Privacy policy for the PDF Label app

Last updated: 8 October 2026

This policy is about the PDF Label app for Android, and only the app. It explains what happens to your information when you use it, who receives it, and what your rights are under the European General Data Protection Regulation (GDPR).

The short version

Your labels are processed on your device. They are never sent to us.
A label goes only to the printer, computer or print service you choose.
We receive something only when you send us a message or ask for a refund.
There are no accounts, no advertising, no tracking and no analytics.

Who we are

PDF Label is made by Weekend Bunnies. We are the controller of the personal data described in this policy.

For anything about this policy or your data, write to developer@pdflabel.nl or use the contact form in the app (Settings, Contact us).

Your labels

The PDFs and pictures you open in PDF Label are processed on your device. The app finds the label, fits it to your label size and prepares it for your printer. The original document is never sent anywhere.

The finished label is sent only to the place you choose:

a printer on your network, over Wi-Fi or cable;
a printer shared from a Windows computer;
a printer connected by Bluetooth or by USB cable;
Android's own printing, which hands the label to the print service installed on your device (for example the one from your printer's maker). That service is not ours, and its own privacy policy applies to it.

We never receive your labels, documents or pictures, and we do not see the names, addresses or tracking numbers on them.

Printing on your own network uses the printer's own protocol. Depending on your printer, that connection may not be encrypted, just as when you print from a computer.

Finding printers on your network

When you tap Search this network, the app looks for printers on the network your device is connected to (including a VPN, if that is the only local network). To do that, it:

tries to connect to the usual printer ports on each address in your network, without sending any data;
listens for printers that announce themselves (mDNS);
asks the devices it finds what they are, using the printer protocol (IPP), the network management protocol (SNMP, with the standard public read-only community) and Windows name lookup (NetBIOS).

What the printers answer stays on your device. The search only runs when you tap the button.

What the app keeps on your device

The app stores your settings on your device:

your label sizes and printer settings;
the printers you added: their names, network addresses and what they reported about themselves;
for a printer shared from a Windows computer: the computer's name, the share, and the user name and domain you entered;
for a Bluetooth printer: its name and Bluetooth address; for a USB printer: its maker, model and serial number;
your remembered layouts: a coarse outline of where the ink is on the page (far too coarse to contain any text), the page size, your settings, and the name and notes you gave the layout;
your chosen language, and whether the Debug switch is on.

If you save a password for a printer shared from a Windows computer, it is stored encrypted with a key kept by Android's secure key store. It is used only to sign in to that computer when you print, and it is never included in a backup or an export.

When you share a label with PDF Label, or open one with it, the app keeps a temporary copy. It is deleted when the next label arrives, or at the latest when you next open the app after 24 hours.

Backups

If backup is switched on for your device, Android may include some of these settings in your device's backup with Google, or copy them when you move to a new device: your label sizes, network printers and Windows printers (including the user name and domain, but never the password), remembered layouts and language. Bluetooth and USB printers are not included. That backup is a service of Google under your Google account settings; we have no access to it.

With the app's Backup page you can also export your settings to a file yourself. That file goes only where you save it.

Permissions the app asks for

Internet: to reach printers on your network, and our server when you send us a message or ask for a refund. The app also uses this permission to fetch the latest version of this policy.
Local network (newer Android versions): to find and reach printers on your network.
Nearby devices (Bluetooth): only if you use a Bluetooth printer, to list your paired printers and connect to one.
USB: Android asks you each time you connect a USB printer.

The app does not ask for your location, your contacts, your files or your camera. It opens a document only when you choose one.

What we receive, and when

When you send us a message

If you use the contact form, the app sends us:

the topic you chose and your message (at most 2000 characters);
your email address, which is required, because we answer by email;
the app's version and language;
if you bought premium on this device, your purchase record from Google Play (see "Your purchase"), so we can see your message next to any refund request for that purchase.

We use this to read and answer your message, and for nothing else. We never add your email address to a mailing list and never share it.

When you ask for a refund

If you tap Request a refund, the app sends us your purchase record from Google Play and the app's version. Nothing else: no name, no email address, no device identifier. Each time you open the refund page afterwards, the app sends the same purchase record to ask where your request stands.

We use it to check the purchase with Google Play and to handle your refund.

Your purchase

Payment is handled entirely by Google Play. We never see your card or bank details. When you buy premium, Google Play gives the app a purchase record: the order number, a purchase token, the product, the purchase time and its status, signed by Google. The app sends it to us only with a message or a refund request, as described above. We keep the order number and the purchase token, and treat them as personal data.

How we keep out fake requests

Every request to us carries a one-time token from Google Play Integrity. With it, Google confirms to us that the request came from the genuine PDF Label app from Google Play, on a real device, and that it was not altered on the way. We keep that token at most 14 days.

To stop the same refund being claimed twice, we ask Google Play, when a refund is completed, to set a flag for this device that says "a refund has been given here". Google keeps that flag for us for up to 3 years after the app was last used on the device; it survives a factory reset. We keep no device identifier ourselves. If a later refund request comes from a device with that flag, it is declined automatically. See "Automated decisions".

When you open this policy

The app asks our server for the latest version of this policy, in your language, so that you always read the current text. The request contains nothing but the language. Without a connection, the app shows the version it already has.

With every request

Like any connection on the internet, a request to us shows your IP address to Cloudflare, which carries the connection, and to our server. The app identifies itself only as the PDF Label app; it does not send your device's model or Android version. Our server does not keep IP addresses in its logs.

What we do not do

No advertising, no advertising identifiers, no tracking, no analytics and no crash reporting services.
No account with us. You never sign in to PDF Label.
We do not sell or rent your information, and we do not share it with anyone except the services listed under "Who processes it for us".

Why we may use it (the legal basis)

Handling a refund you asked for, and checking your purchase: to perform our agreement with you (GDPR article 6(1)(b)).
Answering a message you sent: to take the steps you asked for, and our legitimate interest in helping the people who use the app (article 6(1)(b) and (f)).
Keeping out fake requests and repeat refunds: our legitimate interest in preventing fraud and abuse (article 6(1)(f)).
Keeping records of purchases and refunds: our legal obligations, such as tax law (article 6(1)(c)).

Where we rely on our legitimate interest, you may object; see "Your rights".

Giving us your email address is needed only if you want an answer to a message. Nothing else in the app depends on giving us any information.

Who processes it for us

Google (Google Play, Google Play Integrity and the Google Play Developer API): to confirm that requests are genuine, to check purchases and refunds, and to keep the refund flag described above. Google's privacy policy: policies.google.com/privacy
Cloudflare: carries the connection between the app and our server and protects the server from attacks. To do that it decrypts the connection, so it can see the request, including your IP address.
Leaseweb, from which we rent our server, in Amsterdam, the Netherlands.
Microsoft (Microsoft 365): delivers our email, including our answers to you.

These companies process the data on our behalf, under a data processing agreement.

Outside the European Economic Area

Google, Cloudflare and Microsoft may process data outside the European Economic Area, including in the United States. Where they do, the transfer is protected by the EU-US Data Privacy Framework, for companies certified under it, or by the European Commission's standard contractual clauses.

How long we keep it

Messages and your email address: 1 year after your question has been dealt with, after which they are deleted. A message about an invoice or a payment is kept for 7 years after the end of the financial year it belongs to, as tax law requires.
Refund requests and purchase records: 7 years after the end of the financial year they belong to, for tax purposes. A declined request is kept at least 3 years, so it is still there if you ask us about it.
Google Play Integrity tokens: at most 14 days.
The refund flag kept by Google: up to 3 years after the app was last used on the device.
Our server's logs: 14 days.

Automated decisions

A second refund request from a device that already had a refund is declined automatically, based on the flag described above. You have the right to have a person look at that decision: contact us, explain your situation (for example, if you bought the device second-hand), and a person will review it.

No other decisions about you are made automatically, and we do not build profiles.

Your rights

Under the GDPR you have the right to:

see the personal data we hold about you, and get a copy of it;
have it corrected if it is wrong;
have it deleted;
have its use limited;
receive it in a form you can take elsewhere;
object to our use of it where we rely on our legitimate interest.

Write to developer@pdflabel.nl or use the contact form. We answer within one month. Because we keep no account and no name, we may ask for your purchase's order number to find your data. Some records we must keep for a set period by law; if so, we tell you which and for how long.

You can also complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). You may also complain in the country where you live or work.

Security

Everything between the app and our server is sent over an encrypted connection (HTTPS). Printer passwords are stored encrypted on your device. Our server only accepts requests that Google Play Integrity has confirmed came from the genuine app.

Children

PDF Label is not directed at children under 16, and we do not knowingly receive information from them.

Translations

This policy was written in English. The versions in other languages are machine translations, provided as a service. If a translation differs from the English text, the English text applies.

Changes

If we change this policy, the new version appears in the app and on our website with a new date. If a change means the app sends something it did not send before, the app will say so where it sends it.

Privacy notice (website)