented sensibly | Which screen or feature was opened, whether a premium prompt was shown and what was chosen, whether a scan completed and how many pages it had, subscription status, device model, OS version, app version, country, and a randomly generated installation identifier. No document content, no extracted text, no file names, no folder names. |
| Firebase Remote Config (Google) | Adjusting in-app limits and pricing presentation without shipping an update | A request for configuration values, carrying app version, device model and the same installation identifier. Nothing about your documents is sent. |
| RevenueCat | Managing subscriptions, restoring purchases across reinstalls, validating receipts | An anonymous app user ID, purchase and subscription status, country and platform. Payment card details are never seen by the App or by us. |
| Our own server (api.rktechnology.xyz) | Telling the App about newer versions, and which advertising units to use once advertising exists | A request for a small configuration file, carrying the app version and package name in the address, plus the IP address and device type that any web request necessarily reveals. No account, no identifier we assign, and nothing about your documents. Nothing is written to a database; the file is static and the request appears only in standard web server logs. |
| Google Play Billing | Processing the payment itself | Handled entirely by Google under your Google account. |
| Google Play services / ML Kit | Document scanning module and downloading on-device translation models | Standard service and download requests. Document content is not sent. |
These providers process data under their own policies: Firebase, RevenueCat, Google.
You may deny or revoke any permission in Android Settings. Denying a permission only disables the feature that needs it.
Where the GDPR or UK GDPR applies, we rely on: legitimate interests for crash diagnostics and feature-usage analytics needed to keep the App working and to improve it; performance of a contract for subscription management; consent for personalised advertising, collected through Google’s consent form the first time you open the App and changeable at any time from Settings → Ad privacy choices; and consent for permissions such as camera and notifications, which you grant or withdraw in Android Settings.
Documents and settings remain on your device until you delete them, empty the trash bin, clear the App’s data, or uninstall the App. Uninstalling removes the App’s private storage; files you exported or backed up to your own folders are not affected. Crash reports are retained by Google under Firebase’s retention schedule (crash records are kept for a limited period, typically up to 90 days). Subscription records are retained by RevenueCat and Google for as long as needed for billing and legal obligations.
Because your documents never leave your device, you already control them directly — you can view, export or delete any of them in the App at any time. For the limited data held by the services above, you may request access, correction, deletion or a copy, or object to processing, by writing to us at the address below. Depending on where you live you may also have rights under the GDPR/UK GDPR, the CCPA/CPRA, or similar laws, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. You can also lodge a complaint with your local data protection authority.
The App is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided such information, contact us and we will act on it.
Documents are kept in the App’s private storage, which other apps cannot read. PDF password protection uses standard PDF encryption, and the locked area is gated by your device’s biometric or screen-lock check. No method of storage is perfectly secure, and a device that is unlocked, rooted or compromised can expose files regardless of the App’s protections. Keep your device lock enabled and your PDF passwords safe — a lost PDF password cannot be recovered by us.
The third-party services listed above may process data on servers outside your country, including in the United States, under the safeguards described in their own privacy policies.
We may update this policy as the App changes. The revised version will be posted on this page with a new “Last updated” date, and significant changes will be highlighted in the App or its store listing. Continuing to use the App after an update means you accept the revised policy.
Questions or privacy requests about PDF Maker & Scanner:
Bluedots
Email: zm.ribadiya@gmail.com