Privacy Policy

1. About this policy

This Privacy Policy covers PDF Image Converter (also called PDF 이미지 변환), the Android and iOS app provided by Bokeria ("we"), and these app information pages. For privacy questions or requests, contact appsupport@bokeriastudio.com. The app does not require an account.

This version of the policy describes the app as first released, without ads.

2. Your files stay on your device

The app converts the files you give it in two ways: it draws each page of a PDF as a JPG or PNG image, and it combines photos into a new PDF. It reads only the PDF or photos you choose with the system pickers, or that you open or share into the app from another app. File contents, file names, file paths, and converted results are not uploaded to our servers and are not intentionally included in Firebase events or diagnostics. We do not operate a file storage server.

Your originals are never overwritten. The app always creates new images or a new PDF.

3. Permissions and file access

• Choosing files: PDFs come through the system file picker, and photos through the system photo picker. The app receives only the items you pick, and does not need access to your whole photo library or storage.
• Saving images: on Android, images are saved to a "PDF Image Converter" album in your photo library without a storage permission. On iPhone and iPad, the app asks for add-only photo library access the first time you save; this lets it add images but not read your existing photos. If you decline, you can still share the images, and the app shows how to change this in Settings.
• Saving a PDF: the system save dialog lets you choose where the new PDF goes.

The app does not scan your device or request access to contacts, the camera, the microphone, or your location.

4. Information stored locally

The app keeps working copies of the files you are converting, the results until you save or discard them, temporary sharing copies, your usage-statistics and diagnostics choices, your last paper choice, and limited state used to clean up interrupted work or saves. These records stay on your device and are not sent as usage events.

On Android, the app's data is excluded from cloud backup and device-to-device transfer.

5. Usage statistics and diagnostics

Settings → Privacy Settings offers two separate choices: Usage statistics, and Error and performance diagnostics. Both are off when you install the app, and nothing is sent for these features until you turn one on. When enabled, they send information to Google Firebase to help us improve the app and fix problems. Leaving them off does not restrict converting, saving, or sharing.

• Usage statistics — Google Analytics for Firebase: which direction you use (PDF to images or images to PDF); when files are selected, a conversion starts and ends, and results are saved, shared, or opened in another app; success, cancellation, or failure with a predefined error code; and processing-duration ranges. SDK data can include app interactions, app/device information, app-instance identifiers, and approximate region derived from your IP address.
• Diagnostics — Firebase Crashlytics and Performance Monitoring: crash records, predefined error codes, conversion processing times, app/OS/device information, installation identifiers, and technical network information such as IP addresses.

The app does not attach your files, file names, paths, or raw error messages to these reports. Firebase Analytics is set not to collect the advertising ID, its advertising-related consent settings stay disabled, and these statistics and diagnostics are not used for advertising.

See Firebase privacy and security and Google’s Privacy Policy.

6. No advertising

The app does not show ads and does not include an advertising SDK. It does not use the Android advertising ID, and on iOS it does not ask for App Tracking Transparency permission or use the advertising identifier (IDFA). If a future version adds ads, we will update this policy before that version is released.

7. Changing your choices

You can turn usage statistics and diagnostics on or off at any time in Settings → Privacy Settings. Turning an option off stops new app measurements for that option, and turning usage statistics off also resets the analytics data stored on the device. Turning diagnostics off asks the SDK to delete stored crash reports. While diagnostics are on, crash reports may be uploaded on a later app launch.

Information already queued may still be sent after you turn an option off. Turning diagnostics back on may send earlier errors still on the device. These switches do not delete data already received by Google, and the app cannot verify completion of the SDK’s deletion request.

8. Saving, sharing, and support

When you save to a cloud-backed location, share images or a PDF, or open a PDF in another app, the provider you choose may receive the file under its own privacy policy. This happens only at your request. A file provider may also download a cloud file when you select it.

If you send us email, we receive your email address, message, and any attachments you choose to include. The app’s support email draft includes the app and OS versions; you can edit it before sending. It does not automatically attach files, file names, paths, logs, or user identifiers. We use correspondence to answer and resolve your request.

The app does not ask you for a store review.

9. Retention and deletion

Working files and unsaved results are temporary and are cleaned up when you cancel, start over, return home, or during app startup and recovery. Sharing copies become eligible for cleanup 24 hours after you share them (on iOS, after the sharing window closes); cleanup runs on a later app launch or sharing operation, not at an exact deadline. Files you save or send elsewhere remain there until you delete them.

Local preferences and choices remain until app data is removed. You can remove local app data by deleting the app, or by clearing its storage where your system provides that option. This does not delete saved files or data already sent to service providers.

Google documents a 90-day period for Crashlytics data before deletion begins. Performance Monitoring uses 30 days for IP-associated events and 60 days for installation-associated or de-identified data. Analytics retention depends on the property’s retention setting and data type; see Analytics data retention. These are provider retention practices, not a promise of immediate erasure.

Support correspondence is retained as needed to respond to and follow up on the issue, resolve disputes, or meet legal obligations, and is deleted when no longer needed. Contact us to request deletion. We may need enough information to locate the relevant records; without an account, we may be unable to identify a particular statistics or diagnostics record from your email address alone.

10. Recipients, international processing, and security

We do not sell or share personal information for advertising. Google processes the usage statistics and diagnostics described in section 5, when you turn them on, as our service provider. Our email provider processes support correspondence. We may disclose information if required by law or necessary to protect legal rights.

Providers may process information outside your country, including in the United States, under their applicable data-protection terms. We convert files locally and limit what is sent in app measurements. No device, transmission, or storage system can be guaranteed completely secure.

11. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal data, restrict or object to processing, withdraw consent, or complain to a data protection authority. Send requests to appsupport@bokeriastudio.com. We will review your request under applicable law and may ask for limited information to verify it. You can withdraw your choice for usage statistics and diagnostics in the app at any time without losing any conversion features.

12. Children

The app is a general-purpose file utility and is not directed to children under 13, or a higher age where applicable law requires. We do not knowingly collect children’s personal information. If you believe a child has provided information to us, contact us so we can investigate and take appropriate deletion steps.

13. This website

These pages do not include advertising scripts, analytics scripts, third-party fonts, or tracking cookies. Firebase Hosting serves the pages and processes incoming IP addresses to deliver the service and help detect abuse. Google states that Hosting retains IP data for a few months. Following an external link or sending email uses the destination provider’s services and policies.

14. Policy updates and contact

We will update this page and its effective date when our practices change. If a change requires a new choice or notice, we will provide it as required. Questions about this policy or personal data can be sent to Bokeria at appsupport@bokeriastudio.com.