QuietRedact is a privacy utility. The documents you redact are processed entirely on your device. This policy describes what the app and its purchase provider actually process. The controller is Oskar Polster, Grafenberg 116, 3730 Grafenberg, Austria — see Imprint.
Documents, text and faces — processed on your device only
When you import a PDF or image, QuietRedact analyses it locally using Apple's on-device Vision and PDFKit frameworks. Text recognition, the detection of names, addresses, emails, phone numbers, IBANs, card numbers, document IDs and dates of birth, and face detection all run on your iPhone or iPad.
QuietRedact has no server. Your documents, the recognised text, the detected values and the exported result are never uploaded to us, to RevenueCat or to any other third party. They are not used to train any model. There is no cloud OCR path in this version.
Files created while you work
To analyse, preview and export a document, the app creates temporary working copies in its own sandbox, protected by iOS file protection. These are deleted when the session ends, when you leave the document, or on the next launch after a crash. QuietRedact only deletes files it created itself — your originals in Files or Photos are never modified or removed.
Photos and Files access
QuietRedact reads only the specific file or photo you pick. It does not browse your photo library or your files in the background. The camera and microphone are not used.
Purchases
Purchases are processed by Apple. QuietRedact uses RevenueCat to check whether the Pro entitlement is active and to restore purchases. For that purpose RevenueCat processes purchase history, product identifiers, entitlement status, country/storefront, device and app version information, and an anonymous app user identifier generated on the device.
QuietRedact has no user account. We do not send RevenueCat your name, email address, phone number, Apple Account or any document content. We cannot connect a purchase record to your identity.
No tracking, no advertising, no analytics
QuietRedact contains no advertising SDK, no attribution SDK and no behavioural analytics SDK. It does not use the App Tracking Transparency framework because it performs no tracking across apps or websites owned by other companies, and it does not access the advertising identifier.
Legal bases (GDPR)
| Processing | Purpose | Legal basis |
|---|---|---|
| On-device analysis and redaction | Providing the function you asked for | Art. 6(1)(b) — performance of a contract. No data reaches us. |
| Purchase and entitlement data via RevenueCat | Unlocking, verifying and restoring Pro | Art. 6(1)(b) — performance of a contract |
| Support correspondence | Answering your request | Art. 6(1)(b) / Art. 6(1)(f) — legitimate interest in support |
Retention
App settings and the entitlement cache stay on your device until you delete the app. Temporary document files are removed as described above. RevenueCat retains purchase records for as long as needed to keep purchases restorable. Support emails are kept only as long as needed to resolve the request.
International transfers
RevenueCat, Inc. is based in the United States. Where personal data is transferred outside the EEA, the transfer is based on the European Commission's Standard Contractual Clauses concluded with the provider.
Children
QuietRedact is not directed at children and does not knowingly process data from children under 13.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority — in Austria the Datenschutzbehörde, dsb.gv.at. Because there is no account, most of your data never leaves your device: deleting the app removes it. For purchase-related requests write to oskarpolster.business@gmail.com. See Data deletion.
Changes and contact
If features or service providers change, this policy is updated before the changed version ships. Questions: oskarpolster.business@gmail.com.