Privacy Policy

Last updated: 05 September 2026

1. Introduction

This Privacy Policy explains what information the KKtech PDF application (the “App”, together with the associated website at vault.kktechsolutions.in) collects, why it collects it, and what you can do about it. KKtech PDF is a private document vault operated by KK Techsolutions and offered to named individual users authorised by KK Techsolutions.

2. Developer and Contact

KK Techsolutions
Application name: KKtech PDF
Android package: in.kktechsolutions.pdf
Contact: krunal@kktechsolutions.in

3. Information We Collect

KKtech PDF is a small, internal-use document vault. The information we hold about an account is limited to what the application actually requires to sign you in and manage your PDFs:

Account information

Username — the login name you were assigned by your administrator.
Display name — the human name paired with your username in the administrator’s configuration.
Role — either user or admin.
Password hash — your password is stored only as a bcrypt hash (never as plain text) on the administrator’s configuration.
Two-factor secret — if you enable two-factor authentication, the TOTP secret and backup codes are stored on the server so that we can verify codes. We never send the secret in email or SMS.

Documents you upload

The PDF files you upload, stored on the server file system under uploads/.
Metadata about each file: the filename you saved it as, its size in bytes, its upload timestamp, and which folder or product it belongs to.

Activity log

Every sign-in, upload, download, rename, delete, share, and 2FA event is appended to a server-side audit log (audit.log). Each entry contains the timestamp, the requesting IP address, your username, and the action.
Sharing a PDF over WhatsApp creates a short-lived (72 hour) tokenised link. A record of the send (recipient number, filename, timestamp) is kept in the usage-history log so you can review what you have sent.

Session information

A short-lived JSON Web Token (JWT) access token, an accompanying refresh token, and a session cookie. These identify your logged-in session and are invalidated when you sign out or when they expire.

We do NOT collect: analytics events, advertising identifiers, contact lists, location, camera or microphone data, calendar entries, cross-app tracking, or any behavioural profile. The App ships no third-party analytics or advertising SDKs.

4. How We Use Information

To authenticate you and keep you signed in.
To store, list, download, rename, delete, and share the PDFs you upload.
To verify two-factor codes when you enable 2FA.
To maintain an audit log for security, accountability, and troubleshooting.
To generate short-lived share links when you send a PDF over WhatsApp.

We do not use your information to build advertising profiles, sell to third parties, or feed to any external analytics service.

5. File Storage

PDFs are stored on the same web-hosting infrastructure that serves the vault. Access to a file is gated by your authenticated session, or by a short-lived tokenised share link generated when you choose to share the file over WhatsApp.

6. Sharing With Third Parties

We do not sell, rent, or share your account information or your PDFs with any third party for marketing or profiling. The only way information leaves the vault is when you deliberately send a share link via WhatsApp or the Android share sheet, or when you download a file to your device.

The WhatsApp share flow opens WhatsApp (a Meta Platforms, Inc. product) with a pre-filled message that contains a short-lived share URL. WhatsApp is a separate service governed by its own privacy policy.

7. Data Security

All traffic between your device and the vault is encrypted with HTTPS/TLS.
Passwords are stored only as bcrypt hashes.
Two-factor authentication is available and recommended.
Sessions expire after inactivity and can be revoked by signing out.
Share links expire after 72 hours.
Uploaded files live under the web root but are gated by authentication or a valid share token; direct URL access to the storage directory is blocked at the web-server level.

8. Data Retention

Account records remain in the administrator’s configuration until you or the administrator remove them. Uploaded PDFs remain in the vault until they are deleted through the application or by the administrator. Audit-log entries are retained for operational and security purposes and are trimmed periodically.

9. Account and Data Deletion

You can request the deletion of your KKtech PDF account and its associated data at any time:

From the Android app: Settings → Delete account.
From the web: vault.kktechsolutions.in/delete-account.php.

Because the vault’s user store is maintained by an administrator (not a self-service database), deletion is processed by the administrator within 7 business days of the request. Upon deletion we remove your username, password hash, 2FA secret, and any PDFs you uploaded. Audit-log entries that reference your username are retained in anonymised form only as long as needed for security investigation and legal-record obligations; any user-visible fields are purged.

If you would like a confirmation of deletion, include a reply address in the request or contact us at krunal@kktechsolutions.in.

10. Your Rights

Depending on your jurisdiction you may have the right to access, correct, or delete the personal information we hold about you, and to lodge a complaint with a data-protection authority. To exercise these rights, contact krunal@kktechsolutions.in.

11. Children’s Privacy

KKtech PDF is not directed to children under 13 and is provided to named adult users authorised by KK Techsolutions. We do not knowingly collect information from children.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of the page. Material changes will also be surfaced in the Android app.

13. Contact

Questions about this policy or about your data: krunal@kktechsolutions.in