Grifel — Privacy Policy
Effective 27 September 2026. Developer: Alexander Medchenko. Contact: support@grifel.app.
Grifel is a PDF app for Android. It opens, annotates, fills, signs, organizes, compresses and protects documents on your device. This policy explains what leaves your device, why, and how to turn it off.
Your documents stay on your device
- Files you open, their text, your comments, form data, signatures and document passwords are processed only on your device. We do not upload them and we cannot see them.
- A document leaves your device only when you share it yourself, for example with “Send a copy” or “Print”.
- Saved signatures are stored encrypted on the device. A password is kept only if you choose “Remember on this device”, protected by the Android Keystore.
- Document names and content are never part of analytics or crash reports.
What is sent, and to whom
| Data | When | Why | Processed by |
|---|---|---|---|
| Anonymous usage events: which screens and tools are used, sizes and counts in ranges (for example “10–50 pages”), app version, language, whether Premium is active. | Only if analytics is on. In the EEA, the UK and Switzerland it is off until you allow it; elsewhere it is on and you can turn it off. | Understand which features help and fix confusing parts. | Google Firebase Analytics |
| Crash reports: stack trace, device model, Android version, app version, an installation identifier. | Only if crash reports are on. Same rules as analytics. | Find and fix crashes. | Google Firebase Crashlytics |
| Diagnostic data of on-device machine learning: device and app information, performance metrics, detected document language. | When you scan a document or read aloud (language detection). | Lets Google keep these on-device features working. | Google ML Kit (terms) |
| Purchase and subscription status. | When you buy, restore or manage Premium. | Unlock Premium and show your plan. | Google Play (payment details are handled by Google and never reach us) |
| Text being read aloud. | Only if you pick a voice marked “needs internet”. Voices on the device work offline. | Speech synthesis. | The text-to-speech service of your device (for example Google) |
We do not sell your data, we do not show ads and we do not use advertising identifiers. Your documents are never used to train models.
Your choices
- Turn analytics and crash reports on or off in Settings → Privacy. The change applies at once.
- Deleting the app deletes everything it stored on the device, including signatures and document versions.
- No account is needed, so there is no profile with us to delete. To ask about data sent by analytics or crash reports, or to have it deleted, write to support@grifel.app. Analytics data is kept for up to 14 months and crash reports for up to 90 days.
Permissions
- Files: through the Android file picker and the photo picker, only the files you choose. The app does not ask for access to all files.
- Notifications: to show progress of long operations, reading-aloud controls and the reminder before a free trial ends.
- Biometrics: only if you turn on app lock.
- Internet: used by the Google services listed above; the app's own features work offline.
Children
The app is not directed to children under 13 and does not knowingly collect their data.
Your rights
Depending on where you live (for example under the GDPR or the CCPA/CPRA) you can ask for access to, correction or deletion of personal data, and object to processing. Write to support@grifel.app; we answer within 30 days. You can also complain to your data protection authority.
Changes
If this policy changes, the new version is published here with a new effective date, and important changes are shown in the app.