Last updated 29 August 2026 · Encoders Software Pvt Ltd
Encoders Software Pvt Ltd operates the EDUVIXA mobile application. This policy explains what we collect, why we collect it, and what we do not collect. It reflects how the app actually works today.
Some tools run entirely on your phone and the file never leaves it: Text to PDF, Image to PDF, Merge, Split, Organize, Extract Pages, Delete Pages, Rotate, Page Numbers and adding a watermark.
The remaining tools need our server, because the work cannot be done on a phone. For these, the file you choose is uploaded over an encrypted connection, processed, returned to you and then deleted. We keep no copy, and no person reads it. These tools are: PDF to Word, PDF to Text, PDF to Image, Compress, Password-protect, Remove password, Remove watermark, Make searchable, Edit PDF text, Sign PDF, Image to Text, Translate, Passport Photo, Background change, Image editor and Greeting cards.
We are listing these individually rather than saying "some features" because you are entitled to know exactly which of your files are sent anywhere.
Files you create are saved to your own device storage. Deleting them there deletes them permanently; we hold no backup.
This one tool is different, and deliberately so. When you send a document for signature we store it on our server until it expires, because the person signing has to be able to open it from their own phone, days later, through the link you sent them.
We keep the document, the signing link, who it was addressed to, when it was opened, when it was signed, and a fingerprint (hash) of the file before and after signing. The fingerprint is what lets anyone prove the document was not altered afterwards.
The link is a bearer link: whoever holds it can open that document. Send it only to the person meant to sign.
Stored documents and their signatures are deleted 90 days after the agreement expires, or sooner if you revoke or delete it in the app.
When you use Ask EDUVIXA, the question you type or dictate is sent to our own server and answered by a language model we run ourselves. It is not sent to OpenAI, Google, Anthropic or any other AI company.
Questions are used to produce the answer and are not stored afterwards, not used to train anything, and not linked to a profile of you.
The assistant can be wrong. Do not rely on it for legal, medical, financial or exam-critical answers without checking.
The microphone is used only while you are holding or have switched on dictation, and only to turn your speech into text in the field you are typing into. We do not record audio, we do not store audio, and no audio is ever sent to our servers.
The speech itself is recognised by your own phone, using the speech service built into Android or iOS. On many Android phones that service is provided by Google, which means your spoken words are handled by Google under Google’s privacy policy, exactly as they are when you dictate into any other app. If you would rather that did not happen, type instead — every voice control in the app is optional and the app works fully without it.
When you create an account we store your name and whichever of mobile number or email address you sign up with. Gender is optional and stored only if you provide it.
Passwords are never stored in readable form. They are hashed with bcrypt, which cannot be reversed.
One-time passcodes are stored only as a hash, expire after 10 minutes and can be used once.
If you sign in with Google we receive your name, email address and Google account identifier. We never receive your Google password.
Payments are processed by Razorpay. Card numbers, UPI PINs, CVVs and net-banking credentials are entered inside Razorpay and are never seen, transmitted or stored by us.
We record what is needed to run your subscription and answer billing questions: the plan, the amount, the Razorpay order and payment identifiers, whether the attempt succeeded or failed, the reason for a failure, and the date and time.
We do not sell or rent your personal information to anyone.
We do not use third-party advertising or analytics SDKs. The promotional banner inside the app is our own and does not track you.
We do not read, index, mine or share the contents of your documents, and we do not use them to train any model.
Account details are kept while your account exists. Payment records are kept as long as tax and accounting law requires, currently eight years in India.
Files sent to our server for conversion, editing, recognition or image work are deleted as soon as the job finishes — typically within seconds.
Documents sent for signature are kept until 90 days after expiry, as described above.
To delete your account and the data attached to it, email support@encoderssoftware.com and we will action it within 30 days.
Every request between the app and our servers travels over HTTPS (TLS). The server refuses plaintext HTTP and instructs browsers never to downgrade the connection.
Your login session is encrypted on your device. The encryption key is generated on your phone, stored in the iOS Keychain or Android Keystore, never written to ordinary storage and never sent to us — so the stored session cannot be read from a device backup or a copied file.
Passwords are hashed with bcrypt and one-time codes are stored only as hashes, so neither can be recovered from our database, not even by us.
No system can be guaranteed unbreakable and we will not claim otherwise. What we can say is that we hold as little as possible, encrypt what we hold, and will tell you promptly if a breach ever affects your data.
EDUVIXA is not directed at children under 13, and we do not knowingly collect their data. Where a child uses the app for schoolwork, it should be under a parent’s or teacher’s account and supervision.
If this policy changes materially we will update the date above and note the change in the app.
Questions or requests: support@encoderssoftware.com.