Last updated: September 25, 2026
This Privacy Policy explains how the “Photos to PDF: Smart Converter” mobile app (listed under that name on the Apple App Store and Google Play; shown in-app as “Photos to PDF“; referred to here as “the App“, “we“, “us“) handles information when you use it on iOS and Android. The App lets you import, organize, and convert photos and documents into PDF files, with optional on-device text recognition (OCR), a support chat, and optional Lifetime/Monthly/Quarterly in-app purchases that unlock premium features.
We designed the App to keep your documents and photos on your device by default. This policy describes the limited data that does leave your device — for purchase validation, crash/usage diagnostics, push notifications, and support chat — and why.
Information We Collect
Local content and files
The photos, scanned images, and PDF documents you create or import stay on your device. The App stores a local on-device database (document library, page metadata, OCR status, and search index) and file-system folders for your images, generated PDFs, and thumbnails. This content is not uploaded to our servers as part of normal app usage. If your device includes location or other EXIF metadata in a photo and you choose to keep that metadata when exporting a PDF, that metadata is retained only inside the file on your device (and included in the exported PDF you choose to save or share) — we do not separately collect or transmit it.
Camera and photo library access
With your permission, the App accesses your device camera (to photograph a document) and photo library (to select images). Exported PDFs are saved or shared through the system share sheet / Files. These permissions are requested by the operating system and can be changed at any time in your device Settings. Photos you capture or select are processed locally to build your PDF.
On-device text recognition (OCR)
The App can run on-device OCR (Apple Vision on iOS, ML Kit on Android) to make scanned pages searchable. OCR processing happens locally on your device; recognized text is stored in the local document database described above and is not sent to our servers.
Device and usage identifiers
The App generates a random device identifier (a UUID stored locally via on-device storage) that is not tied to your name, email, or account — the App does not require you to create an account or sign in. This device identifier is sent to our backend (api.nghero.vn) together with basic app/platform information (app version, OS platform) when the App communicates with our servers, for example to validate a purchase, register for push notifications, or send a support message.
Purchase and subscription data
When you buy the Lifetime unlock or a Monthly/Quarterly subscription, the purchase is processed by Apple’s App Store or Google Play billing — we never see your payment card details. To activate your entitlement, the App sends purchase/receipt information (such as the product id, transaction/order id, purchase token, and your device identifier) to our backend (api.nghero.vn) so it can validate the purchase with Apple/Google and return an activation result. We store the resulting entitlement state (which plan is active and when it was granted) locally on your device and, on our backend, associated with your device identifier and order/purchase identifiers, so that “Restore purchases” can work across app reinstalls.
Analytics
The App sends anonymous, device-identifier-based usage events (e.g., which screen you opened, which button you tapped, and app foreground/background events) to our backend for basic product analytics. We also use Firebase Analytics, which associates a small set of user properties (including the same device identifier) with app usage. This data helps us understand feature usage and is not used to build an advertising profile, and the App does not use third-party advertising SDKs.
Crash and diagnostic data
The App uses Firebase Crashlytics to automatically collect crash reports and error logs (including a device identifier, device/OS details, and stack traces) when the App crashes or encounters a handled error. This helps us diagnose and fix bugs. We do not intentionally include your document content in these reports.
Push notifications
If you allow notifications, the App registers a Firebase Cloud Messaging (FCM) push token with our backend (associated with your device identifier, platform, and app version) so we can send you notifications. If you tap a notification, we log that a notification was clicked (a notification/message identifier and type) to our backend for delivery/engagement tracking. You can disable notifications at any time in your device Settings.
Support chat
If you contact support through the in-app chat, the App sends your messages, any tags you select, and any photos/files you choose to attach to our backend (api.nghero.vn) so our team can respond. Attachments you send and any replies (including attachments from support) are downloaded and cached locally on your device to display the conversation. Support communications are associated with your device identifier, not a named account.
How We Use Information
We use the information above to: operate core App features (PDF creation, OCR, library, search); validate and activate your purchases and subscriptions; provide push notifications; provide customer support; diagnose crashes and bugs; and understand aggregate feature usage so we can improve the App. We do not sell your information, and we do not use it for third-party advertising.
Third-Party Services
The App relies on the following third-party services, each of which processes limited data as described above under its own privacy practices:
- Apple App Store / Google Play Billing — processes your payment and purchase transactions.
- Firebase (Google) — Analytics, Crashlytics, and Cloud Messaging (push notifications).
- Our own backend at
api.nghero.vn, operated by us, which handles purchase validation, push token registration, notification-click logging, and support chat.
Data Retention
Local content (photos, PDFs, the on-device library database, OCR text, and cached support attachments) stays on your device until you delete it or uninstall the App. Server-side data (device identifier, purchase/entitlement records, analytics events, crash reports, push tokens, and support messages) is retained for as long as reasonably necessary to provide the App’s features, support your purchases (including restore purchases), comply with legal/accounting obligations, and improve the App, after which it may be deleted or anonymized.
Security
We use reasonable technical and organizational measures (such as encrypted network transport) to protect information sent to our servers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
Your Choices and Data Deletion
- You can delete individual documents/photos from within the App, or remove all local data by uninstalling it.
- You can disable camera, photo library, or notification permissions at any time in your device Settings.
- You can request access to, or deletion of, the limited server-side data associated with your device identifier (e.g., purchase/entitlement records, analytics, or support messages) by contacting us at the email below. Because we do not require an account, we will ask you to identify your device/purchase (e.g., order id) to help us locate the right records.
Children’s Privacy
The App is a general-audience productivity app and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, please contact us so we can remove it.
International Data Transfers
Our backend and third-party service providers (including Firebase/Google Cloud) may process and store data in countries other than your own. By using the App, you understand that your information may be transferred to and processed in such locations, which may have different data protection laws than your jurisdiction.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date above, and where appropriate, an in-app notice. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: [email protected]
- Developer / Publisher: NgheRo.Vn, operated by Cao Vu Hung as an individual household business (Household Business Registration No. 41L8042932, Ho Chi Minh City, Vietnam)
- Website: https://nghero.vn
See also our Terms of Use.