Privacy Policy
Last updated: 27 October 2026 · App: Kâtip PDF (com.weideas.katippdf) · Developer: WeIdeas
Summary
The documents, notes, voice recordings, signatures, file names and OCR-recognized text you open, scan or edit in Kâtip PDF are processed and stored only on your device and are never sent to any server. There is no account system, no advertising and no analytics or tracking SDK; we never ask for your name, email address or phone number.
The only exception is Premium subscription verification: when you subscribe or restore purchases, the app sends the purchase token issued by Google Play, the product ID, a one-time random value, a timestamp and (when available) a Google Play Integrity token to our server (weideas.tr) to confirm that the subscription is genuine and to prevent abuse. Our server forwards these tokens to Google for verification. What is stored: an irreversible hash of the purchase token, the product, the subscription status, the expiry date and the Google Play order number. If you don't subscribe, the app sends no requests to our server.
Data collected and processed
| Data | Where it is processed / where it goes | Shared? · Retention |
|---|---|---|
| PDFs, scanned pages, notes, highlights, voice notes, signatures | Only on your device (the app's private folder) | No. Only if you export or share, to the app you choose. Kept on your device until you delete them or uninstall the app. |
| OCR (text recognition) | On device, using the Google ML Kit text recognition model bundled in the app | No · Recognized text stays in your document/on your device. |
| Document scanning | On device, using the Google Play services ML Kit Document Scanner interface | No · Scanned images are returned only to the app. |
| Read aloud (Premium) | The page text you choose is passed to the text-to-speech (TTS) engine installed on your device | The app never sends the text to any server. The TTS engine selected in your device settings (e.g. Google Speech Services) reads it aloud; that engine's own privacy terms apply. |
| App lock PIN and hidden folder | Only on your device. The PIN is never stored in plain form; it is hashed with a key in the device's secure key store (Android Keystore). Documents in the hidden folder are encrypted with a key from the same store. | No · Until you turn off the lock, delete your data or uninstall the app. |
| Fingerprint / face (if app lock is on) | Android's system biometric prompt; the app never sees biometric data, only a "verified / not verified" result. | No · The app stores no biometric data. |
| Library backup (.katip) | Saved only when you ask, to the location you choose (e.g. a phone folder or a Drive folder). The app never sends the backup to any server; the rules of the service you choose apply. The backup is encrypted with a password you set (AES-256-GCM); the password is never stored or sent, so a lost password can't be recovered. Signatures and the hidden folder aren't included. | Only to the location you choose · Until you delete it. |
| Purchase token (subscribers only) | Sent from your device to our server (weideas.tr) over HTTPS; our server forwards it to the Google Play Developer API to verify the subscription. | Forwarded only to Google, as a verification service; not shared with anyone else. The server stores only a one-way hash (SHA-256) of the token, never the token itself, together with the subscription record (see below). |
| Google Play order number, product, subscription status and expiry date (subscribers only) | Received by our server from Google Play during verification | Not shared. Kept on our server to verify the subscription, process refund/cancellation notifications and handle support requests, until you ask us to delete it. |
| Google Play Integrity token (only during verification, when available) | Sent from your device to our server; our server forwards it to the Google Play Integrity API to check that the app and the request are genuine. | Forwarded only to Google, as a verification service. Not stored on the server; discarded once the check is done. |
| One-time random value and timestamp | Used by our server to block replayed requests | Not shared. Only a hash of the random value is kept for about 24 hours, then deleted. |
| IP address | Used by our server to limit abuse of the verification service | Not shared. The app server does not store raw IP addresses; only a counter derived from a salted, irreversible hash is kept briefly (at most about 10 hours). Our hosting provider's standard server access logs may keep the IP address and request time for a limited period for security purposes. |
For subscription verification, the app sends our server only these fields: app ID, product ID, purchase token, a one-time random value, a timestamp and (when available) a Google Play Integrity token. No documents, file names, email, name, device ID or advertising ID are sent. The connection is HTTPS (encrypted) only.
Camera, microphone and files
- Camera: Kâtip PDF has no camera permission and never accesses the camera itself. When you tap "Scan", the Google Play services document scanner opens; that system screen uses the camera and only the page images you confirm are returned to the app. They are turned into a PDF on your device and never sent to any server.
- Microphone: used only while you are recording a voice note on a page. The Android permission is requested with an explanation on your first recording and you can refuse it (every other feature keeps working). Recordings stay in the app's private folder; nothing is recorded in the background and audio is never sent to any server. You can delete a voice note in the app at any time.
- Files: no storage permission is requested. Only files you pick with the system file/photo picker, or send from another app with "Open with / Share", are opened; a copy is kept in the app's private folder and the original file is never changed. Exports and backups are written only to the location you choose.
Permissions
- Internet: Google Play Billing, subscription verification (the data above) and (only if you agree) downloading the language model for on-device translation.
- Microphone: only when recording a voice note, requested with an explanation on first use.
- Biometric authentication: used only if you choose fingerprint/face unlock for the app lock (system permission; not asked separately).
- Google Play Billing: to open the subscription purchase screen (system permission; not asked separately).
- Camera, storage, photo/media, location or advertising ID permissions are not requested. Files are opened through the system file and photo pickers, only the ones you choose.
Third-party services
- Google Play Billing: subscription purchase and payment. Payment details are handled only by Google; we never see card details.
- Google Play Developer API: our server sends the purchase token to this service to learn whether the subscription is valid, its expiry date and its refund/cancellation status.
- Google Play Integrity API: used during purchase verification to check that the app hasn't been modified and that the request is genuine (purchase security).
- Google ML Kit Document Scanner, Text Recognition and Language Identification: run on device; document content is not sent to us or any third-party server.
- Google ML Kit Translation (Premium "On-device translation"): the language model is downloaded from Google's servers only after you agree; the translated text is processed on your device and never sent. You can delete downloaded models from the translation panel.
- Google ML Kit components may send Google diagnostic and usage metrics that do not include document content (e.g. device model, Android and app version, processing time) to monitor how the service works and to detect errors. These metrics are subject to Google's privacy policy: policies.google.com/privacy
- Your device's text-to-speech (TTS) engine: reads page text aloud in the "Read aloud" feature; your device settings decide which engine is used.
Retention and deletion
- Documents stay on your device until you delete them. Deleted documents stay in the trash for 30 days, then are permanently removed.
- Settings → "Delete all data" removes the library, notes, recordings and saved signatures at once. Uninstalling the app also removes all local data.
- The subscription record on our server (token hash, product, status, expiry date, order number) is kept to verify your subscription and handle refunds/cancellations until you ask us to delete it. You can request deletion at destek@weideas.tr; including your Google Play order number (starting with GPA) is enough to identify the record. If the record is deleted, your subscription is verified again with Google Play the next time you use "Restore purchases".
- One-time value hashes are deleted automatically after about 24 hours and rate-limit counters after at most about 10 hours. The Integrity token is not stored.
- There is no cloud backup; Android auto backup is disabled for this app.
Security
All traffic between the app and our server is encrypted with HTTPS; unencrypted connections are not allowed. On the server, the purchase token and one-time values are kept only as one-way hashes.
Children
The app is intended for a general audience and is not designed for children under 13; we do not knowingly collect personal data from children.
Notice under Turkish data protection law (KVKK)
Under Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is WeIdeas. Personal data in your app content (documents, notes, voice recordings, signatures) is processed only on your device, under your control, and is never transferred to us. When you buy a Premium subscription, the purchase token, Google Play order number, subscription status/expiry date and the Play Integrity token used during verification are processed only for the purposes and periods described above, on the legal grounds of entering into and performing a contract (KVKK Art. 5/2-c) and our legitimate interest in keeping the service secure (Art. 5/2-f). For verification, these tokens are transferred to Google (Google LLC, outside Türkiye). To exercise your rights under KVKK Art. 11 (access, correction, deletion, etc.), write to destek@weideas.tr.
Changes
When we change this policy, we update the "Last updated" date above and mention important changes in the "What's new" notes on the app's store page.
Contact
Questions and requests: destek@weideas.tr