App Harbour ApS ("we," "us") operates the PDF to Word: Converter & OCR iOS application ("PDF to Word"). This policy explains what data the app handles and what it doesn't.
Short version
- No accounts, no email signup, no advertising identifiers.
- Conversion does not happen on your device. The PDF files you convert are uploaded over an encrypted connection to our conversion server (hosted on Render), converted by Adobe PDF Services, and deleted from our server once the conversion is finished and the result has been delivered, or automatically within about 15 minutes.
- We don't store, index, or train on your documents.
- Your subscription is linked to your Apple ID — Apple handles the payment; we never see your card details.
What data we collect
PDF file contents and file name (during conversion only). Picking and previewing a PDF happens on your device. When you tap Convert to Word, the PDF and its file name are uploaded over TLS to our backend conversion service at onrender.com. The server writes the PDF to a temporary file, sends it to Adobe PDF Services for conversion (including OCR for scanned pages), and deletes the PDF when the conversion finishes. The converted .docx is held in a temporary file on the server until the app downloads it, then deleted; unclaimed or failed jobs are swept automatically after about 15 minutes. Conversions of scanned documents can take a few minutes, so the file is on the server for that long. The converted file is saved to the app's temporary storage on your device until you share or save it.
Usage quota. To enforce the per-tier limits (one free conversion, then a fair-use cap of 30 conversions per 7 days on Weekly Premium and 150 per 30 days on Annual Premium), our server keeps an in-memory counter associated with either your StoreKit original transaction ID (subscribers) or a random anonymous identifier (free use). The counter holds only a count of conversions and a timestamp, never file contents, and is lost whenever the server restarts.
Free-conversion flag on your device. The app stores a single "free conversion used" flag in your device's Keychain so the free conversion is counted once per device. It contains no personal data. Keychain items can survive deleting and reinstalling the app.
IP address and server logs. Our server uses your IP address in memory to rate-limit requests. Server logs record conversion events, including the job, the page count, your tier, and the anonymous or transaction identifier, and may include the file name of the uploaded PDF. Logs don't contain file contents.
Subscription transaction ID. If you subscribe, Apple's StoreKit gives the app a signed transaction. The app sends it to our server, which verifies Apple's signature and uses the included original transaction ID to confirm your subscription, and that ID is included as the subject of the short-lived authentication token used by the app to call the conversion endpoint. The token is signed and stateless; we don't store it.
Crash and diagnostic data. If you have Share Analytics with App Developers turned on in iOS Settings, Apple may share anonymous crash reports with us. We use these to fix bugs only.
What we do NOT collect
- Your name, email address, phone number, or other contact info (except if you email us; see below).
- Your Apple ID, payment information, or credit card details.
- Persistent device or advertising identifiers (IDFA, IDFV).
- Location, contacts, photos, camera, calendar, or any other iOS permission-gated data. The app asks for no iOS permissions; you choose each PDF yourself.
- Analytics or advertising data. The app contains no analytics, advertising, or tracking SDKs.
- The contents of any PDF you convert, beyond the temporary processing described above.
Third-party services
Adobe PDF Services. The actual PDF-to-Word conversion is performed by Adobe's PDF Services API on our server's behalf. Your file is sent to Adobe over an encrypted connection, converted, and the result returned. Adobe processes the file according to its own terms; see Adobe's privacy policy. We don't send Adobe your subscription or transaction ID.
Apple. Subscription billing is handled entirely by Apple. We receive only the signed transaction and validate it with Apple's App Store Server Library.
Render (hosting). Our backend, including the temporary storage of files during conversion, runs on Render (render.com). Render keeps standard request logs (IP address, request path, response code) and the application logs described above, retained under its own policy.
Data security
All traffic between the app and our backend uses TLS encryption. Files are stored only in temporary files on our server for the duration of the conversion and until you download the result (at most about 15 minutes), and are then deleted. Our backend secrets (JWT signing key, Apple receipt verification credentials, Adobe API credentials) are stored as encrypted environment variables managed by the hosting provider.
Children's privacy
The app is not directed at children under 13 and does not knowingly collect data from children. If you believe a child has used the app, contact us and we will take appropriate steps.
Your rights
Because we do not collect personal information beyond what's described above, there is generally no personal data to access, correct, or delete. If you have questions about the short-lived usage-quota record associated with your transaction ID, or want it removed, email us.
Contact
If you have questions about this policy: info@appharbour.com
App Harbour ApS, Copenhagen, Denmark.
By using PDF to Word: Converter & OCR, you agree to this privacy policy. We may update this policy from time to time; updates take effect when posted to this page.