Privacy
Effective 29 August 2026 · covers pdf-iq.com and the PDFiq Android app
This one page covers both things we make: the tools on this website, and the PDFiq Android app. They are built differently and collect different amounts, so they are described separately rather than averaged into one comfortable paragraph.
The short version
This website: no account, no cookies, no analytics, and no upload. Your files are opened by your browser and never sent anywhere.
The app: the same tools run on your phone and your files stay there — but the app is not silent. It contains Firebase Analytics and Crashlytics, and its AI summarise feature sends the extracted text of your document to Google's Gemini API. Both are described in full below.
We do not claim either surface is "100% private", because that would not be true of the app's summarise feature.
Who we are
pdf-iq.com and the PDFiq Android app are published by BillionEdges. In this policy "we", "us" and "our" mean BillionEdges, and "you" means the person using the site or the app.
You can reach us at support@pdf-iq.com about anything here.
Part one — this website
Your files are not uploaded
Every tool on this site — compress, merge, split, images to PDF, rotate, reorder and OCR — runs inside your browser tab. The code that does the work is downloaded with the page, the same way a stylesheet is, and it then operates on a file your browser holds in memory.
There is no upload step because there is no server to upload to. That means there is also no deletion policy for your documents: we cannot delete what we never received. You can check this yourself — open your browser's developer tools, use a tool, and watch the network panel stay empty. The counter in the footer of every page measures the same thing and is live, not decorative.
What we collect on this site
No account. There is nothing to sign in to.
No cookies. We set none, for any purpose, including analytics.
No analytics and no tracking. There is no analytics SDK, no tag manager, no pixel and no third-party script of any kind on this site. Nothing here reports back what you did.
No third-party requests. Fonts are served from this domain rather than a font CDN, so loading a page does not tell anyone else that you visited.
One exception, and only if you choose it: the form on the firms page sends an email address and a description of what you do, when you fill it in and press the button. It is described in full below. No tool on this site sends anything, ever.
One exception: the form on the firms page
This applies to the website only. The Android app does nothing of the kind — it has no such form, and nothing in this section is part of the app's Google Play Data Safety declaration.
/for-professionals asks whether firms would want a team licence, and it is the only place on this site that receives anything from you. If you use that form we store exactly five things:
- The email address you type — so we can reply
- What you say you do, in your own words — the answer the page exists to collect
- What you say you spend too long on, if you choose to answer that — also in your own words, and left empty if you skip it
- Whether you said you would expect to pay once or yearly, if you answer that — also your own words, and left empty if you skip it
- The date you sent it
That is the whole record. We are handed your IP address on that request, as any server is, and we deliberately do not write it down. No name, no company, no cookie, and nothing that identifies the browser.
It goes to this site's own infrastructure and to nobody else. There is no third-party form service: the content security policy on every page of this site would block one, so this is verifiable rather than merely promised. There is no mailing list. The address is used to contact you about professional access and for nothing else — not newsletters, not product announcements, and it is never sold, rented or shared.
Ask at support@pdf-iq.com and it is deleted. Using any of the seven tools never involves this form, and none of them asks you for anything.
Three things stored in your browser
These stay on your device and are never sent to us. You can clear all of them at any time through your browser's "clear site data" control.
- The OCR page records a single flag noting that a language model has already been downloaded, so it can tell you whether the next run needs a download.
- The OCR language model itself is cached by your browser after its first download, so OCR keeps working with no connection.
- A file handed from one tool to the next. When you finish with a tool and follow one of the "next" links — compress something and then split it, say — the result has to survive the page change, because each tool is a separate page. It is put into your browser's own storage on this site, picked up by the next tool, and deleted in the same step. Anything left behind by a link you did not follow is deleted after ten minutes. This is the only time a document of yours is written to storage rather than only held in memory, it never leaves your device, and it does not happen unless you click one of those links.
The one request this site makes
OCR needs a language recognition model, which is between 6 MB and 11 MB depending on the language. It is served from this domain, downloaded once, and then cached. That download is a request for a file; it does not carry any part of your document, and no other tool on this site fetches anything at all after the page has loaded.
Server logs
The site is static files served by Cloudflare Pages. Asking for a web page necessarily tells the server who is asking, so — as with every website — the request is recorded, including your IP address, the time, the page requested and your browser's user-agent string. We do not combine those records with anything else, and there is nothing else to combine them with: no account, no cookie, no identifier.
Your documents are not in those logs, because your documents are never sent.
Part two — the PDFiq Android app
What happens entirely on your device
These run locally. The files involved never leave your phone and we cannot see them:
- Creating a PDF from photos or camera images
- Compressing a PDF
- Rotating, deleting, reordering and extracting pages
- Merging and splitting PDFs
- Reading the text off a scanned document (OCR)
- Viewing, saving and sharing the results
These work with no internet connection and without an account, and they are unlimited and not metered.
Reading a scan uses a text recogniser that Google Play Services fetches to your device once. That is a download to you, not an upload from you: your document is never sent anywhere, and after that first fetch it works with no connection like everything else in this list.
The app does not request storage permission — it uses Android's own photo and document pickers, so you choose exactly which files it can see. It also does not request camera permission: scanning hands the job to your existing camera app, which returns the picture, and that needs no permission of its own.
Summarise — the one feature that sends data off your device
When you use Summarise, this is what happens, in order:
- The text is extracted from your PDF on your phone.
- That extracted text — not the file, not the images, not the original formatting — is sent over an encrypted connection to our server.
- Our server forwards the text to our AI provider, which generates the summary.
- The summary is returned to your phone and displayed.
We do not store the text, the summary, or any part of your document. The text exists only for the duration of the request and is discarded once the summary is returned. It is not written to a database and is not retained in our systems.
Our AI provider is Google (Gemini API). At the time of writing, data submitted through the paid Gemini API is not used to train their models. We may change or add providers, and will update this policy if we do.
You are shown a disclosure explaining this before your first summary, and it stays available in the app's Settings. Our own advice, stated in the app: don't send anything you wouldn't email.
Summarise is the only feature that requires an account, because it costs us money to run and we need to count usage fairly.
Account information
If you sign in to use Summarise, we receive your email address and a Google account identifier through Google Sign-In. We do not receive your contacts, your Google Drive, your photos, or your Google profile beyond this. We do not build a marketing list and we do not send marketing email.
Usage counters
To apply the monthly summary allowance we store a small record against your account, in Google Firestore:
- Account identifier — to attach your counters to you
- Whether you have bought Pro — to apply the correct limit
- Number of summaries used this month — to enforce the monthly allowance
- Current period and reset date — to know when the allowance renews
- Recent request timestamps — to apply an hourly rate limit and prevent abuse
That is the entirety of what we hold about you on our servers. There is no document, no text, no summary and no file name in that record.
Diagnostics and analytics
The app contains Firebase Crashlytics, which sends us crash reports, and Firebase Analytics, which tells us which features are used and where people run into problems. These record events such as "a PDF was created" or "an operation failed", along with device model, operating system version, country, and an app-generated identifier.
Both start when the app starts. Neither is switched on by using a particular feature, and there is no setting in PDFiq that turns either off — opening the app is by itself enough to record a session, even if you close it again without touching a tool. If you would rather they did not run at all, the only way is not to install the app.
What they never receive is your document content, extracted text, summaries, or file names.
This is declared to Google Play on our Data Safety form as collecting app interactions, crash logs, diagnostics and device identifiers. It is stated here in the same terms.
The app contains no advertising SDK. We do not sell, rent or share your personal information with data brokers, advertisers, or any third party for their own marketing purposes.
Purchases and app integrity
PDFiq Pro is a one-time purchase, not a subscription. It is sold through Paddle, who act as the merchant of record and handle payment and any tax due. We never see or handle your card details, billing address, or payment information — we receive only confirmation that a purchase was made. Purchases are not made inside the Android app.
We use Firebase App Check with Google Play Integrity to confirm that requests to our servers come from a genuine installation of PDFiq rather than an automated script. This protects our AI costs and does not involve your documents.
What the app never collects
- Your PDFs or images — they are never uploaded
- The text of your documents, beyond the single Summarise request described above
- Your summaries
- File names or document metadata
- Your contacts, calendar, location, microphone or camera roll
- Payment details
Who your data is shared with
Nothing from this website is shared with anyone, because nothing from this website is collected. The app uses a small number of providers, each for a specific purpose:
- Google Firebase — sign-in, usage counters, hosting, analytics and crash reports. Receives: account identifier, usage counts, diagnostic events.
- Google (Gemini API) — generating summaries. Receives: the extracted text of a document you chose to summarise.
- Paddle — payment processing for the one-time Pro purchase, which is made on pdf-iq.com rather than in the app. Receives: your payment details, handled entirely by Paddle as merchant of record.
We may also disclose information where we are legally required to, or where it is necessary to protect our rights or the safety of others.
Where your data is processed
Our servers and database are hosted on Google Cloud infrastructure in India (the asia-south1 region). Our AI provider and analytics services may process data in other countries, including the United States. By using Summarise you consent to your extracted text being processed in these locations.
How long we keep things
- Document text and summaries: not kept at all — discarded when the request completes.
- Account and usage counters: kept while your account is active, and deleted when you delete your account.
- Crash and analytics data: retained according to Firebase's default retention periods, typically up to 14 months.
- Files the app creates on your phone: temporary working copies are deleted automatically after 7 days or once 20 files accumulate. Files you explicitly save go to your Documents folder and are yours — we never touch or delete them.
- Files this website creates: none. What you save, your browser saves straight to your own disk.
Deleting your account and data
If you signed in for Summarise, you can delete your account and everything associated with it at any time.
- In the app: Settings → Delete account.
- By email: write to support@pdf-iq.com from the address you signed in with, and we will delete your account within 30 days.
Deleting your account removes your account record and usage counters from our servers. It does not affect any PDF you have already saved — those files are yours and are not ours to delete. A one-time Pro purchase is not affected either: it is not a subscription, so there is nothing to cancel, and deleting your account does not refund or revoke it.
If you have only ever used this website, or have never used Summarise, we hold nothing about you and there is nothing to delete.
Your rights
Depending on where you live, you may have rights to access, correct, export, restrict or delete the personal information we hold about you, and to object to certain processing. Because we hold so little — an email address and a set of counters — most such requests are straightforward.
Write to support@pdf-iq.com and we will respond within 30 days. We will not charge you for exercising these rights and will not treat you differently for doing so.
Children
Neither the site nor the app is directed at children, and neither is designed for use by anyone under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
Security
All communication between the app and our servers uses encrypted connections (TLS), as does this website. Our AI provider keys are held on our servers and are never included in the app. Requests to our servers require both a valid sign-in and proof that the request came from a genuine installation of PDFiq.
No system is perfectly secure and we cannot guarantee absolute security. What we can tell you is that the most sensitive thing you could give us — your documents — is something we deliberately never hold.
Changes to this policy
If we change this policy in a way that materially affects how your information is handled, we will update the effective date above and notify you in the app before the change takes effect. Continued use after that point means you accept the revised policy.
Contact
Questions, concerns or requests about your data: support@pdf-iq.com
PDFiq and pdf-iq.com are published by BillionEdges. Last updated 29 August 2026.