Privacy Policy

Last updated 2026-09-28

The short version: your documents never leave your iPhone. Sheaf processes every file on your device. We do not upload, store, read or share your documents, and we don't run servers that could receive them.

Who we are

Sheaf is published by Jalal-Samer-Abdel-Husein Al Madfai ("we", "us"), the data controller for the limited data described here. Contact: support@sheafpdf.app.

Your documents

Files you open, import, edit, convert, scan, sign or save are processed entirely on your device using Apple's built-in frameworks. That includes text recognition (OCR), redaction and conversion.
Imported files are kept in the app's private storage on your iPhone until you delete them in the app or delete the app.
We never receive a copy, and no one else can access them through us.
We do not use your documents to train anything, and we do not analyse their contents.
My details (for filling forms): if you choose to save your details, they are stored only on your iPhone, in its encrypted Keychain, and never leave it. You can erase them at any time in Settings → My details.

Advertising (free version)

The free version shows an optional rewarded video ad when you choose to save a file without paying. Ads are provided by Google AdMob (Google Ireland Limited / Google LLC).

What Google may process: device information (not your device's advertising identifier: Sheaf doesn't ask for tracking permission), IP address (used for approximate location), device and app information, and ad interactions. Google uses this to show, limit and measure ads and to prevent fraud.
Consent (EEA, UK, Switzerland and some US states):
Before any ad is requested, we show Google's consent message. You can accept, reject, or choose specific purposes.
If you don't consent to personalised ads, Google may still show limited, non-personalised ads based on legitimate interest or strict necessity, as described in Google's message.
Changing your choice: you can change or withdraw your ad consent at any time in Settings → Ad privacy choices inside the app. Withdrawing is as easy as giving consent.
No tracking: Sheaf doesn't track you across other companies' apps and websites. It doesn't ask for tracking permission, and ads can't use your device's advertising identifier. Ads are chosen within your consent choices above.
Your documents are never used for advertising.
Pro: subscribers never see ads, and no ad requests are made for them.
More information: how Google uses information from apps that use its services.

Purchases

Payments and subscriptions are processed by Apple through the App Store. We do not receive your name, email address or payment details. The app checks your purchase status with Apple on your device so it can unlock features.

Analytics and crash reports

We do not use third-party analytics. If you enabled "Share with App Developers" in your iPhone settings, Apple may share anonymous, aggregated crash and usage statistics with us.

Legal bases (GDPR)

Processing for personalised advertising is based on your consent (Art. 6(1)(a) GDPR).
Limited, non-personalised advertising and fraud prevention may rely on legitimate interests (Art. 6(1)(f)), as disclosed in Google's consent message. You can object in the same message.
Handling your purchases relies on performance of a contract (Art. 6(1)(b)).

International transfers

Google may process advertising data outside your country, including in the United States, under safeguards such as the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

How long data is kept

We keep no personal data on our side.
Files stay on your device until you delete them.
Google's retention of ad data is described in Google's privacy policy.

Your rights

If you are in the EEA, UK or a similar jurisdiction, you have the right to access, correct, delete, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time.

We hold no personal data about you ourselves, so for ad-related data the quickest route is:

Settings → Ad privacy choices in the app;
your iPhone's Settings → Privacy & Security;
Google's own privacy tools.

You can also contact us at support@sheafpdf.app. You have the right to complain to your data protection authority; in Romania that is the ANSPDCP (dataprotection.ro).

Children

Sheaf is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect their personal data.

Changes

If this policy changes, we'll update this page and the date above. Material changes will be shown in the app.