Last updated: 10 September 2026
PDF One ("the app", package name com.quantumlogic.pdfmaster) is developed by Quantum Logic ("we", "us"). This policy explains what information the app handles, what leaves your phone, and what never does.
The short version: your documents stay on your phone. We have no servers and no accounts, and nothing from inside a document ever leaves the device. Two Google services process anything at all: AdMob, which shows the ads, and Google Analytics for Firebase, which counts which screens and tools get used — and which you can switch off in Settings.
Everything you create or edit in PDF One is stored in the app's private storage on your device. We cannot see it, and it is never uploaded anywhere. Files leave the device only when you deliberately share or save them yourself, through Android's own share sheet or save dialog.
Deleting the app deletes its private storage, and with it every document the app stored.
Internet — used exclusively to load ads from Google AdMob. Nothing else in the app uses the network.
Camera — used only by the document scanner feature, when you start it yourself.
Read images (Android 13+) / Read storage (older Android) — used only so you can pick images for Image‑to‑PDF.
All‑files access (MANAGE_EXTERNAL_STORAGE) — optional, and requested only when you open the "Device files" screen. It is used to list PDFs already on your phone (downloads, chat attachments, statements) so they can be opened without a file manager. The scan only reads names and files you choose; it never modifies, moves, or deletes anything, and it sends nothing anywhere. Every other feature of the app works without this permission.
The app shows one full‑screen advertisement after a document is saved, and nowhere else. Ads are provided by Google through the AdMob network. To serve ads, Google may process device identifiers (such as the advertising ID), IP address (from which approximate location can be derived), and how you interact with the ad.
In the European Economic Area, the United Kingdom, and Switzerland, the app first asks for your consent through Google's certified consent form, and ads are only requested after that choice. You can choose non‑personalised ads there. Clearing the app's storage resets this choice and the form appears again.
Google's use of data is governed by its own policies: Google Privacy Policy (https://policies.google.com/privacy) and How Google uses information from sites or apps that use its services (https://policies.google.com/technologies/partner-sites).
You can limit or reset ad personalisation at any time in your device's settings (Settings › Google › Ads).
The app reports anonymous usage statistics so we can see which features are worth improving. What is sent is the shape of usage: the name of the screen you opened, the id of the tool you ran (such as "merge" or "ocr"), how many files it produced, the class of an error when one occurs (such as "corrupt_file"), and a rough band for how many pages a scan captured (1, 2–5, 6–10, 11–25, 26–100, 100+) rather than the exact number.
What is never sent: file names, folder paths, page text, the results of OCR, form field values, passwords, author names, thumbnails — nothing derived from the content or the identity of a document. The events describe how the app was used, not what you used it on.
The Firebase SDK additionally records standard technical information of its own: app version, device model, operating system version, coarse country, and an app instance identifier it generates itself. That identifier belongs to the app installation, not to you, and it is reset when you clear the app's data or reinstall.
Analytics is on when you first install, and is always one tap from off: Settings › Privacy › "Share usage data". Turning it off stops collection inside the Firebase SDK itself, so nothing is gathered and held on the device for a later upload.
Google processes this data on our behalf as our analytics provider, under the Google Privacy Policy (https://policies.google.com/privacy). We use it only in aggregate. We do not attempt to identify individual users, and we do not combine analytics data with anything else.
Features such as OCR (text recognition), PDF editing, compression and conversion all run entirely on your device. No document content is transmitted for processing.
We do not collect names, emails, contacts, or precise location. We have no accounts, so there is nothing to log in to and no profile to build. We do not sell personal information, and we do not share it beyond the two Google services described above. Crash logs, when they occur, are stored only on the device itself.
The app is a general productivity tool and is not directed at children under 13. We do not knowingly collect personal information from anyone, including children: the analytics described above records which features are used, not who is using them, and it is never used to build a profile of a person.
If this policy changes, the updated version will be posted at this same address with a new date above. Continued use of the app after a change means you accept the updated policy.
Questions about this policy or the app: support@quantumlogic.app