Skip to main content

Privacy Policy

Last updated: 17 February 2026  •  MacPherson Ventures Pty Ltd trading as SortedPDF

SortedPDF ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

This policy applies to all information collected through our mobile application (iOS and Android) and any related services. If you have any questions or concerns, please contact us at privacy@sortedpdf.com.

This policy is compliant with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the General Data Protection Regulation (GDPR) where applicable, and the California Consumer Privacy Act (CCPA) where applicable.

1. Information We Collect

All personal information is stored on your device only, encrypted using AES-256 encryption. We do not operate a user account system and do not store personal profile data on our servers.

The information you choose to save within the app may include:

  • Profile data — up to 24 fields across categories such as: full name, date of birth, gender, nationality, email address, phone numbers, home and mailing addresses, employer name and address, job title, tax ID, health insurance ID, emergency contact details, bank account details (BSB/routing number, account number), and passport or driver's licence details.
  • PDF documents — images of PDF pages you import into the app for form filling, stored locally on your device.
  • Receipt data — images and extracted data from receipts you scan within the app, stored locally on your device.
  • App preferences — settings such as theme preference, onboarding completion status, and your chosen subscription tier.

We do not collect your name, email address, or any identifying information to create an account. The app functions entirely without registration.

2. How We Use Your Information

We use the information stored on your device solely to:

  • Provide the core form-filling functionality — matching your saved profile fields to detected form fields in imported PDFs.
  • Provide the receipt scanning functionality — extracting structured data from receipt images using AI.
  • Improve the accuracy of our AI field detection models using anonymised, aggregated, non-personal telemetry (see Section 3).
  • Remember your preferences so you have a consistent experience across sessions.

We do not use your information for marketing, advertising targeting, or any purpose not listed above.

3. Data Sent to Third Parties

In limited circumstances, data is transmitted outside your device. We take care to minimise what is shared and with whom.

Google Gemini API (AI field detection)

When you request AI field detection on a PDF page, a rasterised image of that page is sent via our secure backend proxy to the Google Gemini API. This image is used solely to identify form field locations and types. The image is not stored by us after processing, and we have no data-sharing agreement with Google that permits them to use your images for model training. Google's use of this data is governed by the Google Cloud Data Processing Addendum.

Firebase Analytics

We use Firebase Analytics to understand how the app is used in aggregate. Only anonymised usage events are collected — for example, "form fill completed" or "receipt scanned". No personally identifiable information (PII), no profile field values, and no document content is sent to Firebase.

Apple App Store / Google Play

Subscription purchases are processed directly by Apple (via the App Store) or Google (via Google Play). We receive confirmation of your subscription tier but do not receive your payment card details. Their respective privacy policies govern how they handle purchase data.

4. Data We Do NOT Collect

We want to be explicit about what we do not do:

  • We do not have access to the content of your filled PDF forms on our servers.
  • We do not sell, rent, or share your personal data with advertisers or data brokers.
  • We do not use your profile data, document images, or receipt data to train AI models.
  • We do not build advertising profiles or share data with social media platforms.
  • We do not require account creation or collect your email address for app functionality.

5. Data Security

We take the security of your data seriously and apply multiple layers of protection:

  • On-device encryption — all profile, PDF, and receipt data is stored in Hive encrypted boxes using AES-256 encryption. The encryption key is stored in your device's secure keychain (iOS Keychain / Android Keystore) via flutter_secure_storage.
  • Backend authentication — all requests from the app to our backend proxy are authenticated using HMAC-SHA256 signed tokens to prevent unauthorised access.
  • Server-side API keys — third-party API keys (e.g., Google Gemini) are held server-side only and are never shipped inside the app binary.
  • Rate limiting — our backend applies rate limiting to prevent abuse.
  • No data at rest on servers — we do not persist your personal profile data or document content on any server.

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Your Rights

You have full control over your data:

  • Delete all data — you can permanently delete all profile data, saved PDFs, and receipt data at any time via Settings > Clear Data within the app. This action is irreversible.
  • Export before deletion — before clearing your data, you can export your profile information and receipt data via the app's export feature.
  • Right of access — since all data is stored on your device, you have direct access to it at all times through the app.
  • Right to contact us — for any privacy-related concerns or requests (including GDPR/CCPA rights such as data portability or correction), contact us at privacy@sortedpdf.com. We will respond within 30 days.

7. Children's Privacy

SortedPDF is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with information, please contact us at privacy@sortedpdf.com and we will take steps to remove that information.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via an in-app notification before the changes take effect. The "Last updated" date at the top of this page will also be revised. We encourage you to review this policy periodically.

Your continued use of SortedPDF after any changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer:

  • Email: privacy@sortedpdf.com
  • Company: MacPherson Ventures Pty Ltd trading as SortedPDF
  • Jurisdiction: New South Wales, Australia

For complaints relating to the handling of your personal information under the Australian Privacy Act 1988, you may also contact the Office of the Australian Information Commissioner (OAIC).