PDEditX Privacy Policy

Effective 6 October 2026

About this policy

PDEditX is a PDF app by XeroSoft Studio. This policy covers the current native Android app. No account is required. For privacy questions or deletion requests, contact support@xerosoftstudio.com.

Your documents

PDFs, images, recognized text, form values, signatures and editing drafts are processed on your device. PDEditX does not upload your documents to XeroSoft Studio. Recent-document references, preferences, working copies and recovery drafts are stored locally. Passwords and signing credentials you supply are used for the document operation, not sent to us.

Sharing and other apps

Documents leave PDEditX when you choose a sharing, printing or storage provider. Cloud storage, email, your keyboard and other apps handle data under their own policies. Check the recipient and contents before sharing. PDEditX does not provide hosted signing links, recipient tracking or cloud document storage.

Scanning and text recognition

Text recognition uses bundled Google ML Kit models. The optional document scanner uses Google Play services and may need a download before first use; it is not available on every device. Google documents collection of SDK/device and app information, installation or device identifiers, feature events and performance/error information for diagnostics and usage analytics. Google's policies apply to those services. See Google's ML Kit data disclosure and Google's privacy policy.

Ads and ad-free purchase

The free version may request a non-personalized Google AdMob ad after some successful PDF saves. Ads are not shown at app opening, while reading or editing, after failed saves, or to a user whose ad-free purchase has been verified. Frequency limits apply and PDF saving never waits for an ad. Releases with an age-group setting ask for a coarse age group before requesting ads and store only that choice locally, not a birth date. Ads remain disabled for under-18 or unanswered choices; PDF tools remain available. Confirmed adults receive applicable privacy choices through Google's User Messaging Platform before ads are requested. Earlier releases without this setting apply under-age treatment to every ad request. PDEditX limits ads to teen-rated content and removes Android advertising-ID and Privacy Sandbox ad-personalisation permissions. Google Mobile Ads still automatically processes and shares IP-derived approximate location, app interactions, diagnostic information and device or account-related identifiers for advertising, analytics and fraud prevention. It uses encrypted transport. Where available, age and advertising privacy choices can be managed through the Home menu's ad-free section. See Google's Mobile Ads data disclosure and Google's privacy policy.

Purchases

Remove ads is a non-consumable purchase managed by Google Play; no PDEditX account is required. The app sends the Google Play purchase token—not PDF contents, filenames, signatures or form data—to XeroSoft Studio's verification endpoint. The endpoint sends it to Google Play to confirm the package, product, payment state and acknowledgement, and does not use it for advertising. A verified token is encrypted with an Android Keystore key on the device so access can survive temporary connection failures. Google Play and XeroSoft Studio security logs may retain transaction and request information as needed for fraud prevention, support, accounting and legal obligations. Promo codes are also redeemed and restored through Google Play.

Diagnostics and feedback

Current native PDEditX keeps its own error reports locally; it does not automatically send them to our server. Up to 50 local diagnostic records, 25 feedback archive records and 25 consented pending-delivery records are retained, with older records replaced. In version 1.3.18 and later, when you tap Send feedback, your current message, category, optional reply email, app version, random session/report identifier and timestamp and—only if you select it—device/Android details are sent over HTTPS to XeroSoft Studio and stored for support. The server also receives connection details such as IP address and user-agent. A local copy remains on your device. If delivery fails, this consented report is queued for retry when you next open the app; older local feedback is never automatically uploaded. Earlier native versions save feedback locally and open Android's sharing chooser without submitting to our server. No PDF, signature or historical error reports are attached automatically. Do not include confidential document contents in feedback.

Retention and deletion

Older releases: Versions such as 1.2.6 offered remote error reporting and feedback submission to XeroSoft Studio. Those services could receive technical error details, app/device information, submitted feedback, an optional reply email, and connection information such as IP address and user-agent. The current native release does not automatically upload its own error reports. Updating the app does not automatically delete correspondence or reports already received. Contact support@xerosoftstudio.com about previously submitted data; do not send your PDF or signing credentials to identify a request.

Working copies, drafts and local settings remain until removed or app storage is cleared. Clearing storage or uninstalling removes app-private data and can permanently lose unsaved work, so export anything you need first. Exported files and copies held by other apps or recipients must be deleted separately. Removing a Recent documents entry only removes its history entry. PDEditX disables Android backup of its private app data. Feedback and support correspondence sent to us are retained only as needed for support, security or legal obligations; email support@xerosoftstudio.com to request access or deletion. Uninstalling does not delete feedback already sent to us. Google's retention controls apply to data handled by Google services.

Security and your choices

PDEditX uses Android's private app storage and user-selected file access rather than unrestricted storage access. Local storage is not a promise of additional document encryption: protect your device and exported PDFs. We do not sell your data and do not operate cross-app tracking analytics. Core PDF viewing, editing and saving remain usable without buying ad-free access. You can use the reader and editor without scanning or sending feedback. Where Google requires it, the app provides an ad privacy choices entry point. This policy may change with future versions; review it when updating.