Overview
PDF Grove is developed by John Youssef under the CompuJohnny developer name. The app has no account system, advertising, developer-operated analytics, or Internet permission.
Documents and local state
Files are opened through Android's system document picker or when you choose PDF Grove to open a PDF from another app. Outputs are saved through Android's system interfaces. PDF Grove can access only the items and destinations you select or explicitly hand to it. Originals are not overwritten.
Temporary working files are kept in app-private storage and may be removed from PDF Grove Settings, by Android, or when the app is uninstalled. To restore the current screen and workflow after Android recreates the app, PDF Grove keeps non-password session state in a separate app-private recovery file. This can include selected file references, tool options, a pending camera reference, reader state, and recent in-session output references. Passwords are excluded.
To provide the local library and reopen PDFs at the last page reached, PDF Grove stores the Android document URI, display name, page count, last page, and last-opened time in app-private preferences. Reader notes, bookmarks, highlights, page-style choices, Booklet Reading layouts, area-edit drafts, and the 30-page prepared-reading allowance are stored locally under a SHA-256 digest of that URI. No document content is stored in these preferences.
Google Play purchase
PDF Grove offers one optional permanent Pro purchase through Google Play. Google Play displays the localized price and handles payment details under Google's terms and privacy policy. PDF Grove does not access card or bank details and has no developer-operated purchase server.
The app receives the product and purchase status needed to unlock Pro, acknowledges completed purchases through Google Play, and stores only a local entitlement flag. Purchase tokens are not written to ordinary logs or app preferences. Google Play can be asked to restore ownership after reinstalling or clearing local app data.
ML Kit diagnostics
The bundled Latin-script text-recognition component runs on the device. Google states that ML Kit does not send OCR input or recognized-text output to its servers.
ML Kit does collect limited diagnostic and usage metrics: device and app information, a per-installation identifier not intended to identify a user or device, performance and API configuration, input and output sizes without content, feature events, and error codes. Google states that these metrics are encrypted in transit and are not transferred to third parties. Google processes them under its privacy policy.
Security
Document processing and temporary work files remain in Android app-private storage unless you choose an external destination or sharing action. Passwords are used only for the requested operation, are excluded from workflow-recovery files, and are not retained in ordinary preferences or logs. Android's app sandbox protects private app data. Google states that the limited ML Kit diagnostic metrics described above are encrypted in transit.
Camera, sharing, and printing
Camera capture is performed by the system camera app and does not require PDF Grove to hold camera permission.
Sharing and printing occur only when you choose those actions. Android then transfers the selected output to the app, print service, or destination you select. The receiving service's privacy practices apply after that transfer.
Retention and deletion
PDF Grove has no developer-held server copy of documents, account data, or purchase records. Clear local data removes the library, reading progress, marks, Booklet setup and allowance, page-specific choices, recovery state, and temporary cache. It does not reset appearance, reader-control settings, or Google Play purchase ownership.
Android's Clear storage action and uninstall remove local settings. Users control saved outputs in their chosen storage locations, and an eligible Pro purchase can be restored from Google Play.
Children, changes, and contact
PDF Grove is not directed to children. Google's handling and retention of ML Kit diagnostic metrics are governed by Google's privacy policy.
Material changes will be reflected in an updated policy and app release. For support or privacy questions, email support@compujohnny.com.