ConvertAir · mobile application
Privacy policy
ConvertAir processes your documents on your device. This page describes what the application actually does, what it does not do, the purchase data it sends and its limited use of Google Play services.
Data controller
The data controller is BB16 Studio, publisher of ConvertAir. For any question or request concerning your data, write to bb16studio@gmail.com. This policy covers the Android version of ConvertAir announced for Google Play. The application is not yet available there.
Your documents remain on your device
Scanning, conversions, assembly, compression, annotation, signing and optical character recognition (OCR) run on your phone. During this local document processing, no document, image or recognised text is transmitted to BB16 Studio or any third party.
Text recognition uses models embedded in the application: it takes place on the device, and ConvertAir sends no image to a server for this purpose. Document capture is delegated to the Google Play services installed on your phone; ConvertAir itself transmits no document, but this processing occurs in a Google component governed by Google's privacy policy, not ours.
Sharing, saving and printing
A file leaves ConvertAir only when you decide: by sharing through the Android share sheet, saving it to the location you choose, or printing it. It then goes to the application, folder or printing service you selected, which processes it according to its own rules. BB16 Studio receives no copy.
The only network connection opened by the application: purchases
ConvertAir directly opens a network connection only for purchases. At every launch, if the device is connected, and again when the application returns to the foreground, ConvertAir checks the status of your Premium access with RevenueCat, even if you have not bought anything. Displaying offers, purchasing and restoring a purchase use the same channel. Payment is processed by Google Play. Purchase and Premium-access verification is entrusted to RevenueCat, a provider acting on behalf of and under the instructions of BB16 Studio (a processor within the meaning of the GDPR). No document content travels through this channel.
In each of these exchanges, RevenueCat receives:
- a random user identifier, created by the RevenueCat SDK on first launch;
- technical information attached to each request: the platform and Android version, the device model and brand, the device language or languages, the country of your Google Play account, the application identifier, and the versions of the application and SDK;
- the IP address of your connection, which every contacted server receives and from which an approximate country can be inferred.
During a purchase or restoration, RevenueCat also receives the Google Play purchase token (receipt), the product purchased, its price and currency, and the transaction dates. It uses them to determine the status of your Premium access (active or expired).
This identifier contains neither your name nor your email address, but it is not anonymous: it is associated with your Google Play purchases, which are themselves linked to your Google account, and restoring a purchase may link it to the identifiers of your other installations. It is pseudonymous data. No account is created, automatic collection of device identifiers (advertising identifier, Android identifier) is disabled, and SDK diagnostics are disabled.
As with any purchase on the Play Store, Google Play receives your Google account, the product and your payment information. Google processes this data as a separate controller, under its own privacy policy. In its console, Google Play provides BB16 Studio with the order information needed to manage sales, including the order number, product, price and country of purchase. BB16 Studio never sees your bank details.
Purpose and legal basis
Exchanges with RevenueCat are used to manage your purchases and Premium entitlements:
- verifying your Premium access at every connected launch and every return to the foreground, for every installation, including if you have bought nothing: this processing is necessary for the performance of the contract governing use of the application (Article 6(1)(b) GDPR);
- processing a purchase or restoration: this processing is necessary for the performance of the purchase contract (Article 6(1)(b) GDPR).
Purchase data is also used for sales and subscription statistics in RevenueCat. It is not used for advertising, advertising profiling or advertising tracking. If you write to us, your message and email address are used to reply to you, based on our legitimate interest in doing so, or on our legal obligations when you exercise your rights.
Transfer outside the European Union
RevenueCat, Inc. is established in the United States, where the purchase data described above is processed. This transfer is governed by the European Commission's Standard Contractual Clauses, incorporated into RevenueCat's data processing agreement. You can request a copy from bb16studio@gmail.com.
Retention period
Purchase data is retained by RevenueCat for as long as it is used to manage and restore your purchase, and deleted if you request this (see ‘Your rights’). If you have never made a purchase, the check at every launch creates, at RevenueCat and on behalf of BB16 Studio, a pseudonymous record limited to the identifier and technical information described above; it is retained while the application remains installed and continues to contact the service, and is deleted on request (see ‘Your rights’). Google Play retains its own order data under its policy. Data stored on your device remains there until you delete it or uninstall the application.
What the application does not do
- No account, registration or email address requested.
- RevenueCat processes the purchase data described above, including for sales statistics. No SDK for tracking document usage or reporting crashes is added; diagnostic components from the ML Kit libraries are removed.
- No advertising identifier: the
com.google.android.gms.permission.AD_IDpermission is not declared. - No advertising, sale of data or sharing for commercial purposes.
- No tracking from one application to another or from one website to another.
Android crash reports
If you have agreed in your device settings to share usage and diagnostic data with Google, Android may send crash and performance reports to Google. Google Play makes them available to BB16 Studio in its console (Android Vitals), as aggregated statistics and technical reports: device model, Android version and error trace. This mechanism belongs to the system, not ConvertAir. These reports contain neither your documents, your name nor your email address, and you can disable them in the device settings.
Reviews in Google Play
From the third successful result actually displayed, ConvertAir may ask the Google Play services installed on the device to offer the official integrated rating interface. The request is never made at startup, during processing, after an error or after a partially successful batch. At least 60 days separate two attempts; if the service is unavailable or fails, the application remains silent. Google Play may decide to display nothing. ConvertAir receives neither a rating nor a comment and does not know whether the interface was shown. No document, image, recognised text or entered content is transmitted by this call.
The ‘Rate the application’ button in Settings opens the Store listing through a separate manual action; it uses neither the success counter nor the 60-day delay.
Android permissions
The manifest of the Android build prepared for Google Play declares exactly three entries:
android.permission.INTERNET— purchases, and nothing else;com.android.vending.BILLING— Google Play billing;- an internal signature permission for the application, which grants no device capability.
No camera, location, contacts, microphone or broad storage permission is requested. Files you open are accessed through the system file picker or an incoming share: the application receives temporary access to them, long enough to make a local copy.
Backup and device transfer
Android automatic backup is disabled, and the extraction rules explicitly exclude cloud backup and device-to-device transfer. The application's data is therefore neither uploaded to Google Drive storage nor copied to a new phone through these channels.
The Android purchasing SDK may ask Google Block Store to back up the pseudonymous identifier associated with purchases, to make restoring them easier. This channel is separate from the application file backup disabled above; it does not carry your documents.
What is retained on your device
The files you produce, a local operation history, your display preferences and your saved signatures are kept in the application's private space. Signature images are encrypted on the device. The history can be cleared automatically after 30 days or 90 days, or retained, depending on the setting you choose on the Settings screen.
To work offline, the application also keeps the state of your purchases there: the last known state of your Premium access and the day's free-operation counter, both encrypted; the latest offers displayed with their prices; and the data cached by the RevenueCat SDK, including its identifier. None of this contains your documents.
Uninstalling ConvertAir deletes this private space, including any files you produced but did not share or save elsewhere. Copies saved outside the application remain in the chosen location.
Additional fonts, downloaded by Google Play
To produce a searchable PDF in Chinese, Japanese, Korean or a Devanagari script, ConvertAir needs additional fonts. They are downloaded only if you request them, from the Settings screen or text-recognition options. Google Play handles the download (Play Asset Delivery), like an application update: ConvertAir opens no connection for this purpose and transmits no document. Google Play, which receives this request, applies its own privacy policy.
Children
ConvertAir is not specifically directed at children and does not knowingly collect any data concerning them.
Your rights
Your documents, history and signatures are found only on your device: you view, export and delete them yourself, in the application or by uninstalling it. BB16 Studio holds no copy.
For data that RevenueCat processes on behalf of BB16 Studio, you may request access, rectification, erasure, restriction or portability, and object to processing when it is based on our legitimate interest. Write to bb16studio@gmail.com. If you made a purchase, provide your Google Play order number: it begins with ‘GPA.’ and appears in the receipt email sent by Google Play. If you never made a purchase, provide the approximate date and your device model: since the application asks for no identity, these details and RevenueCat's own identifier are sufficient to find your record, without an order number. The GDPR gives us one month to answer you.
Deleting this data does not cancel your purchase: Google Play retains it, and a restoration finds it again. As long as the application remains installed, every connected launch sends its identifier and the technical information described above to RevenueCat again. A subscription is managed and cancelled in Google Play.
If you believe your rights have not been respected, you may lodge a complaint with a data protection authority, in France the CNIL.
Changes
If the application's behaviour changes, this page is updated accordingly and the date above changes.