Your documents never leave your device

Your files are not uploaded to our servers

Merging, splitting, compressing, converting, signing, or running OCR happens on your device. On the web, your own browser does the work; in the apps, your phone or computer does. We don't receive or store your PDFs, your images, or the result.

This lowers the risk of leaks by design: a file that never reaches a server can't be lost from one.

What data we store

We don't store the contents of your documents. You can ask us to delete your account and data at any time from the account deletion page or by writing to us.

• Your email and name when you create an account (the web app asks for a free account to use the tools).
• Your subscription status, so we know whether you have Premium.
• Minimal technical data so the site works and to measure visits with analytics that don't use cookies.

Sign-in and payments

• Sign-in

  We use Firebase Authentication (Google) with email and password, a sign-in link, or Google. We never see your password in plain text.

• Web payments

  Paddle processes them as the registered merchant. We don't see or store your card number.

• In-app payments

  Apple and Google handle them; RevenueCat only tells us whether your subscription is active.

How we protect everything else

• The site and the web app are always served over HTTPS.
• The Protect PDF tool encrypts the files you choose with a password (AES), on your device.
• Redacting content truly removes what is covered, not just hides it.
• OCR runs on your device on macOS, iOS, and Android.

Report a security issue

If you think you've found a vulnerability, write to us at apps@superbitesstudios.com with the subject "Security" and the steps to reproduce it. We review every report and reply to you. We ask that you not publish the details until we've fixed it.

Frequently asked questions