Privacy Policy

This policy applies to the Folio PDF Android app (package com.pangolin.foliopdf) and this product website. It describes data processing when you read, manage, process, or share documents and use connected services.

Reading documents and using local tools do not require a Folio account. Actual processing may vary with the app version, Android version, region, service configuration, and features you enable. Third-party websites, cloud providers, and sharing apps also have their own privacy policies.

• Documents and their index: imported copies, file names, types, sizes, page counts, covers, favorites, recent items, and reading positions are stored on your device to display, find, and resume documents.
• Processing results: core PDF reading, merging, splitting, page organization, annotation, handwritten signatures, compression, and supported Office conversions run on your device. Processing may create caches, temporary files, or new copies. AI summaries, browsing, cloud services, and sharing involve the online or external processing described below.
• Preferences and work: language, appearance, notification settings, saved signatures, editing drafts, and summary history preserve your choices and progress.
• Deletion and originals: the library recycle bin manages app copies. Moving, deleting, or renaming files in the shared-storage browser may directly affect selected original files; check the target before proceeding. Exported or shared copies are managed by their destination or recipient.

When you request an AI summary, the selected document is sent over HTTPS to the ThinkYeah summary service (file-service.thinkyeah.com). Requests include file contents, the file name, summary mode, selected language, and application authentication, timestamp, and task information needed to process the request. Non-PDF documents may first be converted to PDF on your device. The service also receives network information such as your IP address when you connect.

The app checks task status, retrieves results, and stores task state and summary versions on your device so you can resume queries, regenerate, copy, or export summaries. The service may use downstream AI processing providers. The app cannot independently confirm a uniform commitment about server retention, processing location, downstream providers, or whether data is used for model training.

Make sure you are authorized to submit the document. If you do not accept third-party processing, do not use online AI summaries. Deleting a local summary, uninstalling the app, or stopping your wait does not delete documents already received by the service or necessarily stop an active task. Do not submit sensitive or confidential documents that have not been approved for external processing.

• Files and all-files access: the app reads documents through system file or photo pickers, grants from other apps, or storage permissions you grant in Android. It may request all-files access to browse shared storage and folders and manage documents. Older Android versions use the corresponding storage permissions.
• Document and code scanning: the app uses ML Kit document and code scanner components supplied by Google Play services and may open the system camera if document scanning is unavailable. Scanner components may download or update modules and process service diagnostics under Google's policies.
• Notifications and background services: notification permission supports document alerts, reading reminders, the shortcut toolbar, and service messages. Enabled document discovery can check for new documents within authorized storage. Foreground services, background tasks, and boot restoration support the features you enable.
• Network and advertising identifiers: network access supports browsing, downloads, online summaries, and third-party SDKs. The app declares the advertising ID permission for advertising, measurement, and attribution subject to Android and provider rules.

You can manage storage access, notifications, and advertising privacy settings in Android. Revoking permission may prevent the corresponding feature from working.

The app integrates the following services. Their SDKs may process data automatically at startup, in the background, during ad requests, or when features are used. Using local document tools does not mean these SDKs remain offline. Actual ad providers depend on configuration, region, and ad availability.

Provider information and policies: Google, Firebase, AdMob data disclosure, Adjust, AppLovin, Meta, Mintegral, and Pangle.

These services may process data outside your country or region. Sharing data for advertising or analytics may fall within specific legal definitions of “sale” or “sharing” for targeted advertising. Not directly selling documents does not mean no advertising-related data sharing occurs. Limiting advertising IDs or personalized ads in Android does not necessarily stop all advertising, analytics, or necessary diagnostics processing.

When you browse or search in the built-in browser, URLs, search terms, your IP address, and browser request information are sent to the relevant website or search engine. Websites may use cookies, local storage, or other technologies under their own policies. Normal browsing stores tabs, history, bookmarks, and relevant web data locally. Downloads are saved by the system or to a location you choose.

Private browsing uses a separate browsing session environment to reduce sharing of browsing records with normal mode. It does not provide network anonymity or prevent websites, network providers, or recipients from receiving information you send. Downloaded files and externally shared content may remain after a private session.

When you share, export, print, or use a cloud-provider entry, the selected files and necessary access grants are passed to the system service, app, storage provider, or print service you choose. The recipient manages subsequent processing.

Feedback can package your topic, description, optional reply email, and selected attachments for an app chosen from the system share sheet. If you include diagnostics, the attachment can contain the app version, Android version, device model, document count, and appearance settings. Review attachments and diagnostics before sending.

The system share sheet is not a support inbox. The current feedback flow does not automatically send email or select a recipient. You must confirm the intended recipient and finish sending in the destination app.

The library, index, preferences, signatures, and summary history generally remain until you delete the relevant items, clear app data, or uninstall the app. Items in the app recycle bin must be permanently deleted to remove those copies. Processing caches and temporary files follow their respective cleanup mechanisms. Files in shared storage, downloads, exported files, and recipients' copies may remain after uninstallation.

The app uses Android app isolation, controlled file sharing, and applicable system security mechanisms, and uses HTTPS for online summaries. No storage or transmission method guarantees absolute security. Protect your device and important files; local storage is not a substitute for backup or a promise of end-to-end encryption.

Server-side advertising, analytics, crash, messaging, and summary data follow the relevant provider's policy and configuration. Deleting local data does not automatically issue deletion requests to every provider. To request action on server data, use the appropriate contact channel and provide information needed to verify and locate your request.

• Delete library copies, empty the recycle bin, manage summary history, or clear recent items in the app. Clearing recent items does not delete documents.
• Manage storage, notifications, app data, and advertising privacy through Android settings. You can choose not to use an online feature or submit a document.
• Keep needed copies through system export, sharing, or other supported options. Export important files before clearing app data.
• Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal data, restrict or object to processing, withdraw consent, or make choices about targeted advertising. Available rights and exceptions depend on your location and the processing involved.

The app currently has no single switch that disables all third-party SDKs. Android ad settings, notification permissions, and choosing not to use AI summaries each have different effects. See section 12 for further data requests; information may be needed to verify your connection to the relevant data.

Folio PDF is a general-purpose document tool and is not specifically designed for children. Parents or guardians should guide minors according to the distribution channel's age information and local requirements, particularly for uploads, browsing, ads, and external sharing. If you believe a minor's personal information was improperly submitted or processed, raise a privacy enquiry using the channel described in section 12.

The home and privacy pages are static. Their code contains no advertising, visitor analytics, third-party font requests, or upload forms, and does not use cookies or local storage. Hosting or network providers may process server access logs, such as IP addresses, request times, and user agents, to deliver and secure the pages, depending on the deployed hosting configuration.

We will update this policy and its date when product features, service providers, or applicable requirements change. Changes requiring additional notice or consent should be communicated through an appropriate method as required.