Core Privacy Commitment: FlowKit operates entirely on your device. We do not operate external processing servers, we do not collect personal files, and your documents never leave your phone.
1. Introduction
Welcome to FlowKit: PDF, Image & Utility Tools ("we", "our", or "us"). We are committed to respecting and protecting your privacy. This Privacy Policy outlines our principles regarding user data, permissions, and device security.
2. Data Collection and Processing
FlowKit is designed with a strict zero-data-collection policy:
No Cloud Uploads: When you compress, merge, split, or edit PDF, Word, or image files, all operations are processed locally on your device's hardware.
No File Storage on Servers: We do not host remote servers to store, view, or analyze your files.
Temporary Processing Cache: Any temporary cache created during file operations (such as compressing a large document) is securely wiped and deleted from your device storage once the operation is completed.
3. Travel Vault (Kasa) Security
FlowKit includes a local "Travel Vault" feature to safeguard personal documents, notes, and sensitive files:
Hardware-Backed Encryption: Vault records and attachments are encrypted locally using AES-GCM with keys protected by the Android Keystore system.
PIN Protection: Your PIN is stored locally using salted PBKDF2 cryptographic hashing. It is never transmitted over the internet.
Screen Capture Protection: The vault implements operating system-level screen protection (FLAG_SECURE) to prevent unauthorized screenshots and screen recording.
4. Device Permissions
FlowKit requests only the minimum necessary permissions to function, used exclusively in offline mode:
Storage / Media Access: Required solely to allow you to select and save documents and images on your device.
Camera: Used exclusively for real-time document scanning (OCR) and QR code reading. Camera streams are processed locally and never recorded or uploaded.
Biometrics: Used strictly to authenticate access to your local Travel Vault using device fingerprint or face recognition via local Android biometric APIs.
5. In-App Purchases and Subscriptions
FlowKit offers optional PRO features (monthly, annual, and lifetime access):
All financial transactions are handled exclusively by Google Play In-App Billing.
We never collect, process, or store your credit card numbers, bank details, or billing address.
Subscription tokens and purchase receipts are managed directly through your Google account.
6. Third-Party Services and Analytics
FlowKit does not integrate advertising SDKs, third-party analytics trackers, or commercial profiling libraries. Your application usage remains completely private to you.
7. Children's Privacy
FlowKit does not collect any personal information from anyone, including children under the age of 13. The app provides utility tools that comply with Google Play Families and COPPA guidelines.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
9. Contact Us
If you have any questions or feedback regarding this Privacy Policy, please contact us at: