Privacy, in plain language.

Your documents in the app

PDFs, annotations, form values, bookmarks, reading progress and recovery copies are stored on your device. KayaPDF has no account or document-upload/sync service. Local document processing is separate from the advertising data described below. Photos you select and documents you scan are processed on your device to create PDFs. On iOS, scanning uses the camera with your permission; Android uses Google ML Kit through Google Play services. The first Android scan may require an internet connection to download the scanner. Photo and document content is not uploaded by these tools; ML Kit technical metrics are described below.

Help improve KayaPDF

The usage analytics preference is enabled by default, subject to applicable consent choices. When collection is permitted, it shares app and tool usage, device information, approximate location and an installation identifier with Google Firebase Analytics to help improve KayaPDF. PDF content and filenames are never included. Participation is optional; you can turn it off anytime in Settings. Earlier versions may require you to enable this setting first. Where consent is required, collection waits for permission through Google’s existing consent flow. A previous choice to turn Analytics off is preserved. We use it to understand app engagement, not for personalized advertising. Event and user data retention is set to 2 months without renewal on new activity; aggregated reports may remain longer. Turning it off stops Analytics collection and resets its local data and identifier; it does not erase reports already received by Google. Google may process data internationally under its linked privacy policies. This setting controls Firebase Analytics, not the separate Android OCR diagnostics described below.

Ads and privacy

In ad-supported versions, Google AdMob banners appear only in the library. We request non-personalized ads. Google and partners listed in the consent information may collect and share IP address and approximate location, device/app identifiers, ad impressions and interactions, usage and diagnostics for advertising, measurement and fraud prevention. KayaPDF will not send PDF contents, filenames, notes, signatures or OCR text to advertising services. Advertising data may be processed outside your country and retained for these purposes under the providers' policies. Google's linked policies explain its processing, safeguards and retention.

• Google Privacy Policy
• How Google uses data from partner apps and sites

Advertising and your choices

We ask for required advertising consent through Google’s consent form. Where applicable, Settings offers advertising privacy options to review or withdraw consent and exercise sale/sharing or targeted-advertising opt-outs. Non-personalized ads can still use device storage and technical data. Ads may be requested after Google’s consent checks without selecting an age group. You can optionally select a range in Settings: 13–15 receives under-age protections and 16–17 teen protections. With no selection, your age remains unspecified. Only the range is stored on your device; we do not ask for a birth date. PDF tools remain available if you refuse consent or ads fail. Optional Firebase Analytics has a separate choice. On iOS/iPadOS versions that request App Tracking Transparency permission, the advertising identifier may be used for ad measurement across other companies’ apps and websites only after you allow tracking and applicable advertising consent permits it. If you decline or iOS restricts tracking, ads may still appear without that identifier. You can change tracking permission in your device Settings. This permission does not enable Firebase advertising purposes or replace the separate usage-analytics preference.

Text recognition

OCR uses Apple Vision on iOS and bundled Google ML Kit on Android. Pages and recognized text are processed on your device. Android versions with Firebase Analytics have internet access, which also lets ML Kit send device and app information, installation identifiers, usage and diagnostic data to Google to maintain and improve its APIs and prevent abuse. The optional Analytics setting does not turn off ML Kit diagnostics. Copying or exporting text uses the destination you choose.

• Google ML Kit

Sharing and backups

Other apps and file providers you choose for importing or sharing follow their own privacy practices. Android cloud backup and device-transfer backup are disabled. iOS application data may be included in system backups according to your device settings. KayaPDF does not provide its own cloud backup. Manual .kayapdf backups contain active PDFs and library metadata. The backup container is not encrypted; existing PDF passwords stay in effect. You choose where to save it. Recently deleted documents and saved signatures are excluded. External PDF links open another app only after confirmation.

Keeping and deleting data

Removing a library document moves its app copy, recovery edits and bookmarks to Recently deleted. They remain until you restore or permanently delete them. Permanent deletion removes this app data; original and previously shared copies remain. Preferences stay until cleared or the app data is removed. Recovery checks use document size and small file samples locally; they are not used to identify you. Backups and copies in other services must be managed there.

Saved signatures

If you choose to remember a handwritten signature, its template is saved in private device storage and excluded from system backups. Forget saved signature removes the template. Signatures already placed in PDFs remain in those files until erased or the copies are deleted.

This website

The website is served through Cloudflare. Connection information such as IP address, requested URL and browser information may be processed to deliver and protect the site. kayapdf.com does not use advertising or analytics cookies and does not track you across other companies’ apps or websites, including when opened from KayaPDF on iPhone or iPad. This site has no PDF-upload form and does not access documents on your device.

When you contact us

We receive the email address, message and any attachments you send. We use this information to respond and resolve your request. Correspondence may be kept while needed for support or applicable record-keeping obligations. Contact us to ask about access, correction or deletion; available rights depend on your location. Please avoid sending sensitive documents.

Why we process information

Where a law requires a legal basis, we process support information to respond to your requested service or on our legitimate interest in resolving questions. Delivery and security information supports our legitimate interest in operating and protecting the website. We may keep information to meet legal obligations. Where we ask for consent, you may withdraw it without affecting earlier lawful processing. Where Analytics requires consent, we rely on that consent obtained through Google’s consent flow. The default setting does not replace legally required consent.

Service providers and disclosures

Cloudflare handles website connection data, and email providers handle support messages. In versions with advertising, Google and partners identified in the consent information may receive the advertising data described above. We may disclose information where required by law or necessary for a legal claim. These activities do not give providers access to your local PDFs through KayaPDF.

International processing

Cryptosam LLC is based in the United States. Website and email information may be processed by providers in other countries. Where applicable law requires safeguards for an international transfer, those requirements must be met for that processing. Contact us for information about the providers and transfer safeguards relevant to your request. Reading a local PDF does not itself send that file abroad.

How long website and support data is kept

Retention depends on the purpose: resolving a support issue and follow-up, investigating a security incident or meeting an applicable record-keeping obligation. We consider whether the issue is closed and whether a legal requirement or claim still needs the information. Provider logs follow the relevant service and configuration. Contact us for more information or to request deletion.

Privacy requests and complaints

Depending on the law that applies to you, you may request access, correction, deletion, restriction or portability of personal information we hold, object to certain processing, or withdraw consent. Contact support with your request; we may need proportionate information to verify your identity. You may also complain to your local data-protection authority. We do not make decisions with legal or similarly significant effects about you solely through automated processing.

Children and guardians

We do not ask children to submit personal information through this website. A parent or guardian who believes a child has sent us personal information can contact support to request review and deletion, subject to applicable legal obligations. Permission and privacy rights for younger users depend on the law in their location. Please avoid including children's information in support attachments.

Questions and changes

Cryptosam LLC is responsible for KayaPDF. Contact us using the details below for privacy questions or requests. We will update this policy when our practices change and show the updated date on this page.