ThothForgePrivate Export · Effective October 21, 2026
Privacy Policy
Private Export processes your images, scans and PDFs on your device. We do not operate a file-upload service, account system, advertising system, analytics service, or developer-operated server, and the app does not collect data.
Your files
Images, PDFs and documents (such as Word, Excel, PowerPoint, RTF, text and HTML files) you select from Photos, Files, the share extension or the document scanner are copied only into temporary app storage for processing. Originals are not overwritten. Output remains under your control until you save, share, or delete it; temporary files, including copies made by PDF tools, are removed when you close the tool or after they expire.
Saved Setups store conversion preferences locally. Recent results, including PDF tool results you choose to keep in the Library, and delivery summaries remain on device. Delivery summaries do not retain filenames, paths, photo metadata values or file hashes. Export packages contain output files and integrity manifests and are shared only when you choose a destination.
Document conversion
Word, Excel, PowerPoint and other documents are converted to PDF on your device using Apple’s built-in document viewer. During conversion the app blocks all network requests, so links, images or other content a document references online are not loaded and nothing is sent anywhere. You can preview files and results on your device before saving or sharing them.
Camera and text recognition
The camera is used only when you choose to scan a document. Text recognition for searchable PDFs and text export runs on your device with Apple’s Vision framework; the text is not sent anywhere. Text you export as a .txt or Word file is saved only where you choose.
Signatures, saved text, passwords and app lock
A handwritten signature is kept only for the current signing session unless you choose to save it. Saved signatures (up to three) are stored in this device’s keychain, are not synced to iCloud or transferred to other devices, and can be deleted in the app at any time. Text you choose to save for filling in forms (up to twelve items, such as a name or address) is stored the same way: only in this device’s keychain, never synced, and deletable at any time. Watermarks, page numbers, headers and footers you add are written only into the new copy you create. PDF passwords you enter are used only to protect or unlock that file and are never stored. If you turn on app lock, Face ID, Touch ID or your device passcode is checked by iOS; the app never receives biometric data.
Photo details and permissions
The app inspects photo-detail categories locally so you can choose to remove or retain them. It does not transmit raw metadata. Photos permission is add-only and used only when you choose Save to Photos; Files access covers only files selected in Apple’s picker.
Purchases and changes
Private Export Lifetime is processed by Apple with StoreKit; we do not receive payment-card details. The app is general-audience and does not knowingly collect personal information from children. Policy changes will be posted here with a new effective date.