Pagebird Privacy Policy

Effective date: 20 October 2026

Pagebird is a document scanner app for Android, published by Atakli Store. It turns paper into PDF files with your phone, reads text with on-device OCR and includes PDF tools. This policy explains what happens to your data when you use the Pagebird app and the website pagebird.web.app. We have tried to write it in plain language.

1. The short version

• Your documents never leave your phone. Scans, photos, PDFs, recognized text, signatures, document names and folders are processed and stored only on your device. We never receive them.
• No account. Pagebird has no sign-up and no login. We do not ask for your name, email address or phone number.
• No ads. The app contains no advertising software and does not use the Android Advertising ID.
• Anonymous usage statistics and crash reports are your choice. You decide on the first screen, and you can change it at any time in Settings → Privacy. In the European Economic Area, the United Kingdom and Switzerland the switch starts off.
• Purchases go through Google Play. We use RevenueCat to check which plan you own. We never see your card or payment details.
• We do not sell or share your personal data for advertising, and we do not use it to build profiles about you.

2. Who is responsible

Pagebird is published by Atakli Store ("we", "us", "our"), the developer shown on the Google Play listing. We are the data controller for the data described in this policy. Contact: ataklistore@gmail.com.

3. Data that stays on your device

Pagebird stores the following only in the app's private storage on your phone:

• scanned pages, imported photos and PDF files, and the PDF, JPG and TXT files you create;
• text recognized from your pages (OCR), document names, folders and the search index;
• signatures you draw, and your settings (theme, language, export defaults, app lock).

We have no access to this data, and it is not sent to us or to any service provider.

• Scanning. The camera screen is provided by the Google Play services document scanner (Google ML Kit). It runs on your device. Pagebird itself does not request the camera permission.
• Text recognition (OCR) uses Google ML Kit text recognition models that are built into the app and run on your device.
• Importing uses the Android photo picker and file picker. Pagebird can open only the photos and files you select, and it does not request storage or media permissions.
• PDF passwords you enter are used on your device to encrypt or open the file. They are not stored by us or sent anywhere.
• App lock uses Android's biometric or screen-lock prompt. Your fingerprint or face data is handled by Android and is never available to Pagebird.
• Sharing and exporting. When you share, save or print a document, it goes only to the app, folder or printer you choose. What happens there is governed by that app's or service's own terms.
• Backups. Android's automatic cloud backup (to your Google account) includes only Pagebird's settings, not your documents. When you move to a new phone with Android's device-to-device transfer, your documents can be copied directly to the new phone. The "Export library" feature creates a backup file that you save wherever you choose. We cannot access any of these copies.

4. Data processed by the app and its service providers

Some features need small amounts of technical data to be sent from your device to our service providers. None of it contains your documents, their names or their text.

4.1 Anonymous usage statistics (optional): Google Analytics for Firebase

If you turn on "Share anonymous usage and crash reports", the app sends usage events, for example "a scan was completed", "a PDF was exported", "the paywall was shown" or "a setting was changed". Event details are limited to fixed values, booleans and ranges, such as "2 to 5 pages". They never include document content, file names, search terms or anything you type. Google Analytics also receives an app instance ID, device model, operating system version, app version, language, country and approximate location (region or city) derived from your IP address. It does not receive the Advertising ID. Google Consent Mode tells Google that ad storage, ad user data and ad personalization are always denied.

If you leave the switch off, or turn it off later, the app stops sending these events.

4.2 Crash reports (optional): Firebase Crashlytics

Crash reports use the same switch. When it is on and the app crashes or hits an error, Crashlytics receives the technical stack trace, short error codes, the device model, operating system and app version, free memory and disk space, the app's state at the time of the crash, recent usage events (if usage statistics are on) and a random Crashlytics installation ID. Crash reports never include documents, file names or recognized text.

4.3 App settings: Firebase Remote Config and Firebase Installations

So that we can adjust settings without a full update (for example, turning a feature on or off), the app downloads a small configuration file from Firebase Remote Config. To do this, Firebase receives a random Firebase installation ID, your country and language codes, time zone, operating system and SDK versions, and the app's package name. This happens regardless of the usage-statistics switch because the app needs it to work as intended. It is not used to identify you.

4.4 Purchases: Google Play Billing and RevenueCat

• Google Play processes all payments under the Google Play Terms of Service and Google's Privacy Policy. Google provides us with order information (order number, product, price, currency, country, purchase date and status), but not your card details.
• RevenueCat, Inc. helps us confirm and restore purchases and work out which features you have unlocked. RevenueCat receives a random, anonymous app user ID that it creates for your installation, Google Play purchase tokens and receipts, product IDs, purchase, renewal and expiry dates, price and currency, store country, app version and device operating system. It also processes your IP address while handling these requests. RevenueCat does not receive your name, your email address or your documents. We use this data to provide Pro features, to prevent fraud and to understand sales in aggregate.

4.5 Google ML Kit and Google Play services

The ML Kit document scanner and text recognition run on your device. Google states that ML Kit sends Google technical metrics about the use and performance of these features, such as device and app information, a per-installation identifier, performance and latency figures, input and output sizes, feature versions and error codes, and that ML Kit does not transfer this data to third parties. Google may also download or update the scanner module and models through Google Play services. Your images and recognized text are not part of these metrics.

4.6 Ratings, support and the website

• In-app review. After you have exported several documents, the app may ask Google Play to show its rating dialog. Any rating or review you write is handled by Google Play. We do not learn whether you rated.
• Email support. If you write to ataklistore@gmail.com, we receive your email address and whatever you include in your message. We use it only to answer you. Please do not send us documents unless you want us to see them. Our email is provided by Google (Gmail).
• Website. pagebird.web.app uses no cookies, no analytics and no trackers. It is served by Google Firebase Hosting, which processes your IP address and browser information in its server logs to deliver the pages and keep the service secure.

5. Why we use data and our legal bases

Under KVKK (Türkiye) these correspond to Article 5(2)(c) (contract), 5(2)(ç) (legal obligation), 5(2)(f) (legitimate interest) and explicit consent under Article 5(1) for optional statistics. Under LGPD (Brazil) they correspond to Article 7, items V (contract), II (legal obligation), IX (legitimate interest) and I (consent).

6. Who receives data

We share data only with the service providers named above, who process it on our behalf or under their own terms to provide their services:

We do not sell personal data, we do not "share" it for cross-context behavioral advertising (as defined by California law), and we do not use it for advertising. We may disclose data if the law requires it, to protect our rights, or as part of a merger or sale of the app, in which case this policy continues to apply.

7. International transfers

Our providers process data in the USA and other countries. Where data protection law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum), the EU-U.S. Data Privacy Framework where the provider is certified, and, for transfers from Türkiye, the safeguards in Article 9 of Law No. 6698 (KVKK) such as standard contracts.

8. How long data is kept

• On your device: until you delete it. Deleted documents stay in "Recently deleted" for 30 days and are then removed for good. Uninstalling Pagebird or clearing its storage removes everything at once.
• Usage statistics (Google Analytics): user-level data is kept for 14 months and then deleted automatically. Aggregated reports without identifiers may be kept longer.
• Crash reports (Crashlytics): kept for 90 days.
• Remote Config and Firebase installation ID: kept while the installation is active. Google deletes installation data after a period of inactivity, or when the installation ID is deleted.
• Purchase records (RevenueCat, Google Play): kept for as long as you own the product and then for as long as tax and accounting laws require (usually up to 10 years). On request we delete the RevenueCat record, unless we must keep it by law.
• Support emails: kept while we are helping you, then deleted within 24 months of the last message, or sooner if you ask.
• Website server logs (Firebase Hosting): kept by Google for a short period for security and operations.

9. Your choices and how to delete data

• Usage statistics and crash reports: Settings → Privacy → "Share anonymous usage and crash reports". Turning it off stops collection from that moment.
• Delete analytics data: Settings → Privacy → "Delete analytics data" resets the analytics identifier on your device, so earlier statistics can no longer be linked to your installation.
• Your documents: delete them in the app (and empty "Recently deleted"), or uninstall the app.
• Subscriptions: manage or cancel them in Google Play (Settings → Manage subscription in the app opens it).
• Deletion by email: write to ataklistore@gmail.com. Step-by-step instructions are on our data deletion page.

10. Your rights

Depending on where you live, you have the right to:

• know whether we process data about you and get a copy of it (access, portability);
• have incorrect data corrected and have data deleted;
• restrict or object to processing, and withdraw your consent at any time without affecting earlier processing;
• not be subject to decisions based solely on automated processing (we make no such decisions);
• complain to a data protection authority.

European Economic Area and United Kingdom (GDPR, UK GDPR). You have all the rights above under Articles 15 to 22 GDPR. You can complain to the supervisory authority in your country, or in the UK to the Information Commissioner's Office (ICO).

Türkiye (KVKK, Law No. 6698). Under Article 11 you can ask whether your personal data is processed, request information about it, learn the purpose and whether it is used for that purpose, learn the third parties in Türkiye or abroad to whom it is transferred, request correction, deletion or destruction and notification of this to those third parties, object to a result against you that arises from automated analysis, and claim compensation for damage caused by unlawful processing. Send your application to ataklistore@gmail.com. We answer within 30 days, free of charge. You may complain to the Personal Data Protection Authority (KVKK Kurumu).

California and other US states (CCPA/CPRA and similar laws). In the last 12 months we collected these categories: identifiers (random app, installation and purchase IDs; IP address), commercial information (purchase history), internet or other electronic network activity (in-app usage events, crash data) and approximate geolocation derived from IP. Sources: your device and Google Play. Business purposes: providing the app, purchases, security, debugging and analytics. We disclose them only to the service providers listed in section 6. We do not sell or share personal information, and we do not use or disclose sensitive personal information. You have the right to know, delete and correct, and to not be discriminated against for using these rights. You can use an authorized agent. We verify requests using the information described in section 11.

Brazil (LGPD). Under Article 18 you can request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing and about the consequences of refusing consent, and revoke consent. You can complain to the National Data Protection Authority (ANPD).

Other countries. Wherever you live, you can contact us with any privacy request and we will handle it under the law that applies to you.

11. How to make a request

Email ataklistore@gmail.com with the subject "Privacy request – Pagebird". Because Pagebird has no accounts, we do not know who you are. To find data at our providers we may ask you for:

• for purchases: the Google Play order number (it starts with "GPA." and is in your Google Play receipt email);
• for usage statistics and crash reports: the approximate date you installed the app and your device model. Using "Delete analytics data" in the app is the fastest way to unlink this data.

We do not ask for documents, ID cards or passwords. We answer within 30 days (45 days for US state law requests where allowed, and we will tell you if we need longer).

12. Children

Pagebird is a general productivity tool and is not directed to children. It is not intended for children under 13, or under 16 in the European Economic Area, the United Kingdom and other countries where a higher age applies. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, for example by email, contact us and we will delete it.

13. Security

Your documents stay in the app's private storage, which other apps cannot read. You can add an app lock and password-protect PDFs. All connections to our service providers are encrypted in transit (HTTPS/TLS). No method of storage or transmission is completely secure, which is one reason we keep your documents off our servers entirely.

14. Changes to this policy

We will update this policy when the app or the law changes. The effective date at the top shows the current version. If a change significantly affects how your data is used, for example a new service provider that would receive your data, we will tell you in the app before the change takes effect and, where required, ask for your consent again.

15. Contact

Atakli Store, developer of Pagebird
Email: ataklistore@gmail.com
Website: https://pagebird.web.app