Privacy Policy

Last update: 30 October 2026

pdf2kit is provided by Kraus und Karnath GbR 2kit consulting ("we", "us"). This policy explains what data we handle when you use our Android app or this website, and - just as importantly - what we deliberately do not touch.

The short version: the PDFs, images, scans and signatures you work with in pdf2kit stay on your device. We never upload them, we have no account system, and we do not sell data. The only information that reaches anyone is anonymous diagnostic data from the app (crash reports and usage statistics) and anonymous usage data from the website, which help us keep pdf2kit stable and improve it.

1. Who to contact

Questions about this policy or your data? Email info@pdf2kit.com.

Postal address and data controller:
Kraus und Karnath GbR 2kit consulting
Graf-Adolf-Straße 41
40210 Düsseldorf, Germany
VAT ID: DE269959684

2. What we do not collect

Because this is the most common question, we lead with it:

Your files. The PDFs, images and documents you open are read and processed on your own device: in your browser on the website, and in the app on Android. We have no server that receives them, reads them, stores them, or transmits them.
Your scans and the text in them. Scanning and text recognition (OCR) run on your device. The camera images, the scanned pages and the recognized text are never sent to us or to Google.
Your signatures and saved images. They are stored only on your device.
Photos, contacts, location, or microphone. The app asks for no access to any of these and uses the camera only while you scan. You choose each file yourself, and the app only sees the files you choose.
Account information or passwords. pdf2kit has no account system, so there is nothing to sign up for and no password for us to store. A password you use to protect or unlock a PDF is used only on your device.
Ads and ad targeting. pdf2kit shows no ads and does not use an advertising ID. We do not build advertising or marketing profiles about you.

3. What we do collect

The Android app uses analytics and crash-reporting services from Google (Firebase). They send the following to Google on our behalf:

Usage statistics - for example, which screens you open and which tools you use. They never include your files, file names, or the text of your documents.
Device and app information - app version, Android version, device model, and approximate country (derived from IP, not stored).
Crash reports - technical details recorded automatically when the app crashes, so we can fix the bug.
A random identifier that lets us count devices without knowing who you are.

You can switch this off at any time: open About in the app and turn off Enable Diagnostics.

We do not link this data to your name, email, phone number, or any other identity.

3.1 Scanning and text recognition

Scanning and text recognition are provided by Google through Google Play services and run on your device. While you use them, Google receives anonymous technical data to keep these features working well, such as the device model, the app version, a random identifier and error codes. It never receives your images, scans or text. Google describes this here: developers.google.com/ml-kit/android-data-disclosure.

3.2 Support emails

If you contact support from the app, your email app opens a message that already contains technical details about your device and the app version. You can read and change them before you send it. We use your email only to answer you.

3.3 Website analytics

This website (pdf2kit.com) uses Google Analytics to measure anonymous, aggregate usage. It sends the following to Google on our behalf:

Page views and navigation - which pages you visit and how you move between them.
Technical data - browser type, operating-system version, device type, approximate country (derived from IP, not stored), and session duration.
A random identifier that lets us count unique visitors without knowing who you are.

3.4 Text recognition and signature fonts on the website

When you first use text recognition or type a signature on the website, your browser downloads the needed component from jsDelivr (cdn.jsdelivr.net) or from Google Fonts. Like any web server, these providers see your IP address. Your files and text are never sent. The Android app has these components built in.

4. Why we collect it

To fix crashes and bugs.
To see which tools and pages are used, so we know what to improve next.
To catch problems in new app versions early.
To measure website traffic and understand where visitors come from.

We do not use this data for advertising, profiling, or resale.

5. Legal basis (GDPR)

The data described in section 3 includes a limited amount of personal data (chiefly the random identifiers and the IP-derived country). We rely on our legitimate interest (Art. 6(1)(f) GDPR) in keeping the app and the website stable and in understanding how they are used so we can improve them. We do not use this data for advertising or profiling, and you can object to this processing at any time (see section 9).

6. Data sharing

The services named in section 3 are provided by Google LLC / Google Ireland Ltd, which acts as a processor on our behalf for analytics and crash reports. Google's privacy terms apply to its handling of the transmitted data: firebase.google.com/support/privacy. The website components in section 3.4 come from jsDelivr and Google Fonts.

We do not sell data. We do not share data with advertisers, brokers, or marketing partners. We may publish aggregated, non-identifiable statistics (for example, "this many people used pdf2kit last month").

7. International data transfers

Google processes this data on its global infrastructure, including servers in the United States. Google relies on Standard Contractual Clauses and the EU-US Data Privacy Framework for these transfers. See Google's documentation linked in section 6 for details.

8. Data retention

Analytics data from the app and the website is kept for 14 months, and crash reports for 90 days. Because we hold no identifiable data, there is nothing we can tie back to an individual user.

9. Your rights

You can exercise the following at any time:

Stop data collection in the app: turn off Enable Diagnostics under About, or uninstall the app.
Browser opt-out: block google-analytics.com or install the Google Analytics Opt-out Browser Add-on to prevent website analytics.
Request information: email us and we will tell you everything we can associate with your device or browser (typically nothing, because the data is pseudonymous).
Supervisory authority: if you believe we have mishandled your data you may lodge a complaint with the Data Protection Authority of North Rhine-Westphalia, Germany (ldi.nrw.de), or the authority in your own EU member state.

10. Children

pdf2kit is intended for general audiences and is not designed for children under 13. We do not knowingly collect data from children.

11. Cookies

This website sets a minimal set of first-party cookies for Google Analytics (see section 3.3). No third-party advertising cookies are used. When you first visit the site we show a short cookie notice that links back to this policy. Your browser's "block cookies" or "do not track" setting is respected. The Android app sets no cookies.

12. Changes to this policy

We may update this policy from time to time. The Last update date at the top reflects the most recent change. Substantial changes will be announced in the app's release notes.

← Back to pdf2kit