Privacy Policy

Last Updated: October 23, 2026

This Privacy Policy explains how Zentro Studio, as the developer and data controller of PDF ToolBox (package name: com.pdftb.tool.box, referred to as the “Application,” “we,” “us,” or “our”), handles information in connection with the Application.

The Application provides PDF reading, editing, conversion, scanning, and file-management functions. It may also process technical information required to operate the Application, deliver notifications, support advertising and attribution, diagnose crashes, and maintain service performance.

By installing or using the Application, you acknowledge the practices described in this Policy.

1. Controller and Contact Information

Data controller: Zentro Studio

Privacy contact: alltasks.tachmet@gmail.com

You may use this email address to ask questions about this policy.

2. Information We Process

We seek to process only information reasonably necessary for the Application’s operation, maintenance, security, analytics, advertising, and improvement.

2.1 Device and Application Information

Depending on how you use the Application and which services are enabled, technical information may include:

  • device model and manufacturer;
  • operating system and Android version;
  • Application version and installation information;
  • Android ID, Advertising ID, or other technical identifiers made available by the operating system or integrated services;
  • network and connectivity information, including IP address and approximate IP-based location;
  • app launch, installation, session, and interaction information;
  • features used, accessed content categories, and performance events;
  • information about errors, malfunctions, and performance anomalies.

This information is generally used in an aggregated, pseudonymous, or de-identified form where feasible. Some third-party providers may process identifiers in accordance with their own privacy policies.

2.2 Crash and Diagnostic Information

When the Application crashes or experiences a technical problem, we and relevant service providers may receive diagnostic information such as:

  • crash logs and stack traces;
  • the circumstances in which the problem occurred;
  • device configuration and operating-system information;
  • application state and performance data;
  • relevant system or operational logs.

This information is used to investigate faults, improve stability, and resolve technical problems.

2.3 Files and Documents

If you grant file access and use file-related functions, the Application may access supported files on your device, including PDF, Word, and other supported document formats.

File access may be used to:

  • list, open, read, preview, organize, rename, move, or delete files at your direction;
  • display documents;
  • edit or convert documents;
  • scan or create documents;
  • save the results of operations to a location selected or authorized by you.

The reference functionality is designed so that file operations are performed locally on the device. We do not use the Application to collect the contents of your documents, photos, or other personal files for analytics, advertising, or unrelated purposes, and file contents are not uploaded to our servers or disclosed to third parties through the normal file-management workflow.

If you actively use Android’s sharing functions, upload a file to another application, or use a third-party cloud or sharing service, that separate service will process the file under its own terms and privacy policy.

2.4 Camera Information

The Application may request camera access when you choose a scanning, document-capture, or photo-based feature. Camera access is used to capture content that you intentionally choose to scan or photograph. The application does not use the camera for unrelated background monitoring.

2.5 Information We Do Not Intentionally Collect

Unless you voluntarily provide information through a file-related operation or another feature, the Application is not intended to collect:

  • your name or email address for ordinary local use;
  • financial or payment information;
  • biometric information;
  • precise location information;
  • the contents of your contacts;
  • the contents of your documents, photos, or other personal files for advertising or analytics.

Some third-party advertising, analytics, attribution, or security providers may process technical identifiers and approximate location derived from an IP address. Their processing is governed by their own privacy policies.

3. How Information Is Collected

Information may be obtained through the following channels:

3.1 Information You Provide or Authorize

We receive information when you:

  • grant file, camera, or notification permissions;
  • choose a file or document for opening, editing, scanning, or conversion;
  • use an Application feature that generates technical events;
  • contact us by email;
  • change advertising or privacy preference.

3.2 Automatic Collection

The Application and its integrated services may automatically generate technical, usage, crash, performance, advertising, installation, and attribution information when the Application is installed or used.

3.3 Third-Party Services

Certain information is processed through third-party services integrated into the Application. Those services may collect or receive technical and usage information through their SDKs or service interfaces. The relevant providers and purposes are described below.

4. Purposes for Processing

We use information only for purposes connected with the Application and its operation, including:

  • providing PDF reading, editing, scanning, conversion, and file-management functions;
  • responding to your requests and providing support;
  • displaying notifications related to Application use, such as conversion progress, conversion results, and important Application updates;
  • maintaining, testing, securing, and improving the Application;
  • detecting, investigating, and correcting crashes, errors, abuse, and fraudulent advertising activity;
  • measuring application use and advertising campaign performance;
  • complying with applicable legal requirements;
  • protecting the rights, security, and integrity of the Application and its users.

Information obtained through file access is used to perform the file operation you request. It is not used for behavioral advertising.

5. Firebase Services

The application uses certain Google Firebase services. Google LLC may process technical, usage, diagnostic, and messaging information as a service provider or independent processor depending on the service and applicable law.

Google’s privacy information is available at:

https://policies.google.com/privacy

5.1 Firebase Analytics

Firebase Analytics may process information such as:

  • Android ID and Advertising ID;
  • application usage and interaction events;
  • app launches, installation information, and performance events;
  • device and operating-system information;
  • IP address and approximate IP-based geographic location.

Analytical information is used to understand Application usage, measure product performance, and guide service improvements.

5.2 Firebase Crashlytics

Firebase Crashlytics may process:

  • crash reports;
  • Android ID and Advertising ID;
  • device and operating-system information;
  • crash logs and technical diagnostic information;
  • approximate IP-based geographic location.

Crashlytics is used to identify and resolve stability problems.

5.3 Firebase Performance Monitoring

Firebase Performance Monitoring may process technical information about Application operation, including request performance, startup behavior, response times, and related device or usage information. This information is used to evaluate and improve application performance.

5.4 Firebase Cloud Messaging

The Application uses Firebase Cloud Messaging (FCM) to support push notifications. FCM may process technical information required to deliver messages to your device, such as an installation or messaging token, device and application information, and message-delivery information.

FCM may be used for notifications related to Application operation, including service notices, and important Application updates. You may manage notification permission through Android system settings. Disabling notifications may prevent some messages from being delivered.

6. Cloudflare-Hosted Configuration

The Application uses a Cloudflare-hosted cloud configuration service to retrieve configuration parameters that control certain Application behavior, such as feature switches, display logic, operational parameters, or service policies.

For this purpose, the Application may make necessary network requests and transmit limited technical information required to complete those requests, such as IP address, connection information, device or Application version, and request or response metadata.

The Cloudflare configuration service is not used to upload the contents of your PDFs, documents, photos, contacts, or other personal files. We do not use this function to collect the private contents of your files.

Cloudflare’s privacy policy is available at:

https://www.cloudflare.com/privacypolicy/

7. Advertising and Consent

The Application may display advertising through Google Mobile Ads and mediation or advertising partners.

7.1 Advertising Identifiers and Related Information

Advertising providers may process information such as:

  • Advertising ID or other advertising identifiers;
  • device model and operating-system version;
  • application version and installation information;
  • IP address and approximate IP-based location;
  • ad impressions, interactions, and measurement events;
  • information necessary to prevent fraud or abuse.

Advertising partners may use this information to provide, measure, personalize, limit, or report advertising, subject to applicable law and your choices.

7.2 Consent in the EEA and United Kingdom

Where required by law, including in the European Economic Area and the United Kingdom, the Application may request consent for personalized advertising through a Google-certified consent management platform.

Choosing non-personalized advertising or withdrawing consent does not necessarily remove all advertisements; it changes the purposes or information available for personalization where the relevant provider supports that choice.

7.3 Advertising and Mediation Providers

The Application and its mediation configuration may involve the following providers or SDKs:

The Application may contain Google Mobile Ads and mediation adapters or related components for Facebook, AppLovin, Vungle, Unity, Pangle, Mintegral, Liftoff, and other configured networks. A provider may process information directly under its own terms when an ad request, impression, interaction, measurement event, or fraud-prevention event occurs.

You should review their privacy policies and consent choices for more information.

8. AppsFlyer Analytics and Attribution

The application uses AppsFlyer Ltd. and its affiliates for application analytics, campaign attribution, advertising measurement, installation analysis, and fraud prevention.

AppsFlyer may process:

  • device type and model;
  • operating-system and Application version;
  • IP address and approximate IP-based location;
  • Advertising ID and Android ID;
  • Google Install Referrer information;
  • installation and launch information;
  • campaign and attribution data;
  • in-app events selected for measurement;
  • technical information needed to detect or prevent fraudulent advertising activity.

AppsFlyer information helps us understand how users discover and use the Application, measure campaign performance, improve the product experience, and identify potentially fraudulent advertising activity.

We do not use AppsFlyer to collect the contents of your PDF files, documents, photos, contacts, precise location, financial information, biometric information, or other sensitive personal content.

AppsFlyer’s privacy policy is available at:

https://www.appsflyer.com/legal/privacy-policy/

9. Sharing and Disclosure

We do not sell the contents of your documents or intentionally disclose your private file contents for advertising.

Information may be disclosed in the following situations:

9.1. Service Providers

We may make relevant technical, usage, diagnostic, advertising, attribution, or crash information available to authorized providers that support:

  • cloud infrastructure and configuration delivery;
  • analytics and performance measurement;
  • crash reporting;
  • advertising and ad mediation;
  • attribution and campaign measurement;
  • fraud prevention;
  • push notification delivery.

The information shared is limited to what is reasonably necessary for the relevant service. Providers may process information under their own privacy policies and contractual or legal obligations.

10. Permissions

The Application requests permissions only when they are relevant to a feature or operating requirement. Android may show permissions introduced by the Application or by integrated SDKs.

10.1 Internet and Network State

INTERNET and ACCESS_NETWORK_STATE support network requests, service availability checks, analytics, crash reporting, advertising, attribution, push notifications, and Cloudflare-hosted configuration retrieval.

10.2 File Access

Depending on the Android version and the feature used, the Application may request:

  • MANAGE_EXTERNAL_STORAGE;
  • READ_EXTERNAL_STORAGE, where applicable up to Android 12L/API 32;
  • WRITE_EXTERNAL_STORAGE, where applicable up to Android 10/API 29.

These permissions support user-directed file listing, reading, writing, editing, conversion, organization, and document-management operations. The Application does not use file access to upload the contents of your files for advertising or analytics.

You may revoke or change file access through Android settings. After revocation, functions that require access to device storage may stop working, while other functions may remain available.

10.3 Camera

CAMERA may be requested when you choose a document-scanning, image-capture, or photo-based function. Camera access is not intended for unrelated background use.

10.4 Notifications

POST_NOTIFICATIONS may be requested to display relevant messages such as file-conversion progress, conversion results, service notices, and important Application updates. You can disable notifications through Android settings. Disabling the permission may prevent those notifications from appearing.

10.5 Foreground Services and Long-Running Conversion

When processing large or complex PDF documents, certain operations—such as generating thumbnails, rendering previews, or converting files in batches—may take an extended period of time.

The Application may use FOREGROUND_SERVICE_SPECIAL_USE to help these operations complete without interruption and, where applicable, keep users informed through timely notifications with progress updates and completion status.

10.6 Boot-Completed Signal

RECEIVE_BOOT_COMPLETED may be used to allow the Application to initialize eligible service state or restore relevant user-requested processing state after the device restarts, where supported by the Application and Android system. It is not used to read the contents of your files or to start unrelated advertising activity.

10.7 Default PDF Reader

The Application may register to handle Android ACTION_VIEW requests for application/pdf. If you choose PDF ToolBox as your default PDF application, Android may open compatible PDF files with this Application when you select them from another application or the file system.

You may change the default PDF application at any time through Android’s default-app settings. This function does not provide home-screen launcher functionality and does not allow the Application to control or replace your device launcher.

11. Data Retention and Deletion

We retain information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including providing and maintaining the Application, troubleshooting, ensuring security, complying with applicable laws and regulations, resolving disputes, and fulfilling applicable obligations.

Retention periods may vary depending on the type of information and the service provider involved. Technical, analytics, advertising, attribution, and crash-related information processed by third-party service providers may be retained in accordance with their respective privacy policies and data retention practices.

Files and documents processed through the Application's local file-management functions remain under your control on your device. You may manage or delete such files at any time through Android system functions or the file-management features provided by the Application.

The Application does not require a user account and does not maintain a server for storing your personal files or documents. Your files and documents are processed locally on your device.

When you uninstall the Application, the Application and its associated application data stored on your device will be removed in accordance with the Android operating system and your device settings. After uninstallation, you will no longer be able to use the Application to access or manage application data associated with the Application.

Information that may have been processed independently by third-party service providers, such as technical, analytics, advertising, attribution, or crash-related information, is subject to the applicable privacy policies and data retention practices of those providers.

12. Security

We use reasonable technical and organizational measures intended to protect information against unauthorized access, disclosure, alteration, and loss. Depending on the service involved, these measures may include:

  • access controls;
  • service-provider security controls;
  • SSL/TLS or comparable encryption for network transmission;
  • encryption or other protective controls for stored information where supported by the relevant infrastructure;
  • limitation of access to information needed for operational purposes;
  • crash, fraud, and security monitoring.

No network, device, transmission method, or storage system can be guaranteed to be completely secure. Accordingly, we cannot promise absolute security, and third-party providers remain responsible for the security controls applicable to their own services.

You are responsible for protecting access to your device, system account, and any credentials associated with third-party services.

13. International Transfers

If you are located in the United Kingdom or the European Economic Area (EEA), your personal data may be transferred to and processed in countries or regions outside your country of residence, including the United States, in connection with our use of Firebase, AdMob, Facebook, AppLovin, and other third-party services.

Where personal data is transferred across borders, we will implement appropriate safeguards in accordance with applicable data protection laws and regulations. Depending on the circumstances, such safeguards may include reliance on Adequacy Decisions, Standard Contractual Clauses (SCCs), and other legally recognized transfer mechanisms or appropriate safeguards, where applicable, to ensure that international data transfers comply with applicable data protection requirements.

If you would like more information about our international data transfers or the specific safeguards used for such transfers, you may contact us using the contact information provided in this Privacy Policy.

14. Your Privacy Choices and Rights

Subject to applicable law and verification requirements, you may have the right to:

  • request access to personal information held about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of information within the limits of applicable law;
  • object to or request restriction of certain processing;
  • request a portable copy of information where legally required;
  • withdraw consent where processing is based on consent;
  • manage advertising and notification preferences through the Application or Android settings.

Because much of the information processed by the Application is pseudonymous or held by independent service providers, we may need information such as device details, approximate dates of use, or relevant identifiers to locate the correct records. We will not request unnecessary information for verification.

To exercise a right, email alltasks.tachmet@gmail.com and describe the request and the Application involved. We generally intend to respond within 30 days. Where additional verification is necessary or a request is complex, the response period may be extended where permitted by law, and we will provide an appropriate update.

For information controlled directly by Firebase, an advertising provider, AppsFlyer, Cloudflare, or another third party, we may need to forward the request to that provider or ask you to contact the provider directly.

15. Children’s Privacy

The application is intended for users aged 13 or older. It is not directed to children under 13.

16. Policy Changes

We may revise this Policy when the Application, its services, legal requirements, or operational practices change.

The “Last Updated” date at the top of this Policy indicates when the current version took effect. Your continued use of the Application after a revised Policy becomes available may be treated as acceptance of the revised Policy to the extent permitted by law.

17. Contact

For questions about this policy, contact:

Zentro Studio

Email: alltasks.tachmet@gmail.com