Poleta privacy policy

Last updated: 10 November 2026

This policy covers the Poleta app for Android, iPhone and iPad (formerly Pagiro; renamed in version 1.8, with no change to how it handles your data). Publisher: TDH SOFTWARE CO.,LTD, 27 Street 447A, Quarter 33, Tang Nhon Phu Ward, Ho Chi Minh City 70000, Viet Nam. Contact: contact@tdhsoft.com.

1. Your documents stay on your device
2. Camera and text recognition
3. Diagnostics log, crash reports and messages you send us
4. Files you open
5. Scheduled backup
6. Purchases
7. AI features
8. No ads, no analytics
9. Permissions and why
10. Children and teens
11. Deleting your data
12. Your rights, legal bases and transfers
13. Changes
14. Contact

1. Your documents stay on your device

Poleta reads, edits, scans and recognizes text, and makes and reads QR codes, on your device. Your documents and pictures are not sent to TDH Software or to any server of ours. If you link a Dropbox or OneDrive account, the files you choose go directly between your phone and that service, never through us (Cloud accounts, section 4). Four things can be sent to us, and only when you choose them: the text you send to an AI feature, with the few search words for free photos in Create with AI (section 7); the invitation code you redeem (section 6); the message you send with Send in the feedback sheet or the contact form (section 3); and a crash report, when you say Send after the app closed unexpectedly (section 3). Downloading a template asks our template store only for that template (Template downloads below). When a document, the font list of an editor or Create with AI needs Garamond, Arial Narrow or Consolas, the app downloads only an open font from the same store (Font downloads below). Spell checking uses your phone’s own spell checker; words you add to your personal dictionary are kept on your device and in backups you make.

Template downloads

Some templates of the template library are not inside the app. When you open the library, look at such a template, use it, or tap “Download popular templates for offline use” in Settings > Storage, the app downloads from our template store (assets.poleta.app, on Cloudflare R2): the list of templates, their preview pictures, the files of the templates you use, and the photos of a template that has photos (photos we checked and chose for it, downloaded when you use that template, also for templates inside the app). Each request is a plain download of a file named by the template’s ID and version, or for a photo by its checksum. Nothing else is sent: no search words (search works on the list already on your phone; a template’s photos are chosen ahead, never searched for), no install ID, no account, no cookie, and nothing about you or your documents. As with any download, the server sees your phone’s internet address; we do not use it to identify you. Nothing is downloaded by itself or while the app lock is shown. Downloaded templates are kept in the app’s cache on your phone; you can clear them in Settings > Storage > Manage > Downloaded templates. Files you make from a template are new documents of your own and stay on your phone.

Font downloads

A few common fonts (Garamond, Arial Narrow and Consolas) are not inside the app. When a document you open, the font list of an editor or Create with AI needs one of them, the app downloads an open-licence look-alike of it (EB Garamond, Archivo Narrow or Inconsolata, under the SIL Open Font License) from the same store (assets.poleta.app). Each request is a plain download of a file named by its checksum; when one fails, the app tries again up to three times while it runs. Nothing else is sent: not the document, its name or its words, no install ID, no account, no cookie. As with any download, the server sees your phone’s internet address; we do not use it to identify you. Nothing is downloaded while the app lock is shown or a Vault document is open. Without a connection the document shows with a font already in the app. The downloaded fonts are kept in the app’s cache on your phone.

Spell check while you edit (you can turn it off in Settings > Open & edit documents) uses the spell checker built into your phone, the spell checker service chosen in the phone’s settings. The words you are editing are given to that checker on your device; Poleta sends them nowhere and keeps nothing of them, with one exception you choose: words you add to your personal dictionary (with “Add to dictionary”, or in Settings > Open & edit documents > Personal dictionary) are kept in a file on your device and in backups you make, and are never sent anywhere. Words you choose to ignore are remembered only until the app is closed.

When you fill in a PDF form, the names and initials you type can be offered again as suggestions in the next form. They are kept only on your device, are filled in only when you tap one, and are never sent to us or to anyone else. You can turn this off, and clear what was kept, in Settings > Open & edit documents.

Cut out subject in a PDF’s picture (version 2.0.1 and later, Pro) finds the person or object on your device with Google ML Kit, whose cut-out model Google Play services downloads the first time you use it. The picture is not sent to us or to anyone else. On iPhone and iPad, Cut out subject uses Apple’s Vision on your device instead; nothing is downloaded or sent. As with text recognition (section 2), ML Kit may send anonymous usage statistics to Google (Google Data Transport); they do not contain your pictures or text.

2. Camera and text recognition

The camera permission is used only when you scan a document, take a picture to recognize text, take a photo to put on a PDF page, or photograph your signature on paper. Pictures are processed on your device. For a signature from a photo, only the ink is kept, on your device; the photo itself is not kept. Text recognition uses Google ML Kit, a library that runs on the device; Poleta does not send your pictures to us or to anyone else. ML Kit may send anonymous usage statistics to Google (Google Data Transport); they do not contain your pictures or text. You can use the app without allowing the camera and scan pictures you already have.

3. Diagnostics log (stays on your device), crash reports and messages you send us

If you keep the diagnostics log switched on, crashes and problems are written to a file on your device so that you can report a bug. It is kept on your phone for at most 3 days: older entries are deleted automatically. It is not sent anywhere by itself. When you choose “Send feedback”, you see exactly what is included, decide whether to attach the diagnostics, and send it yourself: with Send (below) or through your own e-mail app. You can switch the log off (nothing more is recorded) or delete it at once with “Clear log” in Settings.

Crash reports (version 1.8 and later). If the app closed unexpectedly (it crashed, froze or was ended by the system for lack of memory), the next time you open it a card on Home asks whether to send a crash report, with Send and Don’t send, and an Always send box; What is sent on the card shows the exact text. Nothing is sent without your OK. A report holds: how the app ended, the technical description of the last error and the lines of program code it happened in (with file paths, file names, quoted text and any word that is not a common technical word taken out, so no document content or name is in it), the app version and build, the system version, the device model, the language setting, and a random number made for that one report. It holds no installation ID, account, advertising ID or IP address. It goes to our own server (TDH Software’s service on Cloudflare), is not shared with anyone and not used for advertising; we use it only to find and fix problems, and it is deleted after 90 days. To limit abuse the server counts reports per keyed hash of your IP address and of the installation ID; those counters are deleted after about a day and are not stored with the report. You can turn crash reports off, or turn Send without asking on or off, at any time in Settings > Help & about > Diagnostics; turning them off also deletes a report that is waiting. Because a report holds nothing that identifies you, we cannot find one person’s report to delete it; reports go by themselves after 90 days.

Messages you send us. Send in the app’s feedback sheet (version 1.8 and later) and the contact form on this website send your message to our server, which passes it on by e-mail to contact@tdhsoft.com. Only what you see before sending is sent: the topic, your message, the e-mail address and the name you give (both optional; the app asks only for the address) and, from the app, the report shown in its preview (with the diagnostics if you leave them ticked, never document content or names). We collect it only to answer you and to fix problems; it is not shared with anyone and not used for advertising. Our server keeps no copy: it sends the e-mail and records only daily counts and error codes, never your text, name or address. To limit abuse it counts messages per keyed hash of your IP address (and, from the app, of the installation ID); those counters are deleted after about a day. The e-mail stays in our mailbox as long as we need it to help you; ask us at contact@tdhsoft.com to delete it. The website form uses Cloudflare Turnstile against spam bots: when the page loads, Cloudflare checks signals from your browser (see the Turnstile privacy addendum); the app does not use it. If the app cannot send the message (offline, for example), your own e-mail app opens with the same text instead.

4. Files you open: the system file picker, other apps and documents on this phone

When you open a file with the system file picker, Android shows the storage apps installed on your phone (for example a cloud storage app, a USB drive or an SD card); on iPhone and iPad, the Files picker shows the locations set up in Files (for example iCloud Drive, On My iPhone or a storage app). The provider app handles the connection and your sign-in. Poleta receives only the file you choose, and, if you allow it, remembers the permission to save back to that same file. The same holds when you send a file to Poleta from another app. Poleta does not receive your provider password and sends nothing about the file to us. The app that stores the file applies its own privacy policy to what it stores and syncs.

Cloud accounts: Dropbox and OneDrive (Poleta Pro, version 2.0.1 and later)

With Poleta Pro you can link your own Dropbox or OneDrive account in Settings > Storage & backup > Cloud accounts (OneDrive: personal Microsoft accounts). Nothing is linked and nothing is sent to these services unless you do this.

• Sign-in: you sign in on Dropbox’s or Microsoft’s own page, in your phone’s browser (a Custom Tab on Android, Apple’s secure sign-in sheet on iPhone and iPad); Poleta never sees your password. The service asks you to let Poleta see and edit the files in your account (Dropbox: your whole Dropbox; OneDrive: your files and the files shared with you) and read your name and e-mail address, which the app shows on the account card, with your storage use.
• What goes where: Poleta lists the folders you open, searches file names when you search, shows small previews of pictures, and downloads, uploads, renames, makes folders or moves to the service’s trash only what you choose (and, if you set scheduled backup to a cloud folder, the backup files, section 5). All of this goes directly between your phone and that service (Dropbox: dropbox.com and dropboxapi.com; Microsoft: login.microsoftonline.com, graph.microsoft.com and the download and upload addresses Microsoft gives). File names, file content, your account name, e-mail address and storage use never go to TDH Software or any server of ours, are not shared with anyone else, and are not part of crash reports.
• What is kept on your phone: the sign-in (the service’s refresh token) only in the phone’s secure storage (Android Keystore, or the Keychain on iPhone and iPad, this device only), never in backups; the short-lived access token only in memory; the account’s name and e-mail address; a copy of each file you open, in your library like any other document; and edits you saved while offline, until they are uploaded.
• Saving: when you save a file you opened from the cloud, Poleta uploads your version to the same file. If the file changed in the service since you opened it, Poleta asks you before anything is replaced. Poleta deletes nothing by itself, except older backup files of scheduled backup beyond the number you chose to keep, which go to the service’s trash; a file you delete in the app also goes to the service’s trash.
• Ending access: Sign out on the account card removes the sign-in and the account from your phone (for Dropbox it also ends the sign-in at Dropbox). You can also remove Poleta’s access in the service: Dropbox Settings > Connected apps; Microsoft account.live.com/consent/Manage. Dropbox’s and Microsoft’s own privacy policies apply to what they store.
• Who is responsible: TDH Software, as the developer of Poleta, is responsible for the privacy, security and integrity of the data from your Dropbox or OneDrive account that Poleta handles, including the sign-in and the files kept on your phone. Dropbox and Microsoft only provide the account and the access to it.

Documents on this phone (All files access, Android 11 and later)

Library > On this device can list the documents, pictures and other files already on your phone that Poleta can open, for example a file you just received in Download, in Documents or in a chat app, so you can open it without the file picker and find it with Search. This needs Android’s “All files access” permission. Poleta asks for it only when you open On this device or search and find nothing in your library, never at start; it first explains what it does, and Android’s own settings page is where you turn it on or off (Manage access in On this device takes you there). Everything else in Poleta works without it.

What is read: the names, sizes, dates and folders of the files Poleta can open in shared storage: documents (PDF, DOCX, XLSX, PPTX, ODF, text…), books, pictures, archives, e-mail files and similar (for example in Download, Documents, your photos and the folders of chat apps). Hidden folders and other apps’ private data (Android/data and Android/obb) are not looked through, and files Poleta cannot open (music, videos, apps) are not listed. The content of a file is read only when you open it.

What is kept: the list of names lives only on your phone, inside Poleta’s own storage, so the section opens quickly. When you open a document, Poleta keeps a copy in your library, as with the file picker. When you turn the permission off, Poleta deletes the list as soon as it is opened again.

What is changed: nothing, unless you edit a file you opened from this list and choose to save it; then Poleta writes your changes back to that file, after asking you the first time (the earlier version is kept in Previous versions). Poleta never deletes, moves or renames files on your phone by itself.

What is sent: nothing. File names, folders and documents never leave your phone.

5. Scheduled backup (Poleta Pro)

Scheduled backups go only to a folder you pick: on your phone or, with a linked cloud account, in your Dropbox or OneDrive (directly, never through us; section 4). A new backup setup is encrypted with a passphrase that only you know (you can turn this off; a setup made by an earlier version keeps its choice); documents in the Vault are never included. We do not receive your backups.

6. Purchases (Poleta Pro)

On Android, purchases are handled by Google Play Billing. We do not receive your card details, name or e-mail. The app only asks Google Play whether your Google Play account has bought Poleta Pro, and keeps a small signed record on your device so Pro works offline. This is not sent to us, except when you use AI: then our AI service checks your purchase with Google Play to find your AI credits (section 7). A monthly or yearly plan renews until you cancel it in the subscription settings of Google Play.

On iPhone and iPad, purchases are handled by the Apple App Store. We do not receive your card details, name or e-mail. The app asks the App Store whether your Apple account has bought Poleta Pro and keeps the store’s signed record on your device. This is not sent to us, except when you use AI: then the app sends the signed App Store transaction of your Pro plan or credit pack to our AI service, which checks it with Apple to find your AI credits (section 7). If Apple refunds a purchase, Apple tells our AI service (App Store Server Notifications) so the credits can be taken back. A monthly or yearly plan renews until you cancel it in your Apple account’s subscription settings.

Free-trial reminder. When a free trial starts, the app keeps its end date and the store’s price on your device and reminds you about 2 days before it ends: with a notification, if you allow notifications, and with a card on Home. The reminder is made and scheduled on your device only; nothing about it is sent to us or anyone else. The app removes it when the trial has ended or the plan has ended, and stops it when you cancel the plan on Google Play or in your Apple account; it learns about a refund, an ended plan or a cancellation the next time you open the app, so a reminder already scheduled may still appear if you have not opened the app since.

Invitation codes (Android). When you tap Redeem in Settings > Redeem a code, the app sends the code, its random installation ID and a Google Play Integrity check to our AI service. We do not store the code itself; we use its hash to find the invitation campaign it belongs to. We keep: the campaign, a one-way hash of the installation ID, the date the code was redeemed and the end date of the pass, the AI credits it gave, and, if the same installation later uses AI with a Pro purchase, that it did (so we can count, per campaign, how many passes became purchases). Your IP address is used only as a hash, to limit how many codes one network can try or redeem in a day. Redeeming a code therefore links an invitation campaign to an installation ID. It is not linked to your name or any account, not shared and not sold. The signed pass is kept on your device so Pro works offline; it is not included in backups.

7. AI features (on Android, iPhone and iPad, with Poleta Pro, credit packs or, on Android, an invitation pass)

The AI features (Summarize, Ask, Create with AI and the AI actions in the editors) are the only part of Poleta that sends text from your documents off your phone, and only when you use them. Nothing is sent until you tap Allow on the screen that explains this. It appears when you start your first AI action, and Allow then runs that action; after that, text is sent only when you start an AI action. You can turn it off at any time in Settings > Security > AI > Send text to AI.

What is sent: the text you chose (the open document, or the part you picked) and what you typed (a question, or the description of a document to create). With the AI actions in the editors (make a text shorter, fix its spelling, change its tone, explain it, write or explain a formula), the text you selected and your instruction; in a spreadsheet, also the sheet’s name, its first rows and the selected cell. Nothing is written into your file until you tap Accept. With Create with AI, also the passages it needs from the documents you attach, and their file names. Attached documents and photos are read on your phone, and only those text passages are sent. If you use a brand kit (Settings > Brand kit, with “Use my brand” on), your business name and brand colors are sent with a Create with AI request; your logo, tagline, contact details and address are never sent and are added to the document on your phone. When you ask AI to change one part of a document it made (a chart, a slide, a page), only that part and a short outline of its page are sent: the page title, the kinds and places of the other parts on it (never their text), its line of the document’s outline and the titles of the pages next to it. Never the files themselves, and never your other documents. With each request the app also sends a random install ID made by the app, a Google Play Integrity verdict (Google tells our server that the request comes from a genuine copy of Poleta on a genuine device), and your Pro or credit-pack purchase token, which our server checks with Google Play to find your credits (with an invitation pass, the signed pass instead). Without Pro, the request carries no purchase; your credit packs are then found by the install ID and the wallet key below. On iPhone and iPad, instead of the Google Play Integrity verdict and purchase token, the app sends an App Attest proof (Apple confirms that the request comes from a genuine copy of Poleta on a genuine device; the key stays on your device) and, with Pro or a credit pack, the signed App Store transaction, which our server checks with Apple.

Free photos in Create with AI: when a document is made with free photos (the default choice), the app asks our AI service for photos with the few search words the AI wrote for each picture from your request (for example “harbor boats at sunset”), never your document’s text; the AI is told to use general words, never a person’s name or other personal details. Our service shares those search words with the photo services Pixabay, Pexels, Openverse and Unsplash, which answer under their own privacy policies; they are not linked to you or your device by us. We keep the answers for 24 hours; the words are not written to our logs or database. This happens only when free photos are chosen; with “My photos” or “No pictures” nothing is sent to the photo services. The chosen photo file is then downloaded by the app from that photo service, which sees your phone’s internet address, as with any download. The photo and its credit stay in your document.

Wallet key: so that your credits are found again after a reinstall, on a new phone or with a new purchase, the app makes a random key (not linked to your name, e-mail or device) and gives it to Google Play with each purchase. Our server receives it in Google’s answer and, when you use credit packs without Pro, from the app itself, and keeps only a keyed hash of it; it is never logged. On Android the key is also kept in Google Block Store, which backs it up, end-to-end encrypted, to your Google account when your phone supports it. On iPhone and iPad the key is kept in your iCloud Keychain, which Apple syncs end-to-end encrypted to your other Apple devices when iCloud Keychain is on; the key is also given to the App Store with each purchase. If you use Restore credits (Android), the Google Play order number you type is checked with Google Play and kept only as a keyed hash; the credits of that earlier purchase move to you after 7 days, and only if nobody used them in the last 30 days or during those 7 days.

Who processes it: our AI service at ai.poleta.app (ai.pagiro.app in versions before 1.8), run by TDH Software on Cloudflare (Cloudflare, Inc.), passes the text to Anthropic (Anthropic, PBC, United States), whose model writes the answer. Both act as our service providers; the text is processed in the United States. We use no provider that trains on the text. If we change the provider, we will update this page and the screen in the app first.

How long it is kept: our service keeps the text only while the answer is written. A job is kept for at most 15 minutes, so that a dropped connection can resume, and is then deleted. Document text, questions and answers are never written to our database or our logs. It is not stored by us and not used for training. Anthropic does not use it to train its models and deletes inputs and outputs within 30 days. Two exceptions apply on Anthropic’s side: content that its safety systems flag as possibly breaking its usage policy may be kept longer (up to two years for the content, and up to seven years for the safety scores), so that it can be reviewed and abuse can be stopped; and content may be kept longer where the law requires it. We cannot see or switch off these safety reviews. Anthropic has not agreed to delete the text at once (“zero data retention”); if that changes, we will update this page. Summaries, answers and created documents are kept only on your phone: Settings > Security > AI > Clear all AI results deletes the summaries and answers, and a created document is deleted like any other file.

What our server keeps: no names, e-mail addresses or document content. For credits: a keyed hash of your purchase (the wallet ID), the plan, the credit balance and the use per action each month. For each AI run, numbers only (the action, its size band, the credits, the tokens, the time and the result), for 30 days. Integrity verdicts and the results of purchase checks, for up to 30 days. A record per install of the 2 free Create with AI tries. IP addresses are used only as a hash, to limit abuse. Your usage history (date, action, credits and document name) stays on your phone. So does Your creations, the list of what you asked Create with AI to make (your request as you wrote it, the choices, the file name and the date), so that you can make another like it: it is never sent to us, it is part of your Pro backups (a restore adds the items the phone does not have and never removes any), and you can remove items one by one or clear it in Settings > Security > AI > Clear your creations (your files stay). The first version of a file AI made is kept on your phone with the file’s previous versions, for Back to the original, until you delete the file.

Reporting a result: every AI result has Report this result in its ⋮ menu, for a result that is offensive, harmful or wrong. A report sends only the action (for example Summarize), its job ID, the reason you pick and the app version; it never contains any text, neither the result nor your document. Reports are deleted after 90 days. If you want us to see the result itself, choose Send the result by email instead: your own email app opens a message to contact@tdhsoft.com with the AI result and its job ID filled in, and you decide whether to send it (your document is never added). We read reports to fix the AI’s instructions or to raise a problem with the provider; they are not used for anything else.

Delete my AI data: Settings > Security > AI > Delete my AI data deletes, at once and after you confirm, your wallet on our server: the credit balance and plan record, the use per action, the records of your AI runs, your reports of AI results and the links between your installs and the wallet. Unused pack credits (including the credits included with a lifetime purchase) are lost and cannot be restored; your plan’s monthly credits come back with your plan the next time you use AI. We keep only what refunds and the law need: the record of each credit pack bought, and of the credits included with a lifetime purchase (a keyed hash of its purchase token, the product, the credits and whether it was refunded), so that a store refund can be matched and a pack or the included credits are never added twice; the keyed hash that links your store purchase to the wallet ID; the records of credits moved by Restore credits, so that a later refund is taken from the right wallet; the per-install count of the free Create with AI tries; and, until the current monthly period ends, the number of credits already used in it, so that deleting does not refill the month; and, if a refunded credit pack had left your balance below zero, that negative balance, which comes back when the wallet is opened again with the same purchase, install or wallet key (deleting does not cancel a refund debt). None of these holds a name, e-mail address or document content. Text sent to AI is not part of this: it is never in our database, and Anthropic deletes it as described above.

Purposes and legal basis: giving you the AI result you asked for, counting your credits, and preventing fraud and abuse. The legal basis is the performance of the service you request and our legitimate interest in preventing abuse. The text is not used for advertising or profiling, and it is not sold or shared.

8. No ads, no analytics

Poleta has no advertising, no analytics and no tracking across apps or websites. The app sends no usage statistics to us or to any analytics service. We do not sell data, and the only data we share is the photo search words of Create with AI (see “Free photos in Create with AI” in section 7). Google ML Kit, which the app uses for text recognition, may send its own anonymous statistics to Google (section 2).

9. Permissions and why

Poleta does not ask for location, contacts or the microphone. On Android, the Speak button of Create with AI opens your phone’s own speech recognition screen: that app listens (it may send the audio to its provider, under its own privacy policy) and gives Poleta only the words, which go into the description field; Poleta records and keeps no audio. Without “All files access” you choose each file through the system file picker.

10. Children and teens

Poleta is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Poleta has no accounts: we collect no names, e-mail addresses or other account data from anyone, of any age, except a name or address you choose to give us when you write to us (section 3). We follow the US Children’s Online Privacy Protection Act (COPPA): Poleta shows no ads, and nothing it collects is used for advertising or profiling.

AI features: Summarize, Ask, Create with AI and the AI actions in the editors are for users aged 13 and over (16 and over in the European Economic Area, the United Kingdom and Switzerland). The first time you use them, the app asks you to confirm your age; it keeps only that you confirmed and the age asked, on your phone, never a birth date. If you are younger, the AI features stay off and the rest of the app works as before. AI results are written by an AI model, not a person, and may contain mistakes: check them before you rely on them. Because we do not know a user’s age, our AI service gives the model the same safety rules with every request, for everyone: no sexual content, no instructions for self-harm or dangerous activities, and a respectful tone.

Parents and guardians: if you think your child under 13 (or under 16 where that age applies to the AI features) has used Poleta, or you have a question about your child’s data, write to contact@tdhsoft.com. Everything Poleta keeps on the phone is deleted by uninstalling the app; AI data on our server is deleted with Settings > Security > AI > Delete my AI data, or we help you by e-mail.

11. Deleting your data

Uninstalling the app, or clearing the app’s data in your system settings, deletes everything Poleta keeps on your device (library, settings, diagnostics log, personal dictionary, your creations, the list of documents on this phone, the cloud accounts you linked). Your original files, and files in the storage apps or the cloud accounts you opened them from, are not deleted by this. We hold no copy of your documents: text sent to an AI feature is deleted within 15 minutes, and our AI service keeps only the numbers and hashes listed in section 7 (run records for 30 days; the credit balance while it is in use). Crash reports on our server hold nothing that identifies you and are deleted after 90 days (section 3). Only the random AI wallet key stays in Google Block Store or iCloud Keychain (section 7), so a reinstall finds your credits; it holds nothing else. To delete your AI data on our server, use Delete my AI data in the app, or write to contact@tdhsoft.com.

12. Your rights, legal bases and transfers

TDH Software decides how the data described here is used (it is the “controller”). Wherever you live, and in particular under the EU General Data Protection Regulation (GDPR) and the UK GDPR, you can ask us: for access to the data we hold about you and a copy of it; to correct it; to delete it; to restrict its use; to object to a use based on our legitimate interest; and to receive the data you gave us in a common machine-readable format (portability). Where a use is based on your consent, you can withdraw it at any time, without affecting what was done before; the switches named in this policy do this in the app. Write to contact@tdhsoft.com; we answer within one month. Because Poleta has no accounts and we keep no names, we may need something that lets us find your data, such as a Google Play or App Store order number; we never ask for more than that.

We have no representative in the European Union or the United Kingdom. People there can write to us directly at contact@tdhsoft.com.

Complaints: you also have the right to complain to a data protection supervisory authority, in particular in the EU or EEA country where you live or work or where you think the problem happened, or in the United Kingdom to the Information Commissioner (ICO). We would be glad to try to solve it with you first.

Legal bases:

• the AI features, the free photos of Create with AI, checking your purchase for AI credits, invitation codes, and template and font downloads: performing the service you ask for;
• crash reports and messages you send us: your consent (Send or Always send on a crash report, Send on a message), which you can withdraw as described in section 3;
• limits against abuse and fraud (the Play Integrity check or App Attest, the keyed hashes of your IP address and installation ID, and the counters of runs, messages, reports and codes): our legitimate interest in keeping the service safe and working for everyone;
• the purchase and refund records kept after Delete my AI data (section 7): our legal obligations and our legitimate interest in handling refunds correctly.

Transfers: TDH Software is in Viet Nam. Our AI service runs on Cloudflare (Cloudflare, Inc., United States), which also receives crash reports and messages, and passes AI requests to Anthropic (Anthropic, PBC, United States). Both process the data for us under their data processing addenda, which include the European Commission’s Standard Contractual Clauses (with the UK addendum) for data from the EU and the UK. Google (on Android) and Apple (on iPhone and iPad) handle purchases and the integrity check, and Dropbox and Microsoft handle the files of the account you link, each under its own privacy policy.

13. Changes

We will update this page when anything changes and show the date above.

14. Contact

Questions about privacy, or a request about your data: contact@tdhsoft.com or the contact form.