Privacy Policy
This policy explains what information the OmniForgePDF Android app (“the app”) handles, why, and the choices you have. It is operated by Germán Meléndrez Carballo, an individual developer. Contact: germelcar@gmail.com.
1. Your files stay on your device
The app processes PDF files locally on your device. The content of your documents, extracted text, file names, file paths, and any passwords you enter for PDF tools are not sent to us or to any third party. If we add features that upload files in the future, this policy will be updated first, and any upload will be optional and explained before it happens.
2. Crash and error reports (Sentry)
Crash reporting is off unless you turn it on. The first time you open the app, it asks whether you want to send crash reports; nothing is sent unless you choose “Send reports”. You can change your choice at any time in Settings → Send crash reports.
If you turn it on, the app sends error reports to Sentry, a crash-reporting service, so we can find and fix crashes. Reports may include the app version, device model and Android version, the screen you were on and the type of action that led to the error, and technical stack traces. Personal and sensitive fields are removed before anything is sent, and default personal-information collection is turned off. Reports do not include the content of your documents.
Each installation sends a random installation identifier generated by Sentry, which is not linked to your name or Google account. We do not store IP addresses in crash reports. Sentry stores this data in the United States. Reports are kept for up to 30 days. Sentry processes the data as a service provider on our behalf.
3. App update check (Firebase Remote Config)
So that the app can tell you when an update is required — for example, to fix a serious bug or a security problem — it checks the minimum app version we still support. It does this with Firebase Remote Config, a Google service. The check runs when you open or return to the app, contacts Google at most about once an hour, and runs whether or not crash reporting is on. If your version is older than the minimum, the app shows an “Update required” screen that takes you to Google Play. When you update from that screen, the update itself is handled by Google Play under Google’s privacy policy.
For the check, your device sends Google:
- a random Firebase installation identifier, created for this installation of the app;
- the app’s package name and Firebase app ID;
- the app and Firebase software versions and your Android version;
- your device’s language, country code and time zone.
As with any internet connection, Google can see your IP address when your device connects. The check does not send your documents, file names, passwords, crash reports, your name or your Google account. The installation identifier is not linked to you. We use it only to deliver this setting, never for analytics, advertising or tracking, and the app does not include Google Analytics.
Google processes this data as a service provider on our behalf under the Firebase Data Processing and Security Terms, and may process it in the United States and other countries where it operates. Firebase keeps the installation identifier until it is deleted. If you uninstall the app or clear its data, the app creates a new identifier the next time it runs.
4. Legal basis (EEA, UK and Switzerland)
We process crash and error reports only with your consent (Article 6(1)(a) of the GDPR and the UK GDPR). Crash reporting stays off until you agree in the prompt shown when you first open the app; that consent also covers storing the random installation identifier on your device. Reports never include your documents, file names or passwords. You can withdraw your consent at any time by turning off Send crash reports in the app’s Settings. Withdrawing consent stops further reports but does not affect reports sent before you withdrew it.
Update check. We run the update check described in section 3 on the basis of our legitimate interest in keeping the app working, secure and up to date for everyone, and in being able to stop versions with serious defects from being used (Article 6(1)(f) GDPR). Storing the installation identifier on your device is strictly necessary for that check. The data involved is minimal, is not linked to your identity and is not used for any other purpose. You can object by emailing us, and uninstalling the app stops the check entirely.
If you contact us. If you email us, we use your email address and message only to reply and to handle privacy requests. Handling privacy requests is a legal obligation (Article 6(1)(c) GDPR); answering other questions is our legitimate interest in supporting users (Article 6(1)(f) GDPR).
5. Who we share data with
We share crash reports only with Sentry, and only if you turn crash reporting on. The update-check data described in section 3 goes only to Google (Firebase). Both act as service providers on our behalf. Emails you send us are stored with our email provider (Google). We do not sell personal information, and we do not use it for any purpose not described here.
6. How long we keep data
- Crash reports in Sentry: up to 30 days.
- Firebase installation identifier (update check): kept by Firebase until it is deleted. Because it is not linked to you, we cannot look it up from your email alone. Uninstalling the app or clearing its data stops it from being used, and identifiers that are deleted are removed from Google’s systems within 180 days.
- Emails: only as long as needed to resolve your request; records of privacy requests for up to 2 years to show they were handled.
- Data stored on your device: remains until you remove the app or clear its data.
7. Your rights and choices
- Turn crash reporting on or off at any time in Settings → Send crash reports. Turning it off stops reports immediately and deletes any reports still waiting on your device to be sent.
- The update check has no switch in the app, because it is what lets us warn you about versions that are no longer safe to use. You can object to it by emailing us, or uninstall the app to stop it.
- Uninstall the app to stop all data collection by the app.
- Request access to, correction of, or deletion of personal data we hold, by emailing germelcar@gmail.com — see Delete your data for the steps and what is removed. Depending on where you live, you may also have the right to object to processing, to data portability, and to lodge a complaint with your local data protection authority.
8. Children and students
The app is intended for students and professionals aged 13 and over. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us and we will delete it.
9. Security
Crash reports and the update check are sent over encrypted connections. Scrubbing rules remove sensitive fields before data leaves your device. No method of transmission or storage is completely secure, but we limit what is collected to reduce risk.
10. Advertising (future version)
The current version of the app does not show ads. We may add ads, and an option to remove them, in a later version. Before any ads are shown, this policy will be updated to describe the advertising provider, the data it collects, and the consent choices available to you.
11. Changes to this policy
We may update this policy, for example when we add or change a service. The date at the top shows when it was last updated. Earlier versions are kept in this repository’s history. This policy is also available in Spanish; both versions have the same content and are updated together.
12. Contact
Germán Meléndrez Carballo
Email: germelcar@gmail.com