Privacy

Your files stay on your device

FlipIt converts files locally. This page explains both apps — Windows and Android — and the separate visit counter on this website. Updated 30 October 2026.

Both apps

• Conversion stays on your device. FlipIt does not upload your documents, images or audio. It uses local working files. Windows saves completed results in the chosen output folder; Android keeps a completed result privately until you save, share or discard it.
• No built-in online services. FlipIt has no upload, update-check, crash-reporting, analytics or advertising feature.
• No account. There is nothing to sign up for, so FlipIt holds no name, email or payment details.
• Passwords are used only for your task. FlipIt does not intentionally save document passwords to settings or logs. Keep your device secure: someone who controls it may still access files or passwords while they are in use.
• Supported hidden metadata is removed by default. This includes photo camera and GPS tags and document author information. It does not redact visible content or guarantee that every possible hidden detail is removed. Review sensitive output before sharing it.
• Your originals are only read. FlipIt writes new files and never changes or deletes the files you convert.
• PDF tools and signatures stay local. Making a PDF searchable and adding a drawn or pictured signature happen on your device. Signature pictures can leave local temporary copies until they are cleaned up. A visible signature does not certify who signed the document.

The Android app

• No internet permission. FlipIt does not request Android's internet permission. Conversion and text recognition run on your phone.
• No automatic data collection. FlipIt contains no analytics, advertising identifiers or conversion reporting. A result is handed to another app when you explicitly choose Share.
• You choose the input. FlipIt requests no broad storage permission. Android's file picker or an explicit share grants access to the file you select; FlipIt also creates working copies inside its own private cache.
• Results stay in the app until you say otherwise. A converted file waits in FlipIt's own private folder. It is written where you choose only when you tap Save, and handed to another app only when you tap Share.
• Text recognition runs on the phone. Reading a scanned page uses a language model built into the app. No page or image is uploaded for recognition.
• Camera scanning is on Android only. Your camera app takes the photograph and grants FlipIt the result. FlipIt requests no camera permission. The raw camera file is deleted after reading it, or if you cancel. You can combine several cropped pages into one PDF. The most recent finished scan is kept in the private cache so you can convert it again, and is replaced when you choose another file or finish another scan. A scan older than 24 hours is removed when an idle app screen next starts; this is not a background deletion timer.
• Temporary files have a lifecycle. Working copies are cleaned up when they are no longer needed. A crash or interrupted session can leave cache files until a later cleanup or Android clears the cache. Deletion is ordinary file deletion, not secure erasure. Android backup is disabled for the app.
• Notification permission. The only runtime permission FlipIt requests is to show notifications, so a long conversion can report progress while you are in another app.

Other apps you choose

On Windows, some conversions can use locally installed Word, Excel or LibreOffice. On Android, the system camera, file providers and apps you choose to share with operate under their own settings and privacy policies. Saving to a cloud folder or sharing a result can send it elsewhere through the app you selected.

This website

• The homepage displays a total visit count. The counter stores only a combined total; it receives no documents, file names, passwords or conversion activity. These are approximate visits, not unique people: blocked requests, multiple tabs and automated traffic can affect the total.
• The website stores your theme choice in local storage and a counted-this-tab flag in session storage. It sets no analytics cookies and creates no advertising identifier.
• Android and Windows download totals come from public GitHub release asset counts. They count downloaded files, not installations or unique people. Required notices and materials for the bundled open-source libraries are public alongside the installers.
• Fonts and images are served from this site. GitHub and Cloudflare process network request information, such as IP addresses, to host and protect their services. The visit counter does not store IP addresses or keep individual visit logs.

Changes

If this ever changes, it will be announced in the release notes before the version that changes it.