한국어

MdViewer Privacy Policy

Effective: 2026-05-30 · App: MdViewer (com.eltacrew.mdviewer) · Developer: EltaCrew

Summary — MdViewer works without an account.
Your Markdown documents, settings, bookmarks, and highlights stay on your device and are never sent to or collected by us. We do not collect names, phone numbers, emails, or other identifying information.

1. Data we process and why

1) Stored on your device (never sent to a server)

• Document metadata: the folder you chose, the list of .md files in it, recently opened items.
• Your annotations: bookmarks and highlights (color, position) per document.
• App settings: theme (light/dark/sepia), language, font size, line spacing.
• GitHub access token (only if you enter one): used to import private repositories; stored encrypted on the device (EncryptedSharedPreferences) and sent nowhere except GitHub.

All of the above is kept in local storage solely to provide app features; uninstalling the app deletes it. Your original .md files are your own files on your device — the app reads them to display them and modifies them only on your explicit action (edit, delete, export, import).

2) Storage permission (All files access)

• Purpose: listing, viewing, editing, creating, deleting, and exporting Markdown files in the folder you chose.
• How: file contents are processed on the device and never sent to us.
• Revoking: you can revoke it in device settings; core features (file list, viewing) will then be limited.

3) Camera and photos (document scan · OCR)

• Purpose: recognizing text in a photo you take or pick from the gallery and turning it into a Markdown document.
• How: text recognition runs on the device via Google ML Kit; the image and the result are never sent to us.
• Revoking: camera permission can be revoked in device settings (camera scan will be limited; gallery picking uses the system photo picker).
• Images may include personal information of you or others — they are processed only on the device.

4) Network use

• GitHub import: when you enter owner/repo, Markdown files are downloaded from the GitHub API. For private repositories the token you entered is sent to GitHub only, over HTTPS.
• Remote images: if a document embeds an external image URL, a request goes to that image host to display it.
• Ads: see 5) below.

5) Advertising (third-party SDK)

• This app shows Google AdMob ads.
• To serve and measure ads, AdMob may collect the advertising ID (AAID), device information, approximate location, and app-interaction data, processed under Google's advertising policies (policies.google.com/technologies/ads).
• You can reset your advertising ID or opt out of personalized ads in device Settings > Google > Ads.

6) Payments (paid "Remove ads")

• In-app payments are handled by the Google Play billing system. We never receive your card number or other payment details.
• In Google Play Console we can see the order number, product, date, amount and country of a purchase. We use them only to handle refunds and inquiries and to keep the transaction records required by Korean e-commerce law.
• The app stores your purchase status (subscribed / paid once) only on your device and re-checks it with Google Play when it starts.
• Payment steps (opening the payment sheet, result, purchase acknowledgement) and the purchase event Google Play reports (product, amount, currency) are processed by Firebase Analytics as described below (test purchases are excluded).
• If you email us a refund request, we use that email and order number only to process the refund.

2. Third parties and external services

We do not sell or hand your data to third parties. The app talks to these services to work:

• GitHub: fetching Markdown files from repositories you request (using your token if needed)
• Image hosts referenced in your documents: displaying remote images
• Google AdMob: ads
• Google Play billing: payments for the paid "Remove ads" service
• Google ML Kit: on-device text recognition for document scans

Each service processes data under its own privacy policy (Google: policies.google.com/privacy).

3. Retention and deletion

• Everything the app stores (document metadata, bookmarks/highlights, settings, token) lives only on your device.
• Deleting items in the app or uninstalling removes them immediately.
• We keep no copy of your data on any server.
• Payment records (Google Play Console order records and refund-request emails) are kept for the periods required by Korean e-commerce law — contract and withdrawal records 5 years, payment and delivery records 5 years, complaint and dispute records 3 years — and then deleted.

4. Your rights

• Delete folders, documents, bookmarks, and highlights directly in the library.
• Clear the GitHub token on the import screen or by uninstalling the app.
• Uninstalling deletes all app data on the device.
• Reset your advertising ID or opt out of personalized ads in device Settings > Google > Ads.

5. Security

• Connections to external services (GitHub, image hosts) use HTTPS.
• The GitHub token is stored encrypted with EncryptedSharedPreferences.
• Your documents and annotations are processed on the device and never sent to us.

Children's privacy

This app is not directed at children under 14, and we do not knowingly collect personal information from children.

Privacy officer

• Privacy officer: EltaCrew
• Role: Developer
• Email: [email protected]

Changes to this policy

This policy may be updated when laws or the service change. Changes are announced in the app or on this page.

Crash reporting and usage analytics (Firebase) — added 2026-09-18

The app uses Google Firebase Crashlytics and Firebase Analytics (Google LLC) to collect diagnostic information when the app crashes or hits an error, and statistics about which screens and features are used.

• Data collected: crash logs (stack trace and the screen where the error occurred), device model, OS version, app version, an app-instance identifier (Firebase installation ID), app interactions (screen views, feature usage counts, session length, and the step and error type when a feature fails), and approximate location (country/region inferred from IP address).
• Not collected: name, email, contact details, or anything you type into the app.
• Purpose: fixing errors and improving the service. Not used for advertising or marketing.
• Processor: Google LLC (Firebase). Data is stored on Google servers.
• Retention: crash data for 90 days; usage statistics are deleted after the period set in Google's retention settings.
• Opt-out: this collection is required for the app to function and cannot be switched off individually. Uninstalling the app stops further collection.

Details: Google Privacy Policy · Privacy and Security in Firebase

International data transfers

The app uses Google LLC services for crash reporting, usage analytics, ads and payments, so the data described above is processed on Google's servers. If you do not want this, you can avoid the feature or uninstall the app.

Updated 2026-10-20: added payments (paid "Remove ads") and payment-record retention.
Updated 2026-10-19: added international transfers, failure details in analytics, app name line.