PDF Highlighter & Markup

Privacy Policy

How PDFs, ads, version-specific collection and optional support requests are handled.

1. About this policy

This notice explains how Bokeria Inc. handles information for PDF Highlighter & Markup on Android and iOS. Updated November 1, 2026. The version notes below distinguish the existing public apps from the new internal-test builds. Contact: appsupport@bokeriastudio.com.

2. Version-specific collection

Android 0.1.10 and iOS 1.0.12 test builds: you can choose usage statistics and error/performance diagnostics separately in the app menu’s Privacy Settings. Saved choices take priority. If no choice is saved, the app uses device-region, language-country and time-zone signals to set the initial state. It asks first if a signal indicates the EEA, UK or Switzerland, or the region is unknown. In other regions, both options are saved as ON before collection starts. This is a device-settings rule, not a determination of your actual location. PDF editing, saving and sharing work with both options off. Newly enabled diagnostics start after you close and reopen the app. An interrupted run, unreadable choice or failed save can keep collection off and ask you to confirm again.

Operational remote settings: Remote Config in these new test builds uses a Firebase installation ID and app/device information to retrieve operational settings, such as whether the empty-screen banner is enabled. It works separately from the optional usage/diagnostic choices and does not replace advertising consent or ATT.

Android 0.1.9 and iOS 1.0.11 test builds: Firebase Analytics, Crashlytics, Performance Monitoring and Remote Config are not activated, even if a configuration file is supplied. Privacy Settings shows that collection is inactive in this build. These builds do not provide active Firebase collection switches. This inactive behavior applies to those earlier test versions.

Earlier public Android builds through 0.1.8: when configured, Firebase analytics, crash reporting, performance monitoring and remote configuration start automatically. There are no separate in-app switches for usage analytics or diagnostics. Advertising choices do not turn these services off.

iOS 1.0.10 (13): Firebase is not initialized in that released build. Google AdMob advertising is separate from Firebase in all of these versions.

3. PDFs and information on your device

Selected PDFs, highlight strokes and exported PDFs are processed on your device. We do not operate a document storage server or automatically upload PDF contents for processing. The app keeps a local working copy, document name, highlights and last page to resume work, along with app preferences, ad consent choices, review counters and collection-choice/recovery records where present. The page zoom is not part of the saved recent-document session.

Opening a password-protected PDF requires the correct password. The unlocked local working copy and exported or shared copies do not retain the original password protection. The original file is not changed. Keep important work separately.

4. Support emails and optional attachments

If you contact us, we and your email provider receive the address, message and files you choose to send. You can contact us without an attachment. Android can attach a PDF that failed to open. From iOS 1.0.11, you can choose an optional problem PDF from a processing-error screen; the new iOS flow accepts one PDF up to 20MiB and requires a configured system Mail account.

The app prepares a draft or opens a mail composer; it does not send the email automatically. Review the recipient, contents and attachment before sending. A document can contain personal information or metadata. A working copy selected after an export error may already be unlocked. Do not send passwords or material you are not permitted to disclose. Without an attachment, the app can still include basic app/device/version and error-category information in the support draft where shown.

5. Advertising and tracking

Google AdMob requests a banner on the initial screen when no PDF is open, subject to the app’s advertising and consent conditions. Ads are not placed on the PDF editing page. The advertising SDK may process IP address (including approximate location inferred from it), device or app identifiers, ad views and interactions, product interactions, and crash/performance diagnostics for advertising, measurement, analytics, fraud prevention and security. This is not GPS access.

Google UMP refreshes advertising consent and presents a regional form or privacy options when required. On iOS, the app requests App Tracking Transparency authorization when applicable before starting the ad SDK. IDFA access and tracking require the applicable permission. Refusing tracking does not block PDF editing, saving or sharing. Advertising/privacy options and iOS system tracking settings are separate from any usage/diagnostic setting.

6. Firebase data and applicable versions

For enabled collection in the applicable versions, Analytics handles app usage events and app/device identifiers; Crashlytics handles crash and nonfatal error reports and device/app information; Performance Monitoring handles timing and performance diagnostics; and Remote Config retrieves configuration, including the empty-screen banner flag. PDF contents are not sent to these services for document processing.

Earlier Android render/export exception messages or stack traces can contain a provider URI, file name or path. Android builds from 0.1.9 and the new iOS test build sanitize explicit PDF operation error records. Permitted collection in Android 0.1.10 and iOS 1.0.12 follows the choices described above. SDK installation alone does not mean a service is active. See Firebase privacy and security and Google partner-site data use.

7. Your choices

PDF editing does not require an account or support contact details. Sending a support attachment, sharing a file or choosing an external save destination is your decision. The receiving app, person or cloud provider handles material sent through those services.

Open the app menu’s Privacy Settings for the current build’s collection status. Google advertising privacy options appear when required; device settings also control advertising identifiers and iOS tracking permission. In older Android versions, these advertising controls do not disable Firebase analytics or diagnostics. In Android 0.1.10 and iOS 1.0.12, you can turn optional usage statistics and diagnostics off at any time. Withdrawal stops new records and active traces and asks the relevant SDK to delete stored reports. Information already handed to an SDK transport queue or submitted for transmission may still arrive later; these switches do not delete data already on the server. A new diagnostic permission does not authorize reports from earlier unapproved or recovery sessions. This policy is a notice and is not a substitute for a separate consent or permission.

8. Retention and deletion

Android keeps saved PDF sessions until you delete them in the recent-document list or remove local app data. iOS keeps up to 5 recent PDFs and removes older in-app copies when new documents are added. Deleting a recent item does not delete the original or external exports. Uninstalling, clearing app storage, device loss or storage failures may remove in-app work. Exported files remain where you save or share them; manage them in the relevant app or storage service.

Saved PDF sessions are excluded from operating-system backup; preferences and collection choices may follow platform backup rules. Android support attachment cache copies older than seven days are cleaned during a later attachment preparation; caches may also be removed by the system. A mail draft or message is managed separately by your mail provider.

We retain support correspondence and attachments as needed to respond, follow up, resolve disputes or meet legal obligations. Contact us to request deletion. This request route covers information we can identify and control; it does not promise deletion of every SDK record. Third-party services apply their own retention rules. As verified on October 19, 2026, the earlier Android Firebase-linked Analytics property was set to 2 months for event data and 14 months for user data, resetting user-data retention on new activity. This is a dated configuration record, not a newly verified setting or a retention limit for all reports or services. See Analytics retention scope.

9. Security and international processing

The app uses its device sandbox and platform file-access mechanisms. No storage or transfer method can guarantee absolute security. When you use Google services or email, information may be processed in countries where those providers operate and under their published safeguards. Consider the contents of a document before sharing or attaching it.

10. Children, updates and requests

The app is a general-purpose PDF utility and does not require an account or intentionally ask children for contact details. Advertising and platform age-related requirements apply to the configured ad services. We may update this notice when app behavior or processing changes, identifying relevant versions and dates. Contact support for questions, access/deletion requests or concerns. Support emails and optional attachments are used only for customer support, not advertising or marketing. See how to request deletion. Applicable rights depend on your location; you may also contact the appropriate supervisory authority.