Privacy Policy

Papir is a PDF reader and toolkit made and distributed by Ihor Kostyniuk, an independent developer. The app is free; its source code is closed.

You can reach us through the support page — sign-in via Telegram, no email or password.

Everything you open in Papir is processed on the device itself: viewing, editing, signing, merging, compression, text recognition, background removal.

Documents are not uploaded to any server and are not stored anywhere but your device.

The one exception is if you enter the address and token of your own processing server in settings. Then the file you pick is sent to the address you chose. Both fields are empty by default and the feature does nothing.

• papir.kossflow.com — checking for updates and downloading a new version. This applies only to the build downloaded from the website. The Google Play version does not update itself at all: the store does it.

• papir.kossflow.com — downloading language files for text recognition, once per language and only if you use recognition.

• Google — the app uses ML Kit for handwriting and on-image text recognition. ML Kit downloads its own models and sends Google diagnostic information about its operation. This happens inside Google's library and is not under our control; what ML Kit collects is documented on Google's site.

• Your own server — only if you configured one, see above.

• No accounts, no registration.

• No ads and no ad networks.

• No behavioural analytics: the app does not count your taps and sends no usage reports.

• No access to contacts, calls, messages, location or the microphone.

• We do not sell or share data with third parties.

• Internet and network state — for what is listed above.

• Biometrics — only to unlock the app itself if you turned the lock on. Android checks the fingerprint; the app never sees or stores it.

• Package installation — only in the website build, to install a downloaded update. The Google Play version does not have this permission.

• The camera is listed but never requested: the system camera app takes the photo and Papir receives only the resulting file.

Papir Desktop works the same way: files stay on the computer.

It checks for updates at papir.kossflow.com and downloads the background-removal model from there once — the photo itself goes nowhere, everything is computed on your own processor.

If you connect a language model for working with document text, requests go to the address you entered yourself. The access key is kept in the Windows Credential Manager, not in a settings file.

The server keeps an access log so we can see whether the app is being downloaded. Visitor addresses and cookies are deliberately excluded from that log — that is a server setting, not a verbal promise.

There are no third-party trackers on the site.

Sign-in is via Telegram only. Telegram tells us your id and the name in your profile. Your phone number and contacts are not shared.

We store what you write yourself: subject, description, the conversation and any attachments. If you open a ticket from inside the app, the app version, Windows version and the text of the last error are filled in — you can clear any of these before sending.

🔴 Note: an error message often contains a file path, and therefore a document name and your system user name. Check the text before sending.

Tickets are kept for as long as they are needed to answer. Say in a ticket that you want your data removed and we will delete it along with the conversation and files.

The app is not directed at children and collects no age information.

If this policy changes, the date at the top of this page changes with it. Substantial changes will be named in the release notes.