Official App & Web Data Security

Privacy Policy & Data Security

Last Updated: September 27, 2026

Select Policy Category

Viewing official 18-section privacy policy for Tool Yaar: PDF & Image Tools Android application (Firebase & AES-256).

Official Android App Privacy Policy & Data Security

Welcome to Tool Yaar: PDF & Image Tools (“Tool Yaar”, “App”, “we”, “our”, or “us”), developed and operated by Dipanshu Kumar. Your privacy and data security are our highest priorities. This Privacy Policy explains how information is collected, used, encrypted, and protected when you use our application.

Tool Yaar provides optional User Authentication and secure cloud data saving backed by Firebase Database. All user data saved in the database is protected using industry-standard AES-256 Encryption—making unauthorized access or data cracking virtually impossible. Raw files processed in tools (like PDF operations, image compression, and OCR scanning) continue to execute safely on-device.

1. User Account, Profile & Cloud Synchronization

1.1 User Profile & Account Preferences

When you create an account or sign in with Firebase Authentication, your core profile and preferences are stored securely in your private cloud account document:

  • User Display Name (userName): Your account profile display name.
  • Streaks Tracker: Today's active usage streak and longest streak record.
  • Favorite Tools: Utilities bookmarked with the heart icon.
  • Quick Tools: Custom tool shortcuts pinned to your home screen.
  • Recent Tools: The last 10 utilities accessed for quick return.
  • Ad-Free Status: Ads watch count & active premium ad-free validity status.

1.2 Client-Side Encrypted Tool Data

For total privacy, sensitive tool records are encrypted directly on your device using AES Client-Side Encryption before being transmitted to your cloud account database. Even cloud database administrators or Google cannot read this raw content:

📜 1. Utility History (Encrypted Logs):

  • BMI Calculator: Weight, height, and calculated BMI result.
  • GST Calculator: Product price, tax rate, and final amount breakdown.
  • SIP Calculator: Investment amount, duration, and estimated returns.
  • Translator: Typed source text and translated result.
  • PDF Tools: File name & action performed (Split, Merge, Password Add/Remove).
  • Speed Test: Internet download and upload speed history.
  • Expense Tracker: Expense title and monetary value.
  • QR/Barcode Scanner: Decoded QR/Barcode content and scan logs.
  • Text to Handwriting: Typed text history.
  • Unit Converter: Converted values and unit selections.
  • Random Decision: Options entered and selected winner result.

📝 2. Notepad (AES Encrypted):

Note title, complete text content, and pinned status are encrypted locally before saving to Firestore.

✅ 3. To-Do List (AES Encrypted):

Task title, assigned category (Personal, Work, etc.), and completion status are fully encrypted.

1.3 Plain Sync Data (Unencrypted Real-time Counters)

Certain non-sensitive operational trackers sync in plain format across devices for real-time responsiveness:

  • Counters: Counter label, today's count, total count, and target goal.
  • Water Intake: Daily date log and water volume consumed.
  • Events Countdown: Event title (e.g. Birthday, Anniversary) and target date.

2. Firebase Cloud Database & AES-256 Security

Your user data saved in the cloud is stored inside Firebase Firestore Database protected by end-to-end AES-256 Encryption.

AES-256 (Advanced Encryption Standard with a 256-bit key) is recognized globally as one of the most secure encryption algorithms available. With 2256 possible key combinations, cracking or brute-forcing this encryption is mathematically and practically impossible with current computing technology.

🛡️ Guarantee: Your data is encrypted before or upon database storage, guaranteeing that no unauthorized third parties or malicious actors can intercept or crack your private information.

3. Strictly Local Data (Never Uploaded to Cloud)

Certain features handle sensitive files and credentials that are strictly restricted to local device storage and NEVER sent to Firestore or any cloud server:

  • Tool Yaar AI (Zero Chat Storage): Tool Yaar AI processes query requests via secure server-side models in real-time. No conversation prompts, chat logs, or replies are stored anywhere — neither on your device's memory nor on any cloud database. Sessions are 100% ephemeral for complete confidentiality.
  • Secure Space (Vault Files & Photos): Private photos, videos, and documents placed inside Secure Space are encrypted locally with AES-256-GCM and PBKDF2 HMAC-SHA256 (65,536 iterations). They stay 100% on your phone and are never transmitted to any server.
  • Audio Recordings: Voice recordings captured using the Voice Recorder utility are stored strictly in your device's internal media storage directory. They are never uploaded to the cloud or shared.
  • App Lock PINs & Passwords: Your App Lock PIN code or security pattern is stored strictly in your phone's encrypted local preferences. It is never transmitted to Firestore or any external network endpoint.
  • Passwords Vault: Although named “Passwords Vault”, saved passcodes remain strictly local inside your device's secured local storage, ensuring complete offline isolation.
⚠️ Note: Because local-only data is stored exclusively on your physical phone, clearing app storage or uninstalling the app without backing up will permanently erase local vault files and recordings. Forgotten Secure Space passwords cannot be recovered by us.

4. On-Device Processing

One of Tool Yaar's core privacy principles is that as much processing as possible happens locally. Many utilities perform their work directly on your device without uploading your files or personal content.

Examples of on-device utilities include:

• Document Reader (Word/Excel/PPT/Text)
• Secure Space (Encrypted Vault)
• Wifi Analyzer & Signal Meter
• Image Compression
• Passport Photo Resizer
• Read & Edit PDF
• Image to PDF / Merge
• PDF Password Lock/Unlock
• PDF Splitter & Extractor
• Text to Handwriting
• PDF Compression
• OCR Document Scanner
• Background Removal
• QR Scanner / Generator
• Voice Recorder
• Speech & Text Tools
• All Calculators (EMI/GST/BMI)
• Text Encryption
• Hardware Sensors (Compass, Sound Meter)
• Stopwatch & Countdowns
• Water Reminder
• Breathing Exercise

These features process your files and data directly on your device whenever possible.

5. AI & Machine Learning Features

Some features use Google ML Kit to provide intelligent on-device functionality. These include:

  • Background Remover
  • OCR Text Recognition
  • Document Scanner
  • On-device Translator

Google ML Kit performs processing locally on supported devices after the required language or AI models are installed. Your images and scanned documents are not uploaded to our servers for these features.

6. Currency Converter

The Currency Converter retrieves the latest exchange rates from a trusted third-party currency exchange service. Only publicly available currency exchange rates are requested.

The App does not send your personal information, conversion history, identity, or financial data to the exchange rate service. All currency conversion calculations are performed locally on your device after the latest rates are downloaded.

7. Device Permissions

Tool Yaar requests only the minimal permissions necessary for the specific features you actively choose to use:

  • 📷 Camera: Used for: GPS Map Camera, Document Scanner, OCR Scanner, QR Scanner, Mirror, and optional Profile Photo. Accessed only when actively opening these specific tools.
  • 📍 Location & Nearby Devices:
    • GPS Map Camera: Fetching real-time latitude, longitude, altitude, and address geotags stamped onto photos.
    • Wifi Analyzer: As required by Android OS architecture, scanning surrounding WiFi access points, BSSIDs, frequencies, and channel strength (dBm) requires Location / Nearby WiFi Devices permission.
    • 🔒 Processed 100% locally and ephemerally in real-time — never saved or uploaded.
  • 📶 Wi-Fi & Network State: Used for: Wifi Analyzer and Internet Speed Tester to detect connected network status, Wi-Fi link speed (Mbps), frequency band (2.4 GHz / 5 GHz / 6 GHz), and signal strength.
  • 🎙️ Microphone: Used for: Voice Recorder and Speech to Text. Audio is recorded only when initiated by you and saved strictly to your device.
  • 💾 Storage / Media: Used to: Read images selected by you, save generated PDFs, export compressed images, and manage local Secure Space files.
  • 🔔 Notifications: Used to provide: Water Reminder alerts, Focus Timer notifications, App tips, Feature highlights, Important updates, and Utility reminders. Disabling is possible in Android system settings.
  • 🔄 Boot Completed: Used to restore reminder schedules automatically after the device restarts.
  • 📳 Vibration: Used to provide haptic feedback in supported utilities such as counters, timers, and interaction-based tools.
  • 🌐 Internet: Internet access is required for Advertisements, Firebase services, Currency exchange rates, Downloading Google ML Kit language models, and Feature updates.
📌 The App does not request Contacts, SMS, or Phone Call permissions.

8. Emergency SOS Feature

Emergency SOS: The Emergency SOS feature activates a loud emergency siren and Morse code flashlight blinking. This feature is designed to help attract nearby attention during emergency situations. It does not automatically contact emergency services, send SMS messages, or place phone calls.

9. Third-Party Services & Firebase Cloud Engine

To support account management, cloud synchronization, app reliability, and our free utility access model, Tool Yaar integrates trusted infrastructure services:

  • 🔐 Firebase Authentication & Firestore Database: Provides secure user sign-in and encrypted cloud storage. Your saved notes, expenses, tasks, and settings are synchronized across devices inside Firebase Firestore protected with AES-256 Encryption.
  • 📢 Google AdMob: Tool Yaar displays Banner Ads and Native Ads using Google AdMob. AdMob may automatically collect certain non-personal technical information, including Advertising ID, Device information, App performance data, and Approximate diagnostics required for ad delivery. Tool Yaar does not access or control the information collected by Google AdMob. (Learn more about Google's Privacy)
  • 📊 Firebase Analytics: Tool Yaar uses Google Firebase Analytics to better understand app usage and stability. It collects device model, Android version, app version, session duration, and feature performance metrics without exposing your personal content.
  • 🛠️ Firebase Crashlytics & Performance: Monitors app crashes, stack traces, and network responsiveness to maintain high stability and fast response times.
  • 💬 Firebase Cloud Messaging (FCM): Delivers notification reminders, tips, highlights, and app updates. You may disable notifications at any time through Android settings.

10. External Links

The App may contain links to our Privacy Policy, Official Website, or Contact information. These links open in your device's default web browser. Once you leave the App, your interaction with external websites is governed by their own privacy policies.

11. Data Security & AES-256 Encryption

We implement bank-grade and military-grade security standards to protect user data. Security protocols include:

  • AES-256 Encryption: Database records and saved user data in Firebase are encrypted using AES-256 bits, making brute-force cracking virtually impossible.
  • Secure Space AES-256-GCM: On-device files are protected with PBKDF2 HMAC-SHA256 key derivation over 65,536 iterations.
  • Firebase Authentication & TLS/SSL: All communication between the app and Firebase database is transmitted over encrypted HTTPS/TLS channels.

12. Data Retention

Your encrypted saved data (Notes, To-Dos, Expenses, Preferences) is retained in your Firebase user account until you modify or delete it, or delete your user account. Locally cached data on your device remains until cleared via app settings or uninstalled.

13. Account & Data Deletion

You have total control over your information. You can delete your saved entries directly within the app or request full account and data deletion from your profile screen or by contacting us at toolyaarofficial@gmail.com or support.dipanshuhub@gmail.com. Upon request, all your encrypted database records will be permanently removed from Firebase.

14. Children's Privacy

Tool Yaar is intended for a general audience aged 13 years and above. We do not knowingly collect personal information from children under the age of 13. If you believe that a child has provided personal information through the App, please contact us so we can assist appropriately.

15. Your Privacy Choices

You may choose to skip profile setup, disable notifications, delete your local data, remove your profile information, or uninstall the App at any time. Most features remain available without creating any account.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect new features, service improvements, legal requirements, or Google Play policy updates. When significant changes are made, the “Last Updated” date at the top of this Privacy Policy will be revised. We encourage users to review this Privacy Policy periodically.

17. Contact Us

If you have any questions, suggestions, feedback, or concerns regarding this Privacy Policy or Tool Yaar, please contact us at:

Developer & Founder: Dipanshu Kumar
Official Website: https://toolyaar.com
Secondary Support Desk: support.dipanshuhub@gmail.com

18. Your Consent

By downloading, installing, or using Tool Yaar: PDF & Image Tools, you acknowledge that you have read, understood, and agreed to this Privacy Policy and our Terms of Use. If you do not agree with this Privacy Policy or the Terms of Use, please discontinue using the App.

SECURED WITH FIREBASE CLOUD DATABASE & AES-256 ENCRYPTION ARCHITECTURE