Last updated: October 7, 2026
This privacy policy applies to the following Android application and its developer, as listed on Google Play:
Offline PDF Toolkit: Merge PDF ("the app", formerly listed as Offline PDF Toolkit) merges, splits, reorders and password-protects PDF files, and turns images and photos into PDFs. This page explains what data the app handles and who it is shared with. The app is provided by yzyy, an individual developer based in Singapore ("we", "us").
Every operation happens on your device. The app works only on what you give it: files you pick in the system file picker, photos you pick in the system photo picker, files you send to it from another app, and photos you take from the Images tool (the app opens your camera app, which saves the photo into the app's private storage — the app itself has no camera permission).
To work on a document, the app copies it into its own private storage and writes the result where you tell it to in the system file picker. These working copies are temporary: they are deleted when you leave the tool or the operation finishes. Photos taken from the Images tool are usually deleted when you leave Images; they are kept while a photo is still being taken, or while the screen is being rebuilt (for example after rotating the phone or switching dark mode), so that they are not lost. If a session is interrupted — for example, the app crashes or is closed by the system — anything left behind is deleted the next time the app starts; for photos taken from Images, that start-up clean-up removes leftovers whose last change is more than an hour old, so that a photo your camera app may still be saving is not removed.
The file you pick is never modified — every tool writes a new document and leaves the original exactly as it was.
Your documents, their names and their contents are never sent to us, never included in crash reports or usage counts, and never shared with any third party.
A password you type — to open a protected PDF, or to protect a new copy — is held in memory only for as long as it is needed for that operation. It is never written to storage, never included in crash reports or usage counts, never written to system logs, and never sent anywhere.
The app can only remove a password that you supply yourself. It does not attempt to guess, recover or bypass a password it was not given.
Unless you switch it off, the app sends:
This information is tied to a random installation identifier generated by Google's software. We do not ask for or store anything that identifies you personally, but because that identifier is consistent for your installation, this reporting is pseudonymous rather than anonymous. We describe it plainly rather than calling it anonymous.
You can turn it off at any time: open the app, go to About, and switch off "Send crash reports and usage counts". Turning it off stops collection immediately, for both crash reports and usage counts.
The app needs network access for three things only: sending the crash reports and usage counts described above, and confirming a purchase with Google Play. Your documents are never sent over the network. The app works fully offline — every tool continues to work with no connection at all.
The one-time Pro unlock is sold through Google Play. Google processes the payment and we never receive or store your payment details. Whether you own the unlock is stored on your device and re-checked with Google Play, so it can be restored if you reinstall the app.
The app contains no advertising, and no advertising SDK. The Android advertising-ID permissions are explicitly removed from the app, so it cannot collect an advertising ID even indirectly through the analytics software it includes.
The app includes the following Google services, which handle data under Google's own privacy policy:
See Google's Privacy Policy for how Google handles this data.
We do not hold any of your data ourselves, so there is nothing for us to delete on request. Data collected by the Google services above is retained under Google's retention policies: usage data is kept for a limited period, and crash reports only as long as they are useful for fixing problems. Switching off reporting in the About screen stops further collection, and uninstalling the app stops all collection.
Your documents are yours and stay on your device, so deleting them is a matter of deleting the files themselves. The app keeps no lasting copy of your documents or photos: its only copies are the temporary working copies and camera photos described under "Your documents", which it deletes as described there. Unless you switch off "Remember recent files" in the About screen, the app remembers the names and locations of up to eight recently used files, on your device only, so you can reopen them; switching it off clears that list.
The app is a general-audience utility and is not directed at children under 13. We do not knowingly collect personal information from children.
If our data practices change, we will update this page and the "Last updated" date above before the change takes effect.
Questions about this policy: yzyapps99@gmail.com