Privacy Policy

01Summary in plain language

• MintBox Office is local-first. The files you open, view, compress, merge or convert are processed on your own device wherever technically possible.
• No account is required. There is no sign-up, no login and no user profile.
• We do not sell your data, do not run advertising networks inside the App, and do not build advertising profiles about you.

02Information processed on your device

2.1 Your files

The App reads files you explicitly select through your device’s file picker, share sheet, photo picker or — if you turn it on — the optional folder scan. Those files, and any output the App produces from them, stay in your device storage or in the location you choose.

We do not upload, index, back up or transmit your files to us, except in the single case described in Section 3.

2.2 App settings and history

The App keeps a small local preferences file on your device containing:

• interface preferences — theme, layout, sort order;
• tool settings — for example compression quality or page ranges;
• a list of recently opened file paths, so recent items can be shown.

This data never leaves your device, is not transmitted to us, and is removed when you clear the App’s data or uninstall the App.

2.3 Device permissions

The App requests permissions only for the functions that need them.

Choosing a file to open needs no permission at all — the system file picker hands the App only what you select.

You may decline or later revoke any permission in your operating system settings. Declining a permission disables only the feature that requires it; the rest of the App keeps working.

03The document conversion service

3.1 When a file leaves your device

Some legacy and complex office formats cannot be rendered accurately on a phone. When you open or convert a file of one of the following types, the App may upload that file, and only that file, to our conversion service:

• .ppt
• .pptx
• .pps
• .ppsx
• .odp
• .doc
• .docx
• .rtf
• .odt
• .xls
• .xlsx
• .csv
• .ods

The service converts the document to PDF and returns the PDF to the App. Files larger than 25 MB are not accepted.

3.1a Text recognition (Pro)

There is one other case in which a file leaves your device. The Pro tool Image to Text reads the words in a photograph or a scanned PDF. That cannot be done accurately on a phone, so when — and only when — you choose a file and tap Read text, that image or PDF is uploaded to the same service, the text is recognised, and the result is returned to the App. Nothing is uploaded until you ask for it.

The same limits and the same retention rules in Sections 3.2 and 3.3 apply to it.

Apart from these two cases, your files never leave your device. PDF, image, audio, video, archive and text files are not uploaded for viewing, editing, converting or any other tool — they are handled entirely on your device.

3.2 What the service receives

• The content of the file you asked to convert, and its file extension.
• The network (IP) address the request comes from, as part of the normal operation of any internet server.
• A shared application key that identifies requests as coming from MintBox Office. It does not identify you.

The service does not receive your name, email address, device identifiers, contact list, location or any account information, because the App does not collect these.

3.3 How long the service keeps data

Uploaded original

Deleted as soon as the conversion finishes or fails. Every request gets its own temporary working directory, which is destroyed at the end of the request.

Converted PDF

Held in a server-side cache addressed by a SHA-256 hash of the document’s content, so the same document is not converted twice. The cache has a fixed size ceiling and the least recently used entries are deleted automatically as new conversions arrive. You can ask us to remove an entry — see Section 8.

Rate-limiting record

The requesting IP address is stored only as a salted hash alongside a request count, so abuse can be blocked. These records expire automatically within about an hour and cannot be reversed to recover the original address.

Error logs

If a conversion fails, a technical error message is written to the server log. Logs are kept for at most 30 days and are used only to diagnose faults.

3.4 Confidential documents

Because converting an office document means transmitting it to our server, please do not use the conversion feature for material you are not permitted to disclose to a third-party processor. Opening such a file in MintBox Office starts the conversion, so the way to avoid it is not to open that file in the App — or to self-host the service, since MintBox Office can be built to point at a conversion server you control.

04What we do not do

We do not:

• collect your name, email address, phone number or postal address;
• see, receive or store your payment card details — MintBox Office Pro is bought and paid for inside the App Store or Google Play, and the store tells the App only whether the unlock is owned;
• create accounts or user profiles;
• collect precise or approximate location data;
• read your contacts, messages, call logs or calendar;
• embed third-party advertising SDKs or advertising identifiers;
• embed third-party behavioural analytics or cross-app tracking;
• sell, rent or share personal information with data brokers;
• use your documents to train machine-learning models.

05Third parties

We use no other processors. If that changes, this Policy will be updated before the change takes effect.

06Security

• All communication between the App and the conversion service uses HTTPS (TLS).
• Each conversion runs in an isolated, per-request working directory that is destroyed after use.
• The service authenticates every request and applies rate limits and concurrency limits to resist abuse.
• Files on your device are protected by your operating system’s sandbox and by any device encryption, screen lock or biometric lock you have enabled.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we protect your data using measures appropriate to its sensitivity.

07Children’s privacy

MintBox Office is a general-purpose productivity tool and is not directed at children under 13 — or under 16 where local law sets that age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us using the details in Section 11 and we will delete it.

08Your rights

Depending on where you live, you may have rights under laws such as the GDPR (EEA/UK), the CCPA/CPRA (California), the PDPA, or Pakistan’s data protection regulations, including the right to:

• Access — ask what information we hold about you;
• Correct — ask us to fix inaccurate information;
• Delete — ask us to erase information relating to you;
• Object or restrict — object to certain processing;
• Portability — receive a copy of your data in a portable format;
• Withdraw consent — for example by revoking a device permission or disabling the conversion feature.

Because we hold no account data, in most cases we simply have nothing to return. If you want a cached converted document removed from the server, send us the file or its SHA-256 hash so the entry can be identified and deleted.

Legal bases (GDPR). Performing the service you requested, Art. 6(1)(b), for conversions; our legitimate interest in operating a secure, non-abused service, Art. 6(1)(f), for rate-limiting hashes and error logs.

We respond to verified requests within 30 days.

09International transfers

Our conversion server is located in Pakistan. If you use the App from another country, the document you convert is transferred to and processed in that location. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10Changes to this Policy

We may update this Policy as the App changes. The “Last updated” date at the top always reflects the current version. Material changes — a new category of data, or a new processor — will be announced in the App or in the release notes before they take effect. Continuing to use the App after a change means you accept the updated Policy.

11Contact

Questions, requests or complaints:

Publisher

MintBox Office

Email

modassir.khan@markminttech.com

Postal address

Ghouri Town Phase 4-A Street 26, Ghouri Town, Islamabad

If you are in the EEA or UK and are not satisfied with our response, you may lodge a complaint with your local data protection authority.