Signing, merging, splitting, compressing, watermarking, password protection and the other tools, as well as the Basic mode of PDF to Word and PDF to Excel, run entirely on your device. Files are not uploaded.

The app can only access files you pick in the system file picker. To process them it keeps temporary copies in its private storage, which other apps cannot access. Temporary copies are cleared the next time the app starts, and result files are removed 24 hours after they are created. You can also clear the app data in system settings or uninstall the app to delete everything.

Passwords you enter to open or protect a PDF are used only on the device and are never saved or sent. Saved signatures stay on this device and can be deleted in Settings.

When you choose High quality (cloud) for PDF to Word or PDF to Excel, or use Word to PDF, the app uploads the one file you selected to a third-party conversion service. If you do not use these features, no file leaves your device.

How the data flows: the app first asks our relay service on Cloudflare (api.licheng.tech) to create a conversion job. The relay holds the service keys and only returns an upload address and a short-lived job token; it does not receive or store file content. The app then uploads the file directly to the service and downloads the result directly from it. Cloudflare processes network request data such as IP addresses under its own policy; we keep only the limited logs needed to prevent abuse (for example, per-IP rate limits) and troubleshoot errors, and we do not log file names or content.

Services: Adobe PDF Services (Adobe Inc.) is used first; when its free quota runs out, CloudConvert (Lunaweb GmbH, Germany) is used instead. Your file is used only to complete the conversion you requested.

Deletion: once the result is downloaded, the app immediately asks the service to delete the input and output files, and the services usually delete files automatically within about 24 hours. We cannot guarantee how third-party systems process data; see each provider's policy: Adobe Privacy Policy https://www.adobe.com/privacy/policy.html , CloudConvert Privacy Policy https://cloudconvert.com/privacy , Cloudflare Privacy Policy https://www.cloudflare.com/privacypolicy/ .

Do not use cloud conversion for highly sensitive files or files you are not allowed to share; use the on-device Basic mode instead. Cloud conversion runs on a shared free quota and may sometimes be unavailable.

The home screen shows a Google AdMob banner ad, and before a cloud conversion the app shows a Google AdMob rewarded video ad. The tool screens themselves do not show banner ads.

The AdMob SDK may collect and process device and advertising identifiers (such as the Android advertising ID and App Set ID), your IP address and the approximate location derived from it, ad interactions (impressions, clicks, views), and device and app diagnostics. Google uses this data to serve and measure ads and to prevent fraud and abuse. See the Google Privacy Policy https://policies.google.com/privacy and How Google uses information from sites or apps that use our services https://policies.google.com/technologies/partner-sites .

In the European Economic Area, the UK, Switzerland and similar regions, the app asks for your consent through Google's User Messaging Platform (UMP) before ad data is processed. You can decline or change your choice later in the app; non-personalized ads may still be shown. You can also reset or delete your advertising ID in Android settings.

The app offers an optional one-time purchase that removes all ads (the home banner and the video before cloud conversions) and adds a number of high-quality conversions. Payment is handled by Google Play under its own terms and privacy policy; neither we nor the app see your card or other payment details. The app uses the Google Play Billing library to receive a purchase token, which is used to confirm and restore the purchase.

Purchase status and remaining conversions are stored in the app's private storage on your device. Redeem codes are checked on the device only and are never uploaded.

The app requests internet access (INTERNET) only for cloud conversion, ads and Google Play Billing, and the Google Play Billing permission (BILLING) for the in-app purchase. The ad SDK adds the advertising ID permission. The app does not request storage, camera, location, contacts or other sensitive permissions.

When you pick a file or a save location, Android grants access only to what you chose. When you share or open a result, the app temporarily lets the app you chose read that file, and that app's own privacy policy applies.

There are no accounts. We do not ask for your name, phone number or email address, and we never sell your information. Apart from the cloud conversion requests described above (network request data passing through our relay), we do not collect personal information ourselves. Ad and payment data are handled by Google AdMob and Google Play under their own policies.

The app is distributed through Google Play. Depending on your device settings, Google may collect installation and crash diagnostics under the Google Privacy Policy.

Data on your device is as secure as the device itself; we recommend a screen lock and care with exported files. All cloud conversion traffic is encrypted with HTTPS.

If system backup is turned on, Android may back up part of the app's private data (excluding result files and saved signatures) to your own Google account. We cannot access these backups.

The app is not directed at children under 13 and does not knowingly collect personal information from children.

We may update this policy when features or legal requirements change. The new version will be posted on this page with a new effective date, and significant changes to data handling will be highlighted in the app.

For questions or requests about this policy or your data, email [email protected].

签名、合并、拆分、压缩、加水印、加密等工具，以及 PDF 转 Word、PDF 转 Excel 的「基础版」，均在您的设备本地完成，文件不会被上传。

您通过系统文件选择器主动选择文件后，应用仅能访问您选中的文件。为完成处理，应用会在自身私有存储中临时保存文件副本，其他应用无法访问。临时副本会在下次启动应用时自动清除；处理结果文件会在生成 24 小时后自动清理。您也可以随时在系统设置中清除应用数据，或卸载应用以删除全部相关文件。

您打开加密 PDF 或为 PDF 设置密码时，输入的密码仅在本地用于解密或加密，不会被保存或发送。保存的手写签名只存储在本机，可在「设置」中删除。

当您在 PDF 转 Word、PDF 转 Excel 中选择「高质量（云端）」，或使用 Word 转 PDF 时，应用会将您选择的这一个文件上传给第三方转换服务处理。若您不使用这些功能，不会有任何文件离开您的设备。

数据流向：应用先向我们运行在 Cloudflare 上的中转服务（api.licheng.tech）申请一次转换任务；中转服务持有服务商的密钥，只返回上传地址和一份有时效的任务凭证，不接收、不保存文件内容。随后应用把文件直接上传给服务商，转换结果也直接从服务商下载。中转服务处理请求时，Cloudflare 会按其政策处理 IP 地址等网络请求信息，我们仅保留用于防滥用（如单个 IP 的请求频率限制）和排查故障所需的有限日志，不记录文件名或文件内容。

服务商：优先使用 Adobe PDF Services（Adobe Inc.）；其免费额度用完时改用 CloudConvert（Lunaweb GmbH，德国）。文件仅用于完成您发起的这次转换。

删除：拿到结果后，应用会立即请求服务商删除输入和输出文件；服务商通常也会在约 24 小时内自动删除。我们无法保证第三方系统中的处理过程，具体以各服务商的政策为准：Adobe 隐私政策 https://www.adobe.com/privacy/policy.html ，CloudConvert 隐私政策 https://cloudconvert.com/privacy ，Cloudflare 隐私政策 https://www.cloudflare.com/privacypolicy/ 。

请不要将含有高度敏感信息、或您无权处理的文件用于云端转换；这类文件建议使用「基础版」本地转换。云端转换使用全站共享的免费额度，可能暂时不可用。

应用首页底部展示 Google AdMob 横幅广告；使用云端转换前，应用会展示一段 Google AdMob 激励视频广告。各工具的处理页面不展示横幅广告。

AdMob SDK 可能收集和处理以下数据：设备和广告标识符（如 Android 广告 ID、App Set ID）、IP 地址及由此推断的大致位置、与广告的互动（展示、点击、观看情况）、设备与应用的诊断信息。这些数据由 Google 用于投放和衡量广告、防欺诈与安全。详见 Google 隐私政策 https://policies.google.com/privacy 以及「Google 如何使用使用其服务的网站或应用中的信息」https://policies.google.com/technologies/partner-sites 。

在欧洲经济区、英国、瑞士等地区，应用会通过 Google 用户消息平台（UMP）先征求您对广告数据处理的同意，您可以拒绝或之后在应用中修改选择；拒绝个性化广告时仍可能展示非个性化广告。您也可以在 Android 系统设置中重置或删除广告 ID。

应用提供可选的一次性购买，用于去除全部广告（首页横幅与云端转换前的视频）并获得一定次数的高质量转换。支付由 Google Play 完成，适用 Google Play 的条款与隐私政策；我们和应用都不会接触您的银行卡或其他支付信息。应用通过 Google Play 结算库获取购买凭证，用于确认和恢复购买。

购买状态、剩余转换次数等信息保存在您设备上的应用私有存储中。兑换码仅在本机校验，不会被上传。

本应用申请网络权限（INTERNET），仅用于云端转换、广告与 Google Play 结算；申请 Google Play 结算权限（BILLING）用于应用内购买；广告 SDK 会加入广告 ID 权限。本应用不申请存储、相机、位置、通讯录等敏感权限。

选择文件或保存位置时，由 Android 系统授予应用对该文件或文件夹的访问权限，范围仅限于您的选择。使用「分享」或「打开」时，应用会向您选择的目标应用临时授予读取结果文件的权限，文件在目标应用中的处理适用该应用自身的隐私政策。

我们没有账号体系，不要求姓名、手机号或邮箱，不出售您的任何信息。除上文所述的云端转换请求（经中转服务的网络请求信息）外，我们自己不收集您的个人信息；广告与支付相关的数据分别由 Google AdMob 与 Google Play 依其政策处理。

本应用通过 Google Play 分发，Google 可能会根据您的设备设置收集应用安装、崩溃等诊断信息，相关处理适用 Google 隐私政策。

设备上的数据安全依赖于您的设备安全，建议为设备设置锁屏密码并妥善保管导出的文件。云端转换的所有传输均使用 HTTPS 加密。

如果您在系统中开启了备份，Android 可能将应用的部分私有数据（不含处理结果和已保存的签名）备份到您自己的 Google 账号，我们无法访问这些备份。

本应用不面向 13 周岁以下儿童，也不会有意收集儿童的个人信息。

我们可能会根据产品功能、法律法规或运营需要更新本隐私政策，并在本页面发布新版本、更新生效日期。如涉及数据处理方式的重大变化，我们会在应用内以显著方式提示。

如果您对本隐私政策或个人信息保护有任何疑问、意见，或希望行使相关权利，请发送邮件至 [email protected]。