1. Who we are
WePDF is made by Zenerly (www.zenerly.com) ("WePDF," "we," "us," or "our"). This policy covers the WePDF website at www.wepdf.net, the WePDF web app in your browser, and the WePDF Android app (together, the "Service"). The Service is a PDF toolkit for scanning, merging, splitting, compressing, converting, signing, editing and protecting documents.
WePDF does not have user accounts. You can use every tool without signing up or giving us your name or email.
2. Your documents & files
Web app and online tools
When you use a tool on this website (for example Compress PDF or the web app), your files are opened and processed by code running in your own browser. They are not uploaded to WePDF's servers, and we cannot see them. Documents you keep in the web app's library, and any signature you choose to save for reuse, are stored in your browser's local storage (IndexedDB) on your device. You can remove them at any time by deleting them in the app, using Settings → Clear data in this browser, or clearing this site's data in your browser settings.
Android app
The Android app processes documents on your phone and stores them in the app's private storage. Scanning and text recognition (OCR) use Google's on-device ML Kit, so page images are not sent to us for processing.
When documents leave your device
Only when you choose to:
- Google Drive backup (optional). If you connect Google Drive, WePDF copies your documents
to a "WePDF Backups" folder in your own Drive account. WePDF uses Google's
drive.filepermission, which only lets it see files it created in that folder — not the rest of your Drive. We do not receive a copy of these files. Google's handling of your Drive is covered by Google's privacy policy. - Share links (optional). If you create a share link, the file is placed in your WePDF Backups folder and made viewable by anyone who has the link. You can stop sharing from Google Drive.
- Sharing and downloads. When you download a file or send it through your device's share sheet, it goes wherever you send it.
We never use the content of your documents for advertising, analytics or training AI models.
3. Information we collect
Information you give us
- Past early-access sign-ups: our early-access list is closed. If you joined it, we hold your email address, your name if you gave it, and the IP address the sign-up came from. We no longer send early-access emails.
- Contact and support messages: your name, email address and message.
- Data deletion requests: your email address and any reason you give.
Information collected automatically
- Website analytics: our homepage and other information pages (such as the tools directory) use Google Tag Manager, which may load Google Analytics. This can collect pages visited, clicks, approximate location (derived from your IP address), browser and device type, and uses cookies or similar identifiers.
- Web app usage events: the web app may record anonymous usage events such as which tool was opened, whether processing succeeded, the number of files and an approximate file-size range (for example "1–5 MB"). These events never include file names, document contents or passwords.
- Android app analytics: the Android app uses Google Firebase Analytics. It records which screens and features you use, with counts such as the number of pages or files involved — never file names or document contents. Firebase also collects an app-instance identifier, device model, Android version, app version, language, approximate location (country/region) and session information.
- Server logs: like most websites, our hosting provider keeps standard request logs (IP address, browser type, pages requested and time) to operate and secure the site.
- Crash logs (Android): if the app crashes, details of the error are saved in the app's private storage on your phone. They are not sent to us automatically.
Information we don't collect
We don't collect your documents, contacts, precise location or biometric data. If you turn on the Android app's biometric lock, your fingerprint or face check is handled entirely by Android — WePDF only learns whether it succeeded.
4. How we use information
- To provide the Service, including optional features you turn on such as Drive backup and reminders.
- To answer your messages and process deletion requests.
- To understand which tools are used, find problems and improve the Service.
- To show ads in the Android app if you turn them on (see Section 5).
- To keep the Service secure and comply with legal obligations.
Where the GDPR applies, we rely on your consent (optional ads, Drive backup, and past early-access sign-ups), on providing the Service you asked for, and on our legitimate interest in running, securing and improving the Service (analytics and server logs).
5. Advertising (Android app)
Ads are off by default. The Android app can show a banner ad on the Home screen only if you turn ads on in Settings. When ads are on, the app uses Google AdMob, which may collect your device's advertising ID, IP address, device information and app interactions to serve and measure ads, including personalized ads. Learn more at policies.google.com/technologies/partner-sites. You can turn ads off again at any time, reset or delete your advertising ID in your device's Google settings, and opt out of personalized ads at adssettings.google.com. The website and web app do not show ads.
6. Third-party services
We use these providers, each under its own privacy terms:
- Google Firebase Analytics — Android app usage analytics.
- Google Tag Manager / Google Analytics — website analytics.
- Google AdMob — Android ads, only if you turn ads on.
- Google Drive and Google Sign-In — optional backup and share links.
- Google ML Kit — on-device document scanning and text recognition in the Android app. Google Play services may send Google diagnostic and usage information about these features.
- Google Play — app distribution and in-app update prompts.
- Gmail — receiving contact messages and sending data-deletion confirmations.
- Our web hosting provider — serving the website and storing past early-access sign-ups and deletion-request records.
We do not sell personal information, and we do not share it with data brokers.
7. Cookies & local storage
Google Tag Manager and Google Analytics on our homepage and other information pages may set cookies. You can block or delete cookies in your browser settings. The web app keeps your documents, settings, theme, language and activity stats in your browser's local storage so they are there next time; this data stays on your device and is not sent to us.
8. Data retention & deletion
- Documents: stay on your device (or in your own Google Drive) until you delete them. We never hold a copy.
- Past early-access sign-ups: kept until you ask us to delete them.
- Contact messages: kept in our email for as long as needed to help you and keep a record of support.
- Deletion requests: a record of the request is kept so we can show it was handled.
- Analytics: retained by Google under the retention settings of our Firebase and Google Analytics accounts.
To have your email or other details removed, use our data deletion page or contact us. To remove data stored only on your device, delete it in the app, clear the web app's data in Settings, or uninstall the Android app.
9. Security
Keeping documents on your device is our main safeguard: there is no server copy to leak. The website is served over HTTPS, Drive backups travel over encrypted connections, and PDF password protection is applied on your device with AES-256 encryption. No system is perfectly secure, so please protect your device and Google account too.
10. Your rights
Depending on where you live (for example the EU/EEA, UK or California), you may have the right to:
- access, correct or delete the personal information we hold about you;
- object to or restrict processing, and withdraw consent at any time;
- receive a copy of your information in a portable format;
- opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising — we don't sell personal information, and you can avoid ad-related sharing by keeping ads off;
- complain to your local data protection authority.
To exercise these rights, email contact@wepdf.net. We will respond within 30 days.
11. Children
WePDF is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.
12. International transfers
The Google services listed above may process information in the United States and other countries. Google provides safeguards such as Standard Contractual Clauses for these transfers.
13. Changes to this policy
If we change how WePDF handles information, we will update this page and the "Last updated" date. If a change is significant, we will also tell you in the app or on the website.
14. Contact us
For questions about this policy or your data, email contact@wepdf.net or use the contact form on our Support page and mention “Privacy” in your message. WePDF is made by Zenerly — www.zenerly.com.