PindaiTu — Privacy Policy

1. Introduction

This Privacy Policy explains how PindaiTu (the "App") and its developer/operator InRainST collect, use, disclose, and protect personal information when you use the PindaiTu mobile application and related services (collectively, the "Services").

Quick summary: PindaiTu does not upload or collect images or documents you scan. The App uses third-party services for authentication and purchase management (Firebase & RevenueCat), which may process certain account and transaction data. The App requests local device permissions (camera, photos/media, storage) necessary for scan functionality. Please read the full policy below for details.

2. Data We Collect

We collect and process the following categories of data for the reasons shown below.

2.1 Data you provide directly

• Account information: when you sign in with Google (via Firebase Authentication), the App or Firebase may obtain your name, email address, and a unique identifier associated with your Google account. We use this to authenticate and identify your account in the App.
• Purchase & subscription records: details of in-app purchases and subscription status (product identifier, purchase date, transaction IDs, receipts, and purchase history). These records are managed primarily via RevenueCat and may be synced to Firebase for service continuity and analytics.
• Support communications: messages and data you voluntarily provide to support (for example email content, logs you send us, or troubleshooting attachments).

2.2 Data collected automatically

• Device & usage data: device model, operating system version, unique device identifiers (where permitted), app version, language, and usage metrics (features used, session duration, screen flow) collected in aggregated or pseudonymized form for product improvement and troubleshooting.
• Crash & diagnostic data: automatic crash reports, stack traces, and technical diagnostics necessary to fix bugs and improve reliability. Firebase Crashlytics (or similar) may be used for this purpose.
• Analytics data: the App and Firebase Analytics may collect events about app interactions and feature usage. Analytics data is used to understand and improve the App; it is typically aggregated and does not contain the contents of documents you scan. Currently, there is no in-app option to disable analytics collection.

2.3 Data we do not collect

• Document image content: PindaiTu does not upload, store, or transmit the actual images or document files you scan from your device to our servers for normal scanning operations. All scanning, cropping, and image processing happen locally on your device.

3. How We Use Personal Data

We use data for the following purposes:

• Provide and operate the App: authenticate users, maintain profiles, deliver subscription entitlements, and enable scanning functionality.
• Manage purchases and subscriptions: maintain purchase history, verify subscription status via RevenueCat, and fulfill paid features.
• Analytics & product improvement: analyze aggregated usage to improve features, performance, and stability.
• Security & fraud prevention: detect abuse, fraudulent purchases, and unauthorized access.
• Support: respond to user inquiries and resolve technical issues.
• Legal compliance: comply with applicable laws, respond to lawful requests, and enforce our Terms of Service.

4. Sharing & Third Parties

We may share data with the following categories of third parties:

• Authentication & backend services: Firebase is used for authentication (Google OAuth), user identity, hosting of certain backend services, and analytics. Firebase is operated by Google and may collect and process the limited account and analytics data described above.
• Subscription & purchase management: RevenueCat is used to manage in-app subscriptions and purchases. RevenueCat processes transaction records, receipts, and subscription status to provide entitlement validation and restore purchases across devices.
• Crash reporting & analytics providers: to collect crash reports and anonymous usage statistics (e.g., Firebase Crashlytics, Firebase Analytics). These providers have their own privacy practices; please review their policies for specifics.
• Service providers: hosting, database, payment processors, legal advisors, and other processors who perform services on our behalf under contract.

Important: We do not sell your personal information for direct monetary gain. We may share aggregated or anonymized information that does not reasonably identify you.

Because Firebase and RevenueCat are third-party processors, they may store or process data in countries different from yours. We use contractual and technical safeguards where applicable to protect your data.

5. Device Permissions & Local Access

PindaiTu requests several device-level permissions to function correctly. You may choose not to grant them, but some App features will not work without the required permissions.

How to revoke: You may revoke these permissions at any time from your device Settings. If you revoke a permission, features relying on that permission will no longer work until you re-enable it.

6. Local Processing of Documents

All scanning, cropping, image enhancement, and PDF generation occur on the user's device by default. PindaiTu does not currently provide OCR functionality. The App does not upload, transmit, or otherwise collect the image contents of scanned documents to our servers unless you explicitly choose to share or back up a document to a third-party service (for example exporting to cloud storage or emailing a document). If you use optional share/export features, those operations are governed by the privacy policies of the receiving service.

7. Open-Source Libraries

PindaiTu uses open-source libraries licensed under common licenses (MIT, BSD, Apache 2.0, etc.). The full list of third-party libraries and their licenses is published in the App under Profile → About.

8. Data Retention

We retain personal data only as long as necessary to provide the Services and for legitimate business purposes, including:

• For account and authentication records: for the duration your account exists and for a reasonable period afterwards to comply with legal obligations and to resolve disputes.
• Purchase & transaction records: retained for as long as necessary to provide subscription entitlements, for tax, accounting, and legal compliance.
• Analytics & crash data: retained in aggregated or pseudonymized form for product improvement; retention periods vary by provider.

9. Security

We implement reasonable technical and organizational measures to protect personal data, including:

• Transport security (e.g., TLS) for data in transit when communicating with our servers and third-party services.
• Access controls and authentication for backend systems and service provider accounts.
• Use of reputable third-party providers (e.g., Firebase, RevenueCat) that operate industry-standard protection controls.

No system can be 100% secure. We cannot guarantee absolute security of data; in the event of a confirmed data breach, we will follow applicable law and notify affected users and authorities as required.

10. Children’s Privacy

PindaiTu is not directed to children under the minimum age applicable in your country (commonly 13 or 16). We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information. If you believe we may have such data, please contact us at the contact address below.

11. International Data Transfers

Third-party service providers (such as Firebase and RevenueCat) may process and store personal data in countries outside your own. These countries may have different data protection laws. We take reasonable steps to ensure that transfers are subject to appropriate safeguards (for example, contractual protections). If you want more information about specific transfer mechanisms we employ, contact us using the information below.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we update the policy, we will revise the "Effective date" at the top of this page. For material changes, we will provide notice through the App, email (if available), or other prominent methods before the change becomes effective.

Note: This Privacy Policy and our Terms of Service may be updated at any time; please check this page periodically.

13. Acceptance

By downloading, installing, or using the PindaiTu App, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. You also agree to the PindaiTu Terms of Service, which govern your use of the App.