Effective date: 22 August 2026
Last updated: 1 October 2026 (Firebase Analytics, on-device notifications, update check)
Your Documents. Your Device. Your Privacy. DocSetu is a fully functional, privacy-first PDF toolkit for iPhone, iPad, and Android. Create, convert, scan, secure, and organize documents on your device. Scans, merges, splits, password protection, Office conversions, and related tools run locally—we do not upload your documents to DocSetu servers for processing.
We wish to be clear upfront: DocSetu does not require login or sign-up. We do not operate cloud document storage for your PDFs. The App is free and supported by advertisements (Google Mobile Ads — including banner, native, interstitial, rewarded, and app-open formats). We use Google Analytics for Firebase to understand app usage (such as app opens and installs) through anonymous, non-content events—never your documents, file contents, or passwords. Optional permissions—camera, photos, and file access—are requested only when you start a tool that needs them, not for background collection.
This Privacy Policy describes, in plain language, how we handle information when you use our mobile application (the “App”) on Android and iOS (including iPad). It supports transparency for users and is written to meet common expectations for Google Play and the Apple App Store. By using the App, you agree to this policy.
App identifiers: Android package com.docsetu.docsetu · iOS bundle ID com.docsetu.docsetu
1. What DocSetu does (on your device)
All of the following features process files locally unless you explicitly share or export them:
- Create: Image to PDF, Notes to PDF, Multiple Files
- Convert: PDF to Image, Text to PDF, Word (DOCX) to PDF, Excel (XLSX) to PDF
- Secure: Add password, Remove password, Watermark
- Scan: Government ID, A4 Document, Receipt / Bill, Book & Notes (camera-based, on-device)
- Organize: Merge, Split, Rotate, Compress
- Files hub: Browse recent generated documents, open/share them, Export all as ZIP, or Clear all storage (optionally export first)
Generated PDFs may include a small local “Created by DocSetu” mark and app logo stamped on pages. That branding is applied on your device only and is not a network upload.
2. Data controller
The organisation responsible for the App and this policy is:
App / brand: DocSetu
Package / Bundle ID: com.docsetu.docsetu
Privacy & support: Use the developer contact on the DocSetu Google Play or App Store listing.
3. Information we collect
DocSetu is built for on-device document work—not for collecting personal profiles. We collect only what is needed to run the App, show ads, and respond if you contact us.
3.1 You provide directly
- No account required: You are not required to sign in, register, or create an account. We do not ask for your name, email, or an app password to use PDF tools.
- Documents and passwords you enter: When you pick a file, scan a page, type notes, or enter a PDF password, that content is used only on your device to complete the action you started. PDF lock/unlock passwords are never stored, logged, synced, or uploaded by DocSetu.
- Communications: If you write to us by email or via the developer contact on Google Play or the App Store, we use your message and contact information only to reply and provide support.
3.2 Automatically collected
- Device and app data (ads): When ads are enabled, Google Mobile Ads (AdMob) and related Google services may process limited technical information such as device model, OS version, language, app version, advertising ID / IDFA (subject to your device settings), IP address, and ad interaction signals to deliver and measure advertisements (banner, native/image/video, interstitial, rewarded, rewarded interstitial, and app-open). See Section 5.
- App usage analytics (Firebase): Google Analytics for Firebase automatically collects limited usage events such as first open (install), session start, screens viewed, and engagement time, together with technical data such as device model, OS version, app version, language, approximate region (derived from IP address), and an app instance ID. We use this to measure installs (including installs from our own Google Ads campaigns) and to improve the App. DocSetu does not send document contents, file names, scanned images, notes, or passwords to analytics, and does not request the advertising identifier (IDFA) on iOS for analytics.
- Update check: The App downloads a small version file from our AWS S3 web space to tell you when a newer version is available. This request does not include your documents or any account information.
- Network connectivity: The App uses the network for ads, analytics, and the update check. Core PDF tools work offline; we do not upload your documents over the network for processing.
- Operational logs: Like most apps, errors may appear in device logs. We do not operate a backend that receives your document contents.
3.3 Stored on your device
- Generated documents cache: PDFs and related outputs you create are kept in the App’s local storage for 7 days so recent work is easy to reopen. You can delete individual files, Export all as ZIP, or Clear all storage from the Files tab.
- ZIP export: When you choose Export all, DocSetu packages cached documents into a ZIP on your device and opens the system share/save sheet. The ZIP is created locally; DocSetu does not upload it to our servers.
- App preferences: Settings such as theme (light/dark), cache duration, and notification on/off are stored locally on your device.
- Notifications: Progress, “file ready”, and file-expiry reminder notifications are created and scheduled on your device. DocSetu does not send marketing push messages.
- Saved and shared files: If you save a scan to Photos, export to Files, share a PDF, or save a ZIP, those copies are stored or transmitted under your control via the operating system share sheet or file providers you choose.
3.4 What we do not collect
For clarity, DocSetu does not:
- Upload your PDFs, scans, Word/Excel files, images, notes, or ZIP exports to DocSetu servers for conversion or storage;
- Require login, social sign-in, or a user profile for normal use;
- Collect precise GPS location, contacts, or SMS as part of the App;
- Store PDF passwords after a lock/unlock action finishes;
- Send document contents, file names, scans, notes, or passwords to analytics or advertising services;
- Sell your documents or personal files.
Optional permissions (Sections 7 and 7.2) appear only when a feature you choose needs them—for example, opening the camera for a scan or picking photos for Image to PDF.
4. How we use information
We use information only to operate DocSetu responsibly:
- Run local PDF tools—create, convert, scan, secure, organize, export ZIP, and related features—entirely on your device;
- Keep a 7-day local cache of generated files for convenience;
- Display advertisements through Google Mobile Ads so the App can remain free;
- Measure installs and understand aggregate app usage with Google Analytics for Firebase, including measuring the results of our own app-install ad campaigns;
- Show on-device notifications for document progress, completed files, and upcoming cache expiry (you can turn these off in Settings);
- Let you know when an app update is available;
- Improve stability and respond to support requests when you contact us;
- Meet legal obligations where applicable.
5. Third-party services & processors
DocSetu uses a small number of third-party services. They may process limited data under their own policies. Your document contents are not sent to these services for PDF processing.
| Service | Purpose |
|---|---|
| Google Mobile Ads (AdMob) | Display banner, native (including image/video creatives), interstitial, rewarded, rewarded interstitial, and app-open ads; ad delivery, measurement, and fraud prevention. May use advertising ID and device signals. See Google Privacy Policy and AdMob & user data. |
| Google Analytics for Firebase | App usage analytics and install measurement (e.g. first open, sessions, screen views, engagement), including measuring installs from our Google Ads campaigns. Receives technical and usage data only—no document contents. See Firebase privacy and Google Privacy Policy. |
| Google Play services / Apple system services | Platform infrastructure, ad identifiers (subject to your settings), and OS-level file/camera/photo pickers as required by your device. |
| Amazon Web Services (AWS) / S3 | Hosting and delivery of this privacy policy page, related static web content, and the small version file used for the in-app update check. Not used to store your PDFs or scans. |
| Google Fonts (this web page) | Typography loaded when viewing this policy in a browser; see Google’s privacy documentation. |
6. Legal bases (EEA, UK, and similar regions)
Where applicable, we rely on:
- Consent — when you allow camera, photo library, or other optional permissions, or where consent is required for certain ad processing.
- Legitimate interests — providing a local document toolkit, showing ads to support a free app, measuring installs and aggregate usage with analytics, and maintaining security and stability.
- Contract / steps prior to contract — where needed for features you explicitly choose to use.
- Legal obligation — when the law requires us to respond.
7. App permissions (Android)
The App may declare or request permissions depending on your Android version and the tool you use. DocSetu requests sensitive access only for user-initiated actions.
| Permission | Why DocSetu uses it | When you see it |
|---|---|---|
| CAMERA | Capture pages for Government ID, A4, Receipt, Book & Notes, and other camera scan flows. | When you open a scan or camera tool. |
| No photo / media permission | Images are chosen with the Android photo picker and files with the system document picker. DocSetu only receives the items you select and does not request READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO, or READ_EXTERNAL_STORAGE. | The system picker opens when you choose images or files. |
| WRITE_EXTERNAL_STORAGE | Save a scanned page when you choose Save image on Android 10 and below (API 29 and lower). | Only on older Android when saving to gallery. |
| INTERNET | Load and display advertisements, send anonymous analytics events, and check for app updates. PDF tools do not require upload of your documents. | Normal app permission; not a runtime dialog. |
| ACCESS_NETWORK_STATE | Check connectivity so ads can load reliably. | No user prompt. |
| AD_ID / ACCESS_ADSERVICES_* | Google Mobile Ads — ad delivery, measurement, and fraud prevention. | Managed by Google Play services / device ad settings. |
| RECORD_AUDIO | Declared by the camera library. DocSetu disables audio and does not record video with sound. | Should not appear for DocSetu scan flows. |
| POST_NOTIFICATIONS | Show document progress, “file ready”, and file-expiry reminder notifications (Android 13+). Can be turned off in DocSetu Settings or Android Settings. | Runtime prompt on Android 13+. |
| FOREGROUND_SERVICE / FOREGROUND_SERVICE_DATA_SYNC / WAKE_LOCK | Keep a PDF creation or conversion you started running, with a visible progress notification, if you leave the App. Processing stays on your device. | No user prompt; a progress notification is shown while it runs. |
| RECEIVE_BOOT_COMPLETED / SCHEDULE_EXACT_ALARM | Keep file-expiry reminders scheduled after the device restarts. | No user prompt. |
7.1 Which Android tools request access
- Scan tools (Government ID, A4, Receipt, Book & Notes): Camera
- Image to PDF / Multiple Files (images): Android photo picker or system file picker (no media permission)
- Save scan image: Legacy storage write on Android 10 and below
- Merge, Split, Rotate, Compress, Password, Watermark, Word/Excel to PDF, PDF to Image: System file picker for the file you select—no cloud upload
- Share / Open PDF / Export ZIP: OS share or save sheet; only the file(s) you choose leave the App under your control
- Ads: Internet and advertising identifiers via Google Mobile Ads
- Analytics: Internet access for Google Analytics for Firebase usage events
- Notifications: Notification permission for progress, file-ready, and expiry reminders
Permissions DocSetu does not use as features: Location, Contacts, SMS/Phone, Microphone (recording), Bluetooth, Calendar, Background location. DocSetu does not send marketing push messages.
7.2 App permissions (iOS)
On iPhone and iPad, the App requests permissions only when you choose a feature that needs them:
| Usage description (Info.plist) | Why DocSetu uses it | When you see it |
|---|---|---|
| NSCameraUsageDescription (Camera) | Scan pages and create PDFs locally with Government ID, A4, Receipt, Book & Notes, and related camera tools. | First time you open a camera scan tool. |
| NSPhotoLibraryUsageDescription (Photo Library — read) | Choose images from your library for Image to PDF and related flows. | When you pick photos from the library. |
| NSPhotoLibraryAddUsageDescription (Photo Library — add) | Save a scanned page to Photos when you choose Save image. | When saving a scan export to Photos. |
| Notifications (system permission) | Show document progress, “file ready”, and file-expiry reminders, plus Live Activities / Dynamic Island progress while a document is being created. | When you first launch the App or turn on Notifications in Settings. |
DocSetu does not declare Location, Contacts, Microphone, Calendar, or Bluetooth usage on iOS, and does not send marketing push messages. Internet access is used for ads, anonymous analytics (Google Analytics for Firebase), and the update check; document tools run on-device. The App includes an Apple Privacy Manifest (PrivacyInfo.xcprivacy) describing required reason API use (e.g. UserDefaults / file timestamps / disk space as needed by the framework)—not for tracking your documents.
8. Retention
- On-device generated files: Kept in the App cache for 7 days, then eligible for automatic cleanup. Use Export all as ZIP, save to Files, or share if you want to keep copies longer.
- Clear all storage: Removes cached DocSetu documents from the App. You may optionally export a ZIP first; if export is cancelled or fails, the App does not clear the cache.
- PDF passwords: Discarded from memory when the tool session ends; not retained by DocSetu.
- Ad-related data: Retained according to Google’s policies and your device ad settings.
- Analytics data: Retained in Google Analytics for Firebase according to our data-retention setting (up to 14 months), then deleted automatically. Reports are viewed in aggregate.
- Support emails: Retained as long as needed to respond and maintain a support record.
- Uninstall: Removing the App clears local DocSetu data from your device.
9. Security
We use reasonable measures appropriate to a local-first app. Because processing happens on your device, your documents are not transmitted to DocSetu servers for PDF operations. However, no method of storage is 100% secure; protect your device with a screen lock and keep backups of important files outside the App.
Important: When you share a PDF, save a scan, or export a ZIP outside the App, that copy is governed by the app or location you choose (e.g. email, cloud drive, Photos, Files). DocSetu does not control third-party destinations you select.
10. Children and families
DocSetu is a general productivity app, not directed at children under 13 (or the age required where you live). We do not knowingly collect personal information from children for profiling. If you believe a child has provided personal data to us through support email, contact us and we will address it promptly.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, or to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority. To exercise rights related to data we hold (e.g. support correspondence), contact us at the email below.
11.1 User Privacy Choices
You can control privacy-related settings at any time:
- Camera / Photos: grant or revoke in Android Settings or iOS Settings → DocSetu.
- Advertising: reset or limit ad personalisation in your device settings (e.g. “Opt out of Ads Personalisation” on Android; App Tracking / personalized ads controls on iOS).
- Local documents: delete files, Export all as ZIP, or Clear all storage from the App’s Files tab.
- Notifications: turn progress and reminder notifications on or off in DocSetu Settings, or in your device settings.
- Analytics: analytics uses a random app instance ID rather than your name or email. Uninstalling the App resets this ID; you can also limit ad tracking or reset your advertising ID in device settings.
- Theme: change light/dark mode inside the App.
- Uninstall: removes local App data from your device.
- Data requests: email us to request access, correction, or deletion of information we may hold (see Contact).
We do not sell your documents or personal files. Ad and analytics partners may process advertising and usage signals as described in Section 5. Core PDF processing stays on your device.
12. International transfers
Our service providers (e.g. Google, AWS) may process data in countries other than India. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms provided by those vendors.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date. For material changes, we may provide additional notice (e.g. in-app or via store listing). Continued use of the App after changes means you accept the updated policy.
14. App Store & Play Store data disclosures
DocSetu does not upload your PDFs, scans, photos, notes, or passwords to DocSetu servers. The data types below are declared because the App includes Google Mobile Ads (AdMob), which may process limited advertising-related signals, and Google Analytics for Firebase, which collects anonymous usage events, on iOS and Android. Camera and photo access stay on-device for tools you start; they are not listed as “collected” document content for store nutrition labels.
14.1 iOS — Apple App Store Privacy
Bundle ID: com.docsetu.docsetu · Supports iPhone and iPad.
This page is our Privacy Policy and User Privacy Choices URL for App Store Connect. Optional Camera and Photo Library access is requested only when needed (Section 7.2).
Tracking
- Do we use data for tracking? No (DocSetu does not request App Tracking Transparency / cross-app tracking for personalized ads, and Firebase Analytics does not receive the advertising identifier).
Data types we declare as collected
We declare that we or our third-party partners (Google Mobile Ads and Google Analytics for Firebase) collect the following data types from the iOS app. These match the selections in App Store Connect → App Privacy:
| Category | Data type (selected) | Linked to user? | Used for tracking? | Purpose |
|---|---|---|---|---|
| Identifiers | Device ID (e.g. advertising identifier, app instance ID, or other device-level ID) | Yes | No | Third-Party Advertising, Analytics |
| Usage Data | Product Interaction (e.g. app opens, sessions, screens viewed, ad interaction signals) | No | No | Third-Party Advertising, Analytics |
| Usage Data | Advertising Data (e.g. information about ads shown) | No | No | Third-Party Advertising |
Data types we do not select on iOS
We do not declare collection of: Contact Info; Health & Fitness; Financial Info; Location; Sensitive Info; Contacts; User Content (including Photos or Videos processed only on-device); Browsing History; Search History; User ID; Purchases; Diagnostics; Surroundings; Body; or Other Data—for DocSetu’s own servers. Document tools run locally; files leave the device only if you share, save, or export them.
14.2 Android — Google Play Data safety
Package name: com.docsetu.docsetu.
In Google Play Console → Data safety, DocSetu is declared as a free app with no account / no login, on-device document processing, optional camera/photos/storage for tools you start, advertising via Google Mobile Ads, and analytics via Google Analytics for Firebase.
Data collected and shared (ads)
Aligned with the same ad SDK as iOS, we disclose that the following may be collected and shared with Google for advertising:
| Data type | Collected? | Shared? | Purpose | Optional for user? |
|---|---|---|---|---|
| Device or other IDs (Advertising ID) | Yes | Yes (Google / AdMob) | Advertising or marketing | Users can reset / limit ad personalisation in Android settings |
| App interactions / ad interaction signals | Yes | Yes (Google / AdMob) | Advertising or marketing | Required for free ad-supported use; core PDF tools work offline |
| Advertising or marketing data (ads shown / measured) | Yes | Yes (Google / AdMob) | Advertising or marketing | Same as above |
Data collected for analytics (Firebase)
Google Analytics for Firebase processes the following on our behalf as a service provider:
| Data type | Collected? | Shared? | Purpose | Optional for user? |
|---|---|---|---|---|
| App interactions (app opens, sessions, screens viewed, engagement) | Yes | No (processed by Google as our service provider) | Analytics | Collected automatically; no document contents |
| Device or other IDs (Firebase app instance ID) | Yes | No (processed by Google as our service provider) | Analytics | Reset by uninstalling the App |
Data we do not collect for DocSetu servers (Android)
- Name, email, phone, or account credentials (no login)
- PDF / scan / photo / Word / Excel contents uploaded to DocSetu
- PDF passwords
- Precise location, contacts, SMS, microphone recordings as app features
Users can delete cached files, Export all as ZIP, or Clear all storage from the Files tab, or uninstall the App to remove local DocSetu data.
15. Contact
For privacy questions, corrections, or requests:
Use the developer contact on the DocSetu listing on Google Play or the Apple App Store.
This policy URL:
https://sanand-maa-vihat-s3.s3.ap-south-1.amazonaws.com/docsetu/privacy-policy.html