Deflate Privacy Policy
Last updated: August 28, 2026
Deflate has no servers, and no way to reach one. We never receive your documents, your images, or your name.
What Deflate collects
Nothing. Deflate collects no data of any kind — not your files, not their contents, not their names, not usage statistics, not a device identifier. There is no analytics, no advertising, no tracking, and no third-party SDK of any kind in the app.
Because nothing is collected, there is nothing to sell, share, breach, or hand over.
Why we can say that with confidence
Deflate contains no networking code at all. Not disabled networking, not opt-out networking — none. The app makes no use of URLSession, the Network framework, or any other mechanism for reaching the internet, and it contains no outbound URL.
This is verified against the source before every release, and it is the reason the app can make this promise as a fact about how it is built rather than as a policy commitment you have to trust.
What Deflate accesses, and why
- The files you choose — and only those. You pick a PDF or image through the system file picker, or drag one in. On Mac, Deflate runs in the App Sandbox with user-selected file access only, which means it is technically incapable of browsing your disk on its own.
- Nothing else. Deflate does not request access to your photo library, camera, microphone, location, contacts, calendar, or health data. It has no reason to, so it never asks.
Where the work happens
Entirely on your device, using Apple's own frameworks — PDFKit for documents, Core Image and ImageIO for image encoding, and Vision for the optional “Make Searchable” OCR feature.
Text recognition is local. When you make a scan searchable, Vision reads the page on your device and the recognized text is written into your own copy of the PDF. It is never uploaded, and no one else ever sees it.
While a job runs, Deflate writes working files into its own temporary directory on your device. Those files are yours, are not synced anywhere, and are cleaned up by the system.
Required-reason API disclosures
Apple requires apps to declare certain APIs and the reason they are used. Deflate's privacy manifest declares exactly two, and this is the whole list:
- File timestamps — used only to read back the size and date of a file Deflate itself just wrote, so it can show you an accurate before-and-after figure.
- User defaults — used to remember a single value: the width of the controls column in the Mac window. It holds no personal information.
Accounts and purchases
Deflate has no account, no login, and no cloud sync. Nothing about you is stored because nothing about you is ever asked for.
The app is free and carries no advertising in any tier. If a one-time purchase is offered in a future version, it will be processed by Apple — payment details are handled entirely by the App Store and are never visible to the app or to us.
Children
Deflate collects no personal information from anyone, of any age.
Your control
The files you produce are ordinary files, saved where you choose to save them, under your control. Deleting them deletes them. Uninstalling Deflate removes the app and its working data from your device completely — there is no copy anywhere else, because there was never anywhere else.
Changes to this policy
If this policy changes, the “last updated” date above changes with it. Any change that weakened the on-device guarantee would be a change to the app's reason for existing, and would be stated plainly rather than buried here.
Contact
Questions about this policy: preet2020@icloud.com
For help using the app, see the support page.