PDF Toolbox
Every tool in PDF Toolbox processes your documents entirely on your device. Nothing is uploaded. Nothing is tracked. Nothing leaves your hands.
PDF Toolbox uses Apple's native frameworks (PDFKit, CoreGraphics, Vision, and Metal). No third-party SDKs. No server calls for PDF work.
Your PDFs are read from local storage or iCloud Drive, processed on-device, and saved back to a location you choose. They are never copied to any external server.
When you unlock or protect a PDF, the password is held in memory only for the duration of the operation and discarded immediately after. It is never written to disk or transmitted.
Optical Character Recognition runs through Apple's on-device Vision framework. The text recognised from your documents is written directly into the output PDF and never sent anywhere.
Drawn, typed, or imported signatures are rendered locally. Saved signature images are stored in the device Keychain, not as plain files in app storage.
Redact PDF and viewer redact run on your device. Marked text is destroyed in the output file. No cloud redaction service is used.
Successful tool runs can be logged locally for the home screen shelf. Stored data is limited to tool name, file basenames, sizes, and date. No full paths. Clear it in Settings.
All 20+ tools perform their work on your iPhone, iPad, or Mac with no network dependency.
Viewer features (Annotate / Redact, Fill Forms, Presenter Mode) also run on your device with no uploads.
What PDF Toolbox does and does not access.
| Category | Collected | Detail |
|---|---|---|
| PDF files & content | Never | Processed on-device only |
| Passwords & credentials | Never | Held in memory, discarded after use |
| Usage analytics | Never | No analytics SDK of any kind |
| Device identifiers | Never | No fingerprinting or tracking |
| Location data | Never | No location permissions requested |
| Personal information | Never | No account, no sign-in, no profile |
| Network (PDF tools) | Not used | Merge, OCR, redact, repair, and all other PDF tools work offline |
| Network (optional features) | System only | StoreKit for optional Tip Jar; iCloud Drive when you enable it; connectivity checks for offline banners |
| Processing history | Local only | Tool name, file basenames, sizes, and date in SwiftData on your device. No paths. Clear in Settings |
| Saved signatures | Local only | Image bytes in the device Keychain; metadata in SwiftData |
| App settings | Local only | Appearance, language, save location, and similar preferences in SwiftData on your device |
| Temporary files | Local only | Stored in the app sandbox; clearable via "Clear Cache" |
| iCloud Documents | Local only | Synced by iOS/macOS if you enable iCloud Drive for the app |
During processing, PDF Toolbox may create intermediate files in your device's sandboxed cache directory. These files are accessible only to the app and are automatically excluded from iCloud and iTunes backups.
You can delete temporary files at any time using the Clear Cache button in the app. iOS and macOS may also reclaim this space automatically when storage is low.
PDF Toolbox does not integrate any third-party analytics, advertising, crash reporting, or tracking frameworks. The app is built exclusively with Apple's native technologies:
Apple's frameworks for reading, writing, and rendering PDF documents.
Apple's on-device machine learning framework for text recognition (OCR) and document detection.
Apple's GPU framework for hardware-accelerated image scaling and compression.
Optional iCloud Drive sync and Tip Jar purchases are handled by iOS and macOS. PDF Toolbox does not operate its own servers for these features.
Because PDF Toolbox collects no data from anyone, the app is safe for users of all ages, including children. No special provisions are required under COPPA or similar regulations, as there is simply no data collection to regulate.
PDF Toolbox does not create accounts, profiles, or databases of any kind. Since no personal data is collected, stored, or processed on our servers, there is no data to access, export, correct, or delete. You retain complete control of your files at all times.
If this policy is updated, the revised version will be published at this page with an updated effective date. The core commitment is unchanged: your PDF content is not uploaded to us, and we do not run analytics or telemetry.
Effective date: August 25, 2026
If you have questions about this privacy policy or PDF Toolbox, you can reach the developer on X: