Privacy Policy

📋 Overview

This Privacy Policy explains what information Kiwi PDF ("we", "us", "our") collects, why, and what choices you have. It applies to the Kiwi PDF apps for iPhone, iPad, Android and Mac, the web editor at kiwipdf.org/app, the account pages at kiwipdf.org/account and the website kiwipdf.org (together, the "Service").

Kiwi PDF is the controller of the personal data described here. You can reach us at contact@kiwipdf.org.

At a glance:

📄 Your Documents Stay on Your Device

Everything you do with your files — editing text and images, annotations, signatures, OCR, measurements, passwords, compression, ZIP archives — is processed locally:

• In the iPhone, iPad, Android and Mac apps, your files and annotations are stored in the app's storage on your device.
• The web editor processes files inside your browser and keeps them in your browser's private storage. They are not uploaded to our servers.
• Text recognition (OCR) and document scanning run on your device.
• Signatures you save for reuse are kept on your device only.

We never collect the content of your documents, your annotations or signatures, your photos (beyond the images you choose to insert into a document), recordings you attach to a document, your contacts, your precise location, or your browsing history.

If you open or save files in iCloud Drive, Google Drive or another cloud storage service, those files are handled by that provider under its own privacy policy.

👤 Kiwi PDF Account (Optional)

You never need an account to use Kiwi PDF or to buy Premium. If you choose to create one, it lets you use your Premium subscription on all your devices. When you have an account we process:

• Account details — your email address, your password (stored only as a salted one-way hash; we can never see it), an optional display name, your preferred language and whether your email is verified.
• Devices and sign-ins — for each signed-in device: a random installation ID created by the app (not a hardware identifier), the platform, the device name or model, the app version, and when the sign-in was created and last used. Sign-in tokens are stored on our side only as hashes.
• Verification codes — the one-time codes we email you (to verify your email, reset your password or confirm an account deletion) are stored only as hashes and expire after a short time.
• Security records — account events such as account creation, sign-in and deletion, together with a keyed hash of the IP address and the app or browser version (user agent). We use them to protect your account and prevent abuse.

Emails we send

Authorized Kiwi PDF staff can access account and subscription data only when needed to provide support (for example to check or grant Premium); such actions are logged.

We only send emails that are needed for your account: verification codes, password reset, and confirmations about deleting your account. We do not send marketing emails.

Guest records for purchases without an account

If you buy or restore Premium in the app without signing in, the app creates an anonymous guest record so your purchase can be restored and later attached to an account if you create one. A guest record contains only random identifiers, the device model, the app version and the purchase information described below — no email and no name. Guest records without a purchase are deleted automatically after 30 days of inactivity.

IP addresses

Our servers see your IP address when the app or website contacts them. We use it only to prevent abuse (for example, limiting repeated sign-in attempts) and store it only as a keyed hash, never as the raw address. We may protect the sign-up, password reset and account deletion forms on our website with Cloudflare Turnstile against automated abuse; when it is enabled, Turnstile processes your IP address and browser signals for that purpose.

Cookies

The account pages use one essential cookie to keep you signed in. Our website also remembers your theme (light or dark) in your browser. We do not use advertising or analytics cookies on our website.

💳 Purchases & Premium

Premium subscriptions are paid through the Apple App Store or Google Play. Payment is handled entirely by Apple or Google — we never receive your card number or billing address.

To unlock Premium and keep it in sync across your devices, we receive and store the transaction information the store gives us: transaction identifiers, the product and plan, purchase and expiry dates, renewal and refund status, and whether it is a test (sandbox) purchase. On iPhone and iPad, purchases carry a random account token so the store can tell us which Kiwi PDF account or guest record a purchase belongs to.

If a subscription belongs to a different Kiwi PDF account than the one you are signed in to, Premium is enabled only on that device (linked to its random installation ID).

We may also grant Premium manually — for example for a promotion, a voucher or a support case. We keep a record of the reason and of which staff member made the change.

📉 Analytics & Crash Reporting

Our iPhone, iPad and Android apps use Google Firebase:

• Crashlytics — crash reports (technical details such as the stack trace, device model and OS version) so we can fix bugs. No document content is included.
• Analytics — statistics about which features are used (for example "annotation tool opened" or "paywall shown") together with the app instance ID, device model, OS version and approximate country. No document content is included.
• Remote Config — delivers app settings without an app update.

This data is not linked to your Kiwi PDF account and is not used to track you across other companies' apps or websites. It is processed by Google under Google's Privacy Policy. On iPhone you can limit it under Settings → Privacy & Security → Analytics & Improvements.

Our Mac app, our web editor and our website do not use analytics.

🔗 Service Providers

We use the following providers to run the Service. They process data only on our behalf or as described in their own privacy policies:

• Cloudflare — hosting of our servers, database and website; Turnstile bot protection on website forms (when enabled).
• Resend — delivery of account emails (verification codes, password reset, deletion confirmations).
• Google Firebase — crash reporting, analytics and remote configuration in the mobile apps.
• Apple and Google — app distribution and payment processing for subscriptions.
• Google ML Kit — document scanning in the Android app, provided through Google Play services on your device.

We do not sell or rent your personal data, and we do not share it with advertisers or data brokers. We may disclose information if required by law or to protect the rights and safety of our users and the Service.

Our providers may process data in countries other than yours, including the United States. Where required, these transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

🎯 Why We Use Your Data

• To provide the Service you asked for (performance of a contract) — creating and running your account, verifying your email, unlocking Premium and syncing it across your devices, restoring purchases.
• To keep the Service secure and working (legitimate interests) — preventing abuse and fraud, protecting accounts, fixing crashes and understanding which features are used.
• To meet legal obligations — keeping purchase records needed for accounting, refunds and tax.

⏳ How Long We Keep Data

• Account details, devices and security records — while your account exists. They are deleted immediately when you delete your account.
• Sign-ins — a sign-in expires after 90 days without use and is removed 30 days after it expires or you sign out.
• Verification codes — expire within minutes and are removed after one day.
• Abuse-prevention counters (hashed IP or email) — removed within 7 days.
• Guest records without a purchase — removed after 30 days of inactivity.
• Notifications from Apple and Google about subscription changes — removed after 90 days.
• Purchase records — kept for as long as needed for accounting, refunds, fraud prevention and to let you restore a purchase. After you delete your account they are no longer linked to you.
• Account deletion requests made on our website — unconfirmed requests are removed after 30 days; completed requests are kept for one year as proof of deletion, containing only a hash of the email address and the request status.
• Firebase data — kept by Google according to the retention settings of Firebase.

🗑️ Deleting Your Account

You can delete your Kiwi PDF account at any time:

• In the app — Settings → your account → Delete account.
• On the web — sign in at kiwipdf.org/account and choose Delete account.
• Without signing in — use the form at kiwipdf.org/account/#/delete-request; we email you a code to confirm.
• By email — write to contact@kiwipdf.org from the address of your account.

Deletion takes effect immediately: your email, password, name, devices, sign-ins and security records are erased and every device is signed out. We keep only purchase records that are no longer linked to you (see above) and a single anonymous entry noting that an account was deleted. Your PDF files on your devices are not affected.

Deleting your account does not cancel a subscription. Subscriptions are billed by Apple or Google — cancel them in your App Store or Google Play subscription settings if you do not want to be charged again.

🔐 Security

All connections between the apps, the website and our servers are encrypted (HTTPS). Passwords, sign-in tokens and verification codes are stored only as one-way hashes, and IP addresses only as keyed hashes. On your device, your sign-in is kept in the system's secure storage where available (the Keychain on Apple devices).

Password-protected PDFs and ZIP files

When you protect a PDF or a ZIP archive with a password, encryption happens on your device. Your file passwords are never sent to us.

No method of transmission or storage is 100% secure, but we work hard to protect your information and to collect as little as possible.

👶 Children's Privacy

The Service is not directed at children under 13. You must be at least 13 years old — or the minimum age required in your country — to create a Kiwi PDF account. If you believe a child has given us personal information, contact us and we will delete it.

⚖️ Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy of it
• Correct inaccurate data
• Delete your data (see "Deleting Your Account" above)
• Object to or restrict certain processing
• Lodge a complaint with your data protection authority

To exercise these rights, email contact@kiwipdf.org. We may need to confirm that the request comes from the owner of the account. If you do not have an account, we generally hold no personal data that identifies you.

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. We will change the "Last updated" date at the top of this page and, for material changes, inform you in the app or by email if you have an account.

📬 Contact Us

If you have any questions or requests about this Privacy Policy or your data, contact us:

• Email: contact@kiwipdf.org
• Website: kiwipdf.org

We aim to respond to all privacy requests within 5 business days and no later than 30 days.