Version 1.4 — Last Updated and Effective: 29 July 2026
These public documents apply to AllPDF, Writer Studio, and other HAFYCH Apps as stated in the text. They distinguish Consumer rights from additional Business User terms. Mandatory rights under applicable law are not excluded.
AllPDF product and privacy page · Русская версия страницы AllPDF · Writer Studio product page · Business-to-Business Data Processing Addendum · Privacy Policy · Terms of Use
PART I
| *Last Updated: 29 July 2026 | Effective Date: 29 July 2026* |
IMPORTANT: THE APPS ARE FOR PERSONS AGED 18 OR OLDER. THESE TERMS APPLY TO BOTH CONSUMERS AND BUSINESS USERS. SPECIAL BUSINESS-ONLY PROVISIONS APPLY WHEN AN APP IS USED FOR TRADE, BUSINESS, CRAFT, PROFESSION, ORGANIZATIONAL, INSTITUTIONAL, OR OTHER NON-CONSUMER PURPOSES. MANDATORY CONSUMER RIGHTS ARE NOT EXCLUDED.
By checking an acceptance box, tapping an acceptance or continuation control after a clear link to these Terms is presented, downloading or installing an App, starting a purchase or subscription, restoring a purchase, or otherwise accessing or using an App, you agree to these Terms. If you do not agree, do not access, purchase, install, or use the Apps.
For a Business User, general acceptance of these Terms does not replace the separate express acceptance of Section 18.7 required by Sections 3.2 and 4.4. No Business User license, subscription entitlement, deployment right, or other permission to use an App arises unless that separate acceptance is completed.
The Privacy Policy in Part II explains data processing and forms part of this package. A privacy notice is not, by itself, consent. Where consent is legally required, it must be requested separately through an appropriate affirmative mechanism.
The Apps are provided by Nazarii Hafych, a natural person and independent software developer acting in his own name under the unregistered HAFYCH brand. HAFYCH is a brand name and is not a separate company, partnership, corporation, or other legal entity.
Legal name: Nazarii Hafych
Brand / trading name: HAFYCH (unregistered)
Public contact address: Kharkiv Oblast, Kharkiv District, village of Borshchova, Bazivska Street 10, Ukraine
Telephone: +48 571 088 639
General, support, privacy, security, billing, and legal email: nazariihafych@gmail.com
Website: https://hafych.github.io/
The public contact address is provided for identification and public contact purposes. It is not represented as a guaranteed postal service address. Unless mandatory law requires a different method, formal notices to HAFYCH must be sent electronically to the email above with the subject line “LEGAL NOTICE” or “PRIVACY REQUEST,” as applicable.
Google, Apple, another app store, RevenueCat, or another provider may distribute an App, validate entitlements, facilitate subscriptions, process payments, issue refunds, or act as marketplace operator, billing intermediary, reseller, commissionaire, or merchant of record. Those providers are not HAFYCH and may impose additional terms. Their role does not transfer ownership of an App or eliminate these Terms.
“App” or “Apps” means any application, software, feature, website, documentation, update, subscription, digital product, or related service made available by Nazarii Hafych under the HAFYCH brand, unless a separately signed agreement expressly states otherwise.
“Consumer” means a natural person acting wholly or mainly outside that person’s trade, business, craft, or profession, as determined under mandatory applicable law.
“Business User” means a person or organization using an App wholly or mainly for trade, business, craft, professional, institutional, governmental, organizational, or other non-consumer purposes.
“User Content” means files, text, notes, documents, images, audio, settings, metadata, prompts, credentials, keys, exports, backups, and other material selected, created, stored, opened, imported, exported, synchronized, or otherwise handled by a user through an App.
“Third-Party Service” includes Google Play, Google Drive, Dropbox, a user-selected AI provider, Apple file services, RevenueCat, GitHub Pages, operating systems, device manufacturers, payment providers, networks, and other external services used by or connected to an App.
These Terms apply to all Apps unless App-specific terms expressly override a provision. A separately signed written agreement controls only to the extent it expressly identifies and overrides these Terms.
You must be at least 18 years old and have legal capacity to enter into these Terms. HAFYCH does not operate a user-account system, does not ask for a date of birth as part of account registration, and does not independently verify age. The absence of technical age verification does not authorize use by a person under 18.
If you use an App for or on behalf of an organization, you represent that you have authority to accept these Terms for that organization. The organization is bound by the generally applicable provisions of these Terms once an authorized person accepts them, obtains an entitlement, deploys the App, permits use, or receives the benefit of use. If you falsely claim authority, you remain personally responsible for your own conduct and any resulting loss to the maximum extent permitted by law.
An organization’s duly authorized representative must separately and expressly accept Section 18.7 before any Business User license, subscription entitlement, deployment right, or other permission to use an App arises. General acceptance of these Terms, a purchase, download, installation, deployment, or use, standing alone, does not replace the separate acceptance required for Section 18.7. If the separate acceptance has not been completed, any purported Business User access or use is unauthorized.
You consent to electronic contracting, electronic notices, and electronic records. To the extent available and lawful, app-store records, purchase receipts, entitlement records, App version information, timestamps, support correspondence, device or App-instance identifiers, and records of an acceptance control may be used to establish assent, purchase, entitlement, and compliance.
Separate acceptance of Section 18.7 may be evidenced by a signed electronic or paper document, a separately presented electronic checkbox or acceptance control, an order form, a platform workflow, correspondence from an authorized corporate email address, or another reliable electronic record. The acceptance record may identify the Business User, its authorized representative, the representative’s authority or position, the App or entitlement, the Terms version, the Section 18.7 version, and the date and time of acceptance.
HAFYCH does not promise that every general acceptance event will be stored on a HAFYCH server because HAFYCH does not operate its own user-account backend. That architectural limitation does not waive the separate acceptance requirement for Section 18.7 or prevent the parties from proving acceptance through another reliable record.
Your legal classification depends on the actual purpose of use and mandatory law, not merely on a label. General provisions apply to every user. Sections expressly addressed to Business Users apply only when you are a Business User. A Consumer retains all rights that mandatory law does not permit these Terms to waive or restrict.
Subject to these Terms, payment of any applicable fee, and successful platform or entitlement validation, HAFYCH grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to install and use the applicable App on devices you own or control, during the applicable purchase or subscription term, for lawful purposes and within the purchased feature, device, platform, seat, and entitlement limits.
For a Consumer, the license is for personal use. For a Business User, the license is for internal business or professional use unless a written plan expressly authorizes another use. The App is licensed, not sold. No ownership of source code, object code, designs, algorithms, documentation, branding, or other intellectual property is transferred.
Except to the extent a restriction is prohibited by mandatory law, you must not, and must not enable or assist another person to:
copy, modify, adapt, translate, distribute, sell, resell, rent, lease, lend, sublicense, assign, transfer, host, make available, or commercially exploit an App except as expressly authorized;
reverse engineer, decompile, disassemble, decrypt, reconstruct, discover, or attempt to extract source code, algorithms, data structures, models, keys, tokens, purchase validation, entitlement logic, or technical-protection measures;
remove, obscure, or alter copyright, attribution, proprietary, security, license, or legal notices;
bypass, disable, overload, interfere with, or defeat security, access controls, subscriptions, purchases, entitlements, rate limits, anti-abuse, anti-fraud, or technical-protection mechanisms;
share, sell, publish, transfer, or reuse purchase tokens, credentials, keys, entitlement identifiers, or subscription access in excess of the purchased scope;
scrape, crawl, harvest, mirror, automate access to, or extract data from an App except through a function expressly intended for that purpose;
conduct vulnerability scanning, penetration testing, exploitation, fuzzing, or security research against an App or related provider account without prior written authorization and an agreed scope;
use non-public aspects of an App or its documentation to develop, train, validate, benchmark for publication, market, support, or operate a competing product or service;
use an App in a way that violates platform rules, Third-Party Service terms, law, or another person’s rights; or
permit use by a person who has not accepted and complied with these Terms where acceptance is required.
An App may contain components governed by separate open-source or third-party licenses. Those licenses control solely for the relevant components to the extent they expressly require a different result. No open-source license grants rights to proprietary portions of an App.
All rights not expressly granted are reserved. No right arises by implication, estoppel, course of dealing, trade usage, or exhaustion beyond what mandatory law requires.
For a Business User, express and separate acceptance of Section 18.7 by a duly authorized representative is a condition precedent to the creation and continuation of every license, subscription, entitlement, deployment right, or other permission to use an App.
To the maximum extent permitted by law, no Business User license or entitlement arises unless that acceptance has been completed and recorded. Any purported Business User access or use without the required acceptance is unauthorized and does not create an implied license, waiver, estoppel, or course of dealing. Once the Business User separately accepts Section 18.7, that acceptance applies to the relevant current and renewed Business User entitlement unless a material amendment requires a new separate acceptance under Section 20.
You must not use an App, directly or indirectly:
for terrorism, terrorist financing, violent extremism, unlawful armed activity, or incitement of violence;
for fraud, phishing, scams, impersonation, identity theft, money laundering, deceptive practices, unauthorized transactions, or abusive chargebacks;
to create, possess, solicit, distribute, or facilitate unlawful exploitative content, including child sexual abuse material, sexual exploitation, or non-consensual intimate content;
to distribute malware, spyware, ransomware, credential stealers, botnets, viruses, worms, exploits, or harmful code;
to gain unauthorized access to a device, account, network, service, file, key, system, or data;
to harass, threaten, stalk, dox, defame, deceive, exploit, intimidate, or unlawfully harm another person;
to scrape, collect, disclose, or otherwise process personal data without a lawful basis or required notice;
to infringe intellectual property, confidentiality, privacy, publicity, contract, employment, or trade-secret rights;
for spam, unlawful marketing, or unsolicited communications;
for emergency, life-safety, medical diagnosis or treatment, nuclear, aviation, military targeting, critical-infrastructure control, law-enforcement decision-making, high-risk financial decisions, or another use where malfunction or error could cause death, serious injury, unlawful deprivation of rights, or major property or environmental damage;
in violation of sanctions, export controls, anti-corruption, anti-bribery, privacy, consumer-protection, tax, communications, competition, or other applicable law;
to evade age, geographic, sanctions, payment, purchase, entitlement, device, or platform restrictions; or
in any manner that creates a material legal, security, operational, financial, platform, or reputational risk to HAFYCH, a provider, or another person.
Prohibited conduct includes attempting, directing, assisting, instructing, financing, concealing, or facilitating the conduct through another person, device, organization, identifier, integration, or service.
You retain any rights you lawfully hold in User Content. You grant HAFYCH only the limited, worldwide, royalty-free permission necessary to operate a requested feature, respond to support you initiate, verify an entitlement, protect the App, comply with law, or otherwise perform these Terms. This permission ends when no longer necessary, subject to lawful retention and records requirements.
HAFYCH does not currently offer a HAFYCH account or content-storage service for ordinary User Content. Depending on the requested feature and platform, User Content may be handled by the App, the operating system, a user-selected Third-Party Service, or HAFYCH support when the user sends it for support. HAFYCH can access, retrieve, restore, or delete only content that it actually receives or controls.
Where an App offers Google Drive or Dropbox, or lets you select a folder or file provider exposed by the operating system, files and related metadata may be handled by the App, device, operating system, and selected provider. Connecting a provider does not start automatic synchronization: AllPDF starts a transfer only after the user selects a cloud destination and confirms it. On Apple platforms a user-selected folder can include iCloud Drive when the operating system exposes it; HAFYCH does not operate a separate CloudKit or iCloud content service. Provider permissions, authentication tokens, file references, synchronization data, and file contents are governed by the relevant feature and provider. HAFYCH may receive a file if you separately send it for support.
You are responsible for backups, exports, recovery material, passwords, and deletion from every location. Uninstalling an App may not delete exported files, shared-storage files, operating-system backups, Google Drive files, files in a user-selected provider folder (including iCloud Drive where selected through the operating system), copies held by collaborators, or content sent to another service. HAFYCH does not guarantee recovery of lost, corrupted, encrypted, overwritten, or deleted content.
An App may technically allow you to store or handle information that is personal, confidential, sensitive, or regulated. HAFYCH does not request such content merely because the App can handle it. Unless an App-specific statement expressly says otherwise, the Apps are not certified or designed as a regulated medical-record system, payment-card environment, government-classified system, critical-infrastructure system, child-data service, or other specially regulated environment. You are solely responsible for determining whether an App and the selected storage provider are lawful and appropriate for the data and use case.
The Apps may depend on or interoperate with Third-Party Services, including Google Play, RevenueCat, Google Drive, Dropbox, user-selected AI providers, operating-system file providers, device manufacturers, networks, and GitHub Pages. Third parties control their own availability, security, policies, fees, processing locations, retention, and technical changes. HAFYCH does not control and is not responsible for a Third-Party Service outside HAFYCH’s reasonable control.
You must comply with applicable Third-Party Service terms. A third party may suspend, change, restrict, or discontinue a service, which may impair an App. HAFYCH is not obligated to replace or maintain compatibility with a discontinued or changed service unless mandatory law or a separately signed agreement requires it.
AllPDF and Writer Studio premium features are currently offered through Google Play and RevenueCat-supported entitlement infrastructure. The purchase screen must show the localized total price, billing period, automatic-renewal terms, trial terms when eligible, and a cancellation route before the user starts the Google Play purchase flow. RevenueCat validates purchase tokens and communicates subscription and entitlement status to the App. HAFYCH generally does not receive a full payment-card number, CVV, or complete bank-account credentials.
An auto-renewing subscription renews for successive monthly or annual billing periods until canceled through Google Play before renewal. An eligible one-month free trial converts automatically to the selected paid plan at the localized price shown before purchase unless canceled before the trial ends. The App provides access to Google Play subscription management; deleting the App does not cancel a subscription. Renewal timing, price notices, grace periods, billing retries, cancellation, restoration, and refund procedures may be controlled by Google Play. When a current subscriber changes plans, the timing and charge follow the replacement terms shown by Google Play before confirmation. AllPDF’s current monthly and annual base plans are configured to charge the new plan at the end of the current billing cycle. Another App or a future configuration may use different timing; the Google Play confirmation controls.
Refunds are handled under the applicable platform’s procedures and mandatory law. Except where mandatory law, a platform rule, or an express written offer requires otherwise, fees are non-refundable after the applicable service or entitlement has been supplied. Nothing in this Section removes a Consumer’s non-waivable remedies for non-conforming digital content or services.
Where HAFYCH directly supplies digital content before the end of a statutory withdrawal period, the supply may begin only after any consent and acknowledgment required by law. A loss of a withdrawal right applies only where mandatory legal conditions are satisfied. Purchases made through Google Play or Apple remain subject to the platform’s withdrawal and refund process.
A good-faith exercise of a statutory or platform right is not prohibited. However, fraudulent, duplicative, knowingly false, or abusive payment disputes may result in suspension or revocation of the affected entitlement and recovery of lawful costs and losses. HAFYCH may provide relevant entitlement, purchase, support, and usage records to the platform, payment provider, or competent authority.
For Consumers, displayed prices include taxes where required by law or platform rules. A Business User is responsible for taxes, duties, levies, withholding, VAT, and similar charges attributable to its purchase or use, except taxes imposed on HAFYCH’s net income. Platform tax treatment may control where the platform is merchant of record.
HAFYCH may provide, require, modify, or discontinue updates for security, compatibility, legal, platform, entitlement, or product reasons. An update may change features, storage formats, permissions, system requirements, or Third-Party Service compatibility. HAFYCH does not promise perpetual compatibility with every device, operating-system version, provider, file format, or platform.
Support may be provided through the contact email at HAFYCH’s discretion. Contact details do not create a service-level agreement, guaranteed response time, guaranteed fix, maintenance obligation, or obligation to support a particular device or version unless a separately signed agreement expressly provides one or mandatory law requires it.
To the maximum extent permitted by law, HAFYCH may suspend, restrict, revoke, or terminate access to an App or paid feature where you materially breach these Terms, evade payment or entitlement controls, create a security or legal risk, violate sanctions or platform rules, misuse a feature, or where a dependency, platform, legal permission, or product is discontinued. Where reasonably practicable and legally appropriate, HAFYCH may provide notice or an opportunity to cure. Immediate action may be taken for serious abuse, fraud, security threats, unlawful conduct, or urgent platform or legal requirements.
Termination ends the license for the affected App or feature. Provisions that by nature should survive remain effective, including payment obligations, intellectual property, user responsibility, privacy, disclaimers, liability limits, Business User indemnity, the Business User Legal-Cost Reimbursement obligation in Section 18.7, dispute resolution, and records provisions.
HAFYCH uses measures reasonably appropriate to the limited data and systems HAFYCH controls. The current architecture avoids a HAFYCH content-storage backend, but no App, device, operating system, cloud provider, network, encryption method, or transmission is completely secure.
You are responsible for securing your device, operating-system account, Google or Apple account, cloud storage, passwords, biometric access, API keys, purchase account, recovery material, exports, backups, and shared files. Malware, compromised devices, screenshots, clipboard exposure, weak credentials, unsafe cloud sharing, provider compromise, user error, or loss of recovery material may defeat security protections.
You must not send passwords, private keys, seed phrases, full card data, authentication codes, or other unnecessary secrets to HAFYCH support. If you voluntarily send diagnostic files or content, remove information not needed for the request.
The Apps, source code, object code, architecture, algorithms, documentation, interface elements, original graphics, text, icons, and other original material are owned by Nazarii Hafych or used under applicable licenses and are protected by copyright and other law. “HAFYCH” is an unregistered brand or trade name; no statement in these Terms claims that it is a registered trademark.
If you voluntarily submit a suggestion, idea, bug report, feature request, design, proposal, or other feedback, you grant Nazarii Hafych a worldwide, perpetual, irrevocable, transferable, sublicensable, royalty-free right to use, reproduce, adapt, publish, distribute, commercialize, and incorporate it without restriction or compensation. This does not transfer ownership of unrelated User Content.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE APPS ARE PROVIDED “AS IS” AND “AS AVAILABLE.”
HAFYCH disclaims all express, implied, statutory, and other warranties that may lawfully be disclaimed, including merchantability, fitness for a particular purpose, satisfactory quality, title, quiet enjoyment, non-infringement, accuracy, availability, compatibility, security, and results.
HAFYCH does not warrant that:
an App will be uninterrupted, error-free, continuously available, invulnerable, private, anonymous, or compatible with every device, platform, law, file, or provider;
bugs, vulnerabilities, data loss, corruption, or compatibility problems will be identified, prevented, or corrected;
local or cloud files, exports, imports, synchronization, backups, subscriptions, notifications, or entitlements will be recoverable, complete, timely, or error-free;
a Third-Party Service will remain available, secure, lawful, unchanged, or compatible;
an App is suitable for a medical, legal, financial, safety-critical, regulated, confidential, or other particular use case; or
information, suggestions, calculations, transformations, or outputs produced through an App will be accurate, complete, non-infringing, or suitable for reliance without independent review.
Nothing in these Terms excludes an express warranty that mandatory law requires HAFYCH to provide to a Consumer.
To the maximum extent permitted by law, Nazarii Hafych and HAFYCH are not liable for indirect, incidental, special, exemplary, punitive, enhanced, multiple, or consequential loss, or for loss of profit, revenue, opportunity, goodwill, reputation, expected savings, contracts, business interruption, data, content, files, keys, credentials, backups, or device value, whether arising in contract, tort, negligence, strict liability, statute, or another theory, even if advised that loss was possible.
To the maximum extent permitted by law, HAFYCH is not liable for loss caused by:
a Third-Party Service, app store, operating system, device, telecom provider, cloud provider, payment provider, RevenueCat, or network outside HAFYCH’s reasonable control;
your failure to maintain backups, safeguard credentials, configure permissions, manage cloud access, install updates, or follow documentation;
your illegal, prohibited, high-risk, unauthorized, or unsuitable use;
malware, device compromise, provider compromise, user error, lost recovery material, or unsafe exports or sharing;
a suspension, platform removal, sanctions restriction, legal requirement, or dependency discontinuation outside HAFYCH’s reasonable control; or
content, instructions, settings, files, integrations, or actions supplied or selected by you or another user.
For a Consumer, exclusions and caps apply only to the extent valid under mandatory law. Nothing excludes or limits liability for fraud, intentional misconduct, death or personal injury caused by negligence where such liability cannot be limited, or any statutory remedy that cannot lawfully be excluded. Where mandatory law permits a monetary cap, HAFYCH’s aggregate liability will not exceed the amount paid for the affected App or subscription during the six months before the event giving rise to the claim.
For a Business User, to the maximum extent permitted by law, the total aggregate liability of Nazarii Hafych and HAFYCH for all claims arising out of or relating to an App, purchase, subscription, these Terms, or the same or related events will not exceed the net amount actually retained by HAFYCH for the affected App from that Business User during the six months immediately preceding the first event giving rise to liability, after platform commissions, taxes collected or remitted by a platform, refunds, reversals, and chargebacks. If the Business User used only a free, trial, beta, or unpaid feature, the aggregate cap is zero to the maximum extent permitted by law.
Related acts, omissions, events, claims, users, purchases, and legal theories constitute one claim for purposes of the cap. The cap does not refresh for each claimant, user, theory, proceeding, or remedy. A remedy’s failure of essential purpose does not expand liability to the extent permitted by law.
The disclaimers and limits are an essential allocation of risk reflected in the availability and price of the Apps. They apply to the fullest extent permitted even where another remedy is unavailable. Your payment, misuse, infringement, confidentiality, data-protection, indemnity, sanctions, and Section 18.7 Legal-Cost Reimbursement obligations are not limited by HAFYCH’s liability cap.
Nothing in Sections 13, 15, or 18.7 excludes or limits liability, or requires indemnification, reimbursement, advancement, or payment, to the extent that the relevant exclusion, limitation, indemnification, reimbursement, advancement, or payment is prohibited by mandatory law. This includes any circumstance in which mandatory law does not permit contractual protection for HAFYCH’s fraud, intentional breach, intentional misconduct, or bad-faith abuse of a proceeding. Any prohibited application shall be limited only to the minimum extent required, and the remaining provisions shall continue in effect.
THIS SECTION APPLIES ONLY TO BUSINESS USERS. IT DOES NOT REMOVE NON-WAIVABLE CONSUMER RIGHTS.
A Business User represents and warrants that it:
has authority and legal capacity to enter into and perform these Terms;
will use the Apps only for lawful business or professional purposes;
will ensure that personnel and other authorized users comply with these Terms;
has all notices, rights, consents, contracts, instructions, and legal bases required for data and content it processes through an App;
will not rely on an App as a substitute for professional judgment, mandatory controls, regulated infrastructure, or independent verification;
will maintain appropriate security, backups, access control, business continuity, and internal policies; and
will comply with procurement, employment, confidentiality, sanctions, export-control, tax, privacy, and sector-specific obligations applicable to its use.
A Business User is responsible for all acts and omissions of its employees, contractors, agents, representatives, consultants, administrators, and other persons who use an App through its devices, purchases, entitlements, payment methods, instructions, or business relationship. It must promptly remove unauthorized access and protect devices, cloud accounts, files, purchase credentials, and recovery material.
Where a plan or entitlement is limited by user, device, organization, purchase, feature, or other scope, the Business User must not pool, rotate, multiplex, share, resell, or circumvent that scope. On reasonable notice where practicable, HAFYCH may request records reasonably necessary to verify purchase and entitlement compliance. HAFYCH will not request unrelated personal content merely to conduct a license verification.
If material underpayment, unauthorized sharing, or entitlement circumvention is established, the Business User must pay the applicable fees at the then-current undiscounted rate and reimburse HAFYCH’s reasonable documented enforcement costs, to the maximum extent permitted by law.
A Business User acknowledges that it has not relied on a roadmap, forecast, screenshot, demonstration, benchmark, app-store description, support statement, or other representation not expressly included in a controlling signed agreement. No purchase order, procurement portal, email footer, internal policy, or vendor form adds terms unless HAFYCH expressly accepts it in a signed writing.
To the maximum extent permitted by law, a Business User must commence any contractual claim within one year after it knew or reasonably should have known the material facts giving rise to the claim. This contractual period does not apply where a shorter or longer period is mandatory and cannot lawfully be varied.
A Business User must defend, indemnify, and hold harmless Nazarii Hafych, HAFYCH, successors, permitted assigns, and service providers from claims, proceedings, losses, liabilities, judgments, penalties, fines, taxes, damages, and reasonable documented legal and technical costs arising from or relating to:
the Business User’s User Content, instructions, integrations, data, business activities, or use or misuse of an App;
a breach of these Terms or a separately signed agreement by the Business User or its personnel;
violation of law, sanctions, export control, platform rules, confidentiality, privacy, data-protection, employment, intellectual-property, or third-party rights;
an allegation that data, content, files, instructions, or materials supplied or selected by the Business User infringe or unlawfully use another person’s rights;
failure to obtain required rights, notices, permissions, consents, contracts, or legal bases;
unauthorized purchase sharing, entitlement circumvention, fraudulent payment dispute, or unlawful redistribution; or
a high-risk or regulated use not expressly approved in a signed agreement.
HAFYCH may control the defense with counsel reasonably selected by HAFYCH. The Business User must cooperate, preserve evidence, and not settle in a manner that admits fault by or imposes obligations on HAFYCH without prior written consent. HAFYCH will provide reasonably prompt notice where failure to do so would materially prejudice the defense. This Section does not require indemnity for loss finally determined to have resulted solely from HAFYCH’s fraud, intentional breach, intentional misconduct, or bad-faith abuse of a proceeding.
The Apps are not available to any person, entity, territory, or jurisdiction where provision or use would violate sanctions, export controls, platform restrictions, or other applicable law. You represent that you are not prohibited or restricted from receiving the App and will not export, re-export, transfer, or make it available in violation of applicable rules, including rules applicable to HAFYCH, the user, the relevant platform, and payment or service providers.
HAFYCH may block or discontinue availability where reasonably necessary to comply with sanctions, export controls, platform requirements, provider restrictions, or legal advice. No refund is owed for a suspension caused by your prohibited status or conduct except where mandatory law or platform rules require otherwise.
Formal legal notices must be emailed to nazariihafych@gmail.com with the subject “LEGAL NOTICE.” A notice should include the claimant’s legal name and contact details, the App and transaction involved, the facts and legal basis, the requested relief, and key supporting documents. A privacy request should use the subject “PRIVACY REQUEST.”
HAFYCH may provide notices through an App, the Website, a store listing, the platform used for purchase, or an email or other contact you supplied. Unless mandatory law requires another rule, email is deemed received on the next business day if no non-delivery notice is received, and an in-App or posted notice is received when displayed or made reasonably available.
Before commencing a direct contractual claim against HAFYCH, the claimant should send a written notice under Section 17. The parties will attempt in good faith to resolve the dispute. A Consumer may commence proceedings after 30 calendar days from receipt if unresolved. A Business User must allow 90 calendar days. This procedure does not prevent an urgent request for interim relief, a complaint to a regulator or platform, exercise of a non-waivable consumer right, or action needed to preserve a limitation period.
A Consumer may use any court, alternative dispute-resolution body, regulator, or complaint mechanism available under mandatory law. Nothing in these Terms requires a Consumer to arbitrate a dispute or prevents a Consumer from bringing proceedings in a court that mandatory consumer-jurisdiction rules make available. HAFYCH may bring proceedings against a Consumer only in a forum permitted by mandatory law.
Any dispute, controversy, or claim between HAFYCH and a Business User arising out of or relating to these Terms, an App, a purchase, a subscription, a license, its conclusion, interpretation, performance, breach, termination, or invalidity, and which may lawfully be referred to international commercial arbitration under the Law of Ukraine “On International Commercial Arbitration,” as amended from time to time, shall be finally resolved by the International Commercial Arbitration Court at the Ukrainian Chamber of Commerce and Industry (ICAC at the UCCI) under its Rules in force when the claim is filed.
The seat of arbitration is Kyiv, Ukraine. The tribunal consists of one arbitrator unless the ICAC Rules require otherwise. The language is Ukrainian unless HAFYCH agrees in writing to English or the tribunal determines another language is necessary under the Rules. The substantive law is the law of Ukraine, subject to Section 19. The arbitration agreement is separable from the remaining Terms, and the tribunal may rule on its own jurisdiction.
A Business dispute not subject to Section 18.3 will be submitted to a competent court of Ukraine, subject to mandatory jurisdiction rules. The parties consent to the maximum lawful territorial jurisdiction associated with the Provider’s stated Ukrainian contact location, without preventing interim or enforcement proceedings in another competent court.
Nothing prevents HAFYCH from seeking interim, injunctive, conservatory, protective, evidentiary, asset-preservation, or enforcement relief in a competent court or before a platform or provider, including for intellectual property, non-payment, fraud, unauthorized access, entitlement circumvention, confidentiality, security, data misuse, evidence preservation, or unlawful redistribution.
To the maximum extent permitted by law, direct claims by a user must be brought on an individual basis and not as a plaintiff or class member in a purported class, collective, coordinated, consolidated, representative, or mass proceeding. For Business Users, no claims of different claimants may be consolidated and no representative proceeding may be pursued without HAFYCH’s prior written consent, except where mandatory law or the applicable tribunal rules require otherwise.
This Section does not restrict a regulator, public authority, or qualified entity from exercising powers that applicable law does not allow a contract to waive, including a legally authorized representative action for collective consumer interests.
For a Consumer, costs, fees, expenses, and advances shall be allocated only in accordance with mandatory applicable law and the applicable court, regulatory, platform, or alternative-dispute-resolution rules.
IMPORTANT BUSINESS USER NOTICE: THIS SECTION IS A MATERIAL AND ESSENTIAL CONDITION OF EVERY BUSINESS USER LICENSE. A BUSINESS USER MAY NOT ACCESS, INSTALL, PURCHASE, SUBSCRIBE TO, DEPLOY, DISTRIBUTE WITHIN AN ORGANIZATION, OR USE AN APP UNLESS A DULY AUTHORIZED REPRESENTATIVE HAS EXPRESSLY AND SEPARATELY ACCEPTED THIS SECTION.
To the maximum extent permitted by mandatory law, each Business User shall bear and reimburse Nazarii Hafych, trading as HAFYCH, for all reasonable, actually incurred, and documented Legal Costs arising out of or relating to any dispute, controversy, claim, counterclaim, demand, investigation, complaint, court proceeding, arbitration, challenge, appeal, recognition, enforcement, settlement, or other legal or administrative proceeding concerning:
an App, including AllPDF, Writer Studio, or any other HAFYCH App;
a purchase, subscription, entitlement, license, deployment, or use of an App;
these Terms or any separately signed agreement;
the Business User’s User Content, instructions, personnel, integrations, conduct, or business activities; or
the relationship between HAFYCH and the Business User,
(each a “Business Dispute”).
The Business User’s reimbursement obligation applies regardless of:
which party commenced the Business Dispute;
whether HAFYCH acts as claimant, respondent, counterclaimant, defendant, interested party, or otherwise;
the forum, jurisdiction, procedural posture, or remedy requested;
whether HAFYCH is treated as the prevailing or successful party;
whether HAFYCH prevails on none, some, or all of its claims, counterclaims, defenses, objections, or applications;
whether an arbitral award, judgment, decision, order, or settlement grants relief wholly or partly against HAFYCH; or
whether the Business Dispute is dismissed, discontinued, withdrawn, settled, terminated, or otherwise resolved without a determination that HAFYCH prevailed.
FOR THE AVOIDANCE OF DOUBT, THE BUSINESS USER MUST REIMBURSE THE COVERED LEGAL COSTS EVEN WHERE HAFYCH DOES NOT PREVAIL IN THE ARBITRATION OR OTHER PROCEEDING, INCLUDING WHERE AN ARBITRAL AWARD, JUDGMENT, DECISION, OR ORDER IS ENTERED WHOLLY OR PARTLY AGAINST HAFYCH.
“Legal Costs” includes, without limitation:
arbitration registration fees, arbitration fees, deposits, advances, tribunal fees, and institutional charges;
court, filing, service, recognition, enforcement, appellate, and execution fees;
lawyers’, advocates’, solicitors’, barristers’, consultants’, and other professional advisers’ fees;
expert, forensic, technical, accounting, investigation, evidence-preservation, document-production, translation, interpretation, and transcription costs;
witness, travel, accommodation, courier, communication, administrative, and collection costs;
costs relating to interim, conservatory, injunctive, protective, evidentiary, or asset-preservation measures;
costs of settlement negotiations, mediation, challenge, appeal, recognition, enforcement, and recovery; and
applicable taxes, duties, and charges imposed on those amounts.
Upon a reasonable written request supported by a written estimate, engagement letter, fee request, institutional request, invoice, or other reasonable information, the Business User shall advance reasonable amounts for imminent Legal Costs. The Business User shall pay the requested advance within ten (10) calendar days after receipt, or within a shorter period where reasonably necessary to meet a court, tribunal, institution, lawyer, expert, or enforcement deadline and the Business User is given as much notice as reasonably practicable. Each advance shall be reconciled against the amount actually incurred, and any unused balance shall be credited or returned.
Amounts not advanced shall be reimbursed within ten (10) calendar days after a written demand accompanied by invoices, receipts, engagement records, payment records, cost schedules, or other reasonable evidence of the relevant Legal Costs.
The parties expressly intend this Section to create an independent substantive contractual payment obligation and an agreed allocation of financial risk. It is not limited to, and does not depend upon, a procedural application for costs, a prevailing-party rule, or the default allocation of costs under any arbitration, court, or institutional rules.
HAFYCH may assert this obligation as a claim, counterclaim, contractual debt, set-off, defense, or request for relief in the relevant proceeding or in a separate proceeding permitted by Sections 18.3 through 18.5 and mandatory law. The Business User shall not contend that HAFYCH’s failure to prevail, by itself, extinguishes or reduces this contractual obligation.
This obligation:
is an essential condition of the price, availability, and grant of every Business User license;
survives expiration, suspension, revocation, and termination of the license or these Terms;
is not subject to the liability cap in Section 13.3; and
applies in addition to the Business User’s obligations under Section 15.
HAFYCH shall not obtain double recovery. Any amount actually recovered by HAFYCH for the same Legal Cost under a cost award, judgment, settlement, insurance payment, indemnity, or payment by another person shall be credited against the amount payable by the Business User.
This Section does not require the Business User to pay a particular Legal Cost to the extent that a final and binding decision expressly determines that the particular cost:
was not actually incurred, except for a properly requested and reconciled advance;
was not reasonably related to the Business Dispute;
was unreasonable or manifestly disproportionate;
is prohibited from being shifted by mandatory law;
constitutes a personal, punitive, or non-waivable sanction imposed directly on HAFYCH; or
was caused solely by HAFYCH’s fraud, intentional breach, intentional misconduct, or bad-faith abuse of the proceeding.
Except for the limitations expressly stated above, the parties request every competent court and arbitral tribunal to give full effect to this agreed allocation of Legal Costs to the maximum extent permitted by law. If any part of this Section is invalid or unenforceable, it shall be limited or reformed only to the minimum extent necessary, and the remainder shall continue in effect.
These Terms and non-contractual obligations arising from them are governed by the law of Ukraine, excluding conflict-of-laws rules, except to the extent a mandatory rule requires another result. For a Consumer, this choice does not deprive the Consumer of mandatory protection provided by the law of the country in which the Consumer habitually resides where applicable conflict-of-laws rules preserve that protection.
If a provision is invalid or unenforceable, it will be limited or reformed only to the minimum extent necessary, and the remainder will continue in force. No provision requires conduct prohibited by mandatory law.
HAFYCH may update these Terms for legal, security, platform, provider, feature, or operational reasons. The revised version will identify its effective date and be posted on the Website, in an App, or through the relevant platform. A change will not retroactively eliminate a vested Consumer right or impose a material new payment obligation without any notice or consent required by law.
Continued use after the effective date constitutes acceptance to the extent permitted by law. If you do not accept a change, you must stop using the affected App and cancel any future renewal through the platform. Terms applicable at the time of a completed purchase continue to govern acquired rights to the extent mandatory law requires.
A material amendment to Section 18.7, including an expansion of the categories of covered Legal Costs or Business Disputes, does not bind a Business User unless a duly authorized representative separately and expressly accepts the amended Section 18.7. Until that new acceptance occurs, the last separately accepted version continues to govern to the extent permitted by law.
These Terms, the Privacy Policy, the Current Technical and Privacy Schedule, the Business-to-Business Data Processing Addendum where applicable, applicable App-specific terms, and any separately signed agreement form the entire agreement concerning the Apps. A separately signed agreement controls to the extent of an express conflict. Platform terms control only for the platform-controlled matter. Marketing, screenshots, store descriptions, support communications, and documentation do not create a warranty or obligation beyond mandatory law unless expressly incorporated into a signed agreement.
You may not assign or transfer these Terms or an entitlement without prior written consent, except where mandatory law permits transfer. HAFYCH may assign or transfer these Terms in connection with a sale, reorganization, financing, inheritance, succession, merger, transfer of an App or intellectual property, or another lawful business transfer, provided mandatory Consumer rights are preserved.
Failure or delay in enforcing a right is not a waiver. A waiver must be express and applies only to the specific circumstance stated.
These Terms do not create employment, agency, partnership, fiduciary, franchise, joint venture, or exclusive relationship. Neither party may bind the other except as expressly stated.
To the maximum extent permitted by law, HAFYCH is not liable for delay, interruption, degradation, or non-performance caused by events beyond reasonable control, including war, invasion, civil unrest, sanctions, government action, app-store or provider action, telecommunications or power failure, cloud or platform outage, cyberattack not caused by HAFYCH’s intentional misconduct, natural disaster, epidemic, supplier failure, or operating-system change. This does not exclude a mandatory Consumer refund or remedy that cannot lawfully be waived.
The controlling language is English. A translation may be provided for convenience. Where mandatory law requires a local-language version to control for a particular Consumer or transaction, that requirement prevails only to the necessary extent.
For an App obtained through Google Play or Managed Google Play, the agreement is between you and HAFYCH, not Google, except to the extent Google’s mandatory terms state otherwise. Google may distribute the App, process payments, manage subscriptions, restore purchases, or enforce platform rules. HAFYCH is responsible for the App and App support to the extent stated in these Terms or required by law. You must comply with Google Play terms and may manage subscriptions and refunds through Google’s interfaces.
The Privacy Policy and Current Technical and Privacy Schedule must be read together with the Google Play Data safety section. HAFYCH is responsible for keeping store declarations consistent with the released App and embedded SDKs. Because HAFYCH does not offer a HAFYCH user-account system, an in-App HAFYCH account-deletion function is not currently applicable; requests concerning data HAFYCH or RevenueCat controls may be sent to the contact email.
This Section applies only if an App is later distributed through Apple. The license is between you and HAFYCH, not Apple. HAFYCH, not Apple, is responsible for the App, maintenance, support, warranties that cannot be disclaimed, product claims, legal compliance, and intellectual-property claims to the extent required by law. The license is limited to Apple-branded products you own or control as permitted by Apple’s usage rules. Apple has no maintenance or support duty.
If an Apple-distributed App fails to conform to a warranty that cannot be disclaimed, you may notify Apple and Apple may refund the purchase price under its terms. Apple has no other warranty obligation to the maximum extent permitted. You must comply with applicable third-party agreements and represent that you are not prohibited by applicable United States sanctions or restricted-person lists. Apple and its subsidiaries are intended third-party beneficiaries of this Apple-specific Section and may enforce it.
Nazarii Hafych / HAFYCH: Natural person and independent software developer
Public contact address: Kharkiv Oblast, Kharkiv District, village of Borshchova, Bazivska Street 10, Ukraine
Telephone: +48 571 088 639
Email: nazariihafych@gmail.com
Website: https://hafych.github.io/
PART II
| *Last Updated: 29 July 2026 | Effective Date: 29 July 2026* |
SUMMARY: HAFYCH DOES NOT CURRENTLY OFFER A HAFYCH USER ACCOUNT OR CONTENT-STORAGE SERVICE FOR ORDINARY USER CONTENT. USER-SELECTED PROVIDERS PROCESS CONFIRMED CLOUD TRANSFERS. REVENUECAT AND APP STORES PROCESS PURCHASE AND ENTITLEMENT DATA. HAFYCH MAY PROCESS SUPPORT EMAILS AND LIMITED PURCHASE INFORMATION AVAILABLE THROUGH PROVIDER DASHBOARDS.
For personal data processed by HAFYCH for its own purposes, the controller is Nazarii Hafych, acting under the HAFYCH brand. HAFYCH is not a separate legal entity.
Controller: Nazarii Hafych
Public contact address: Kharkiv Oblast, Kharkiv District, village of Borshchova, Bazivska Street 10, Ukraine
Telephone: +48 571 088 639
Privacy email: nazariihafych@gmail.com
Website: https://hafych.github.io/
No data protection officer has been appointed. Privacy requests are handled directly by Nazarii Hafych through the email above. This statement does not prevent appointment of a data protection officer or representative if later required by law.
This Privacy Policy applies to the Apps and Website. Actual processing varies by App, operating system, permissions, purchase status, provider configuration, and feature selection. Part III states the current shared architecture known to HAFYCH. A store disclosure or permission prompt may provide additional App-specific detail.
HAFYCH acts as controller for data it decides to process for support, legal notices, security, entitlement administration, enforcement, product management, and its own compliance. HAFYCH may receive limited purchase and subscription information through Google Play or RevenueCat dashboards even though it does not process the underlying payment card.
An organization using an App for its own purposes normally determines why and how its personnel or other persons’ content is handled and is responsible for its own notices, legal bases, permissions, employment rules, security, and data-subject requests. HAFYCH acts as processor only to the extent it processes personal data on documented instructions for a Business User and the separately published Business-to-Business Data Processing Addendum applies.
Google, Apple, RevenueCat, Google Drive, Dropbox, a user-selected AI provider, GitHub, operating-system file providers, device manufacturers, and other providers may act as processors, service providers, or independent controllers depending on the service and legal context. Their own privacy notices govern processing they independently determine.
No HAFYCH account system. Users do not create a HAFYCH username or password.
No HAFYCH content backend. HAFYCH does not operate a server that stores ordinary User Content.
Local or user-selected storage. Content may remain on the device, be sent directly to Google Drive or Dropbox after a user-confirmed transfer, or be stored in a folder or file provider that the user selects through the operating system.
Optional AI transfer. AllPDF can send a bounded amount of extracted document text—not the PDF file itself—to the AI provider selected and configured by the user, but only after the user invokes an AI action and confirms the document-specific transfer.
Subscription infrastructure. RevenueCat and the relevant app store may process purchase history, App User IDs, receipts or purchase tokens, entitlement status, and technical metadata.
Direct support. HAFYCH may receive email, attachments, screenshots, or diagnostic information only when a person contacts support or sends a legal or privacy request.
Static Website. The Website is hosted through GitHub Pages; GitHub may process request and security data under its own terms.
The absence of a HAFYCH backend does not mean that no data leaves a device. App stores, RevenueCat, selected cloud providers, operating systems, and network providers may process data needed for their functions.
Depending on the App, local User Content may include files, notes, text, settings, metadata, documents, images, audio, exports, backups, or other material selected by the user. HAFYCH does not receive ordinary local content merely because the App stores or displays it. Local content remains under the control of the device, operating system, user, and any selected storage provider.
When a user enables Google Drive or Dropbox, or chooses a folder or file provider through the operating system, the App and provider may process selected file contents, names, identifiers, folder references, metadata, timestamps, synchronization status, authorization scopes, tokens, and error information necessary for the requested action. Google Drive uses the narrow drive.file scope. AllPDF never treats connection as upload authorization: a result file is read and uploaded only after the user selects the provider and confirms the transfer. A folder exposed by an Apple operating system can be backed by iCloud Drive, but the current Apps have no separate HAFYCH CloudKit content backend. Transfers occur directly between the device and selected provider; HAFYCH has no content server that receives the file.
RevenueCat may process an App User ID assigned by its SDK or provided by the App, purchase history, product identifiers, store, subscription status, entitlement status, trial status, renewal, cancellation, expiration, refund and transaction events, receipt or purchase-token information, currency, locale, country or region, App version, platform version, SDK version, and timestamps. HAFYCH may access customer and transaction views in the RevenueCat dashboard for entitlement support, purchase analytics, fraud prevention, and product operation.
HAFYCH does not operate its own user-account system and does not require a name, email address, or telephone number to create a HAFYCH account. The inspected AllPDF and Writer Studio release configurations use automatically generated anonymous RevenueCat App User IDs, do not set RevenueCat Customer Attributes or advertising identifiers, and have no third-party analytics or attribution integration. There is no application webhook because there is no HAFYCH subscription backend; Google Play real-time developer notifications are connected directly to RevenueCat for subscription-state updates. Store declarations must be updated if this configuration changes.
The relevant app store may process account information, payment information, device and technical data, purchase history, receipts, order identifiers, country or region, tax information, refund status, and fraud or security signals. HAFYCH generally receives only limited product, transaction, entitlement, refund, and status information necessary to supply or support the purchase. HAFYCH does not receive a complete payment-card number or CVV from the app store.
If you contact HAFYCH, HAFYCH may process your email address, name if provided, organization if provided, message, attachments, screenshots, device or App information, purchase information, RevenueCat App User ID, diagnostic details, and HAFYCH’s response and internal notes. Do not provide information that is not necessary for the request.
The Website is hosted at https://hafych.github.io/ using GitHub Pages. GitHub and network providers may process IP address, browser and device information, request time, requested page, referrer, security events, cookies or similar data, and logs under their own terms. HAFYCH does not intentionally place advertising cookies or run its own advertising network on the static Website.
An App, operating system, app store, or embedded provider may process App version, package or bundle identifier, device type, operating-system version, locale, region, timestamps, installation or App-instance identifiers, network information, and error or performance information necessary to operate the App, enforce purchases, or provide a selected feature. HAFYCH does not state that every listed data type is collected by every App.
An App may keep limited diagnostic or UX events locally for the current App session and may print them to debug logs in a debug build. The current releases do not send those events to a HAFYCH analytics backend. RevenueCat separately processes subscription and purchase analytics as described above.
Writer Studio editor AI actions create copy-ready prompts and place them on the device’s system clipboard. They do not automatically send manuscript text to HAFYCH, OpenAI, or another AI provider. Clipboard content is controlled by the operating system and user; it leaves the device only if the user pastes or otherwise sends it to an external service.
AllPDF lets the user configure OpenAI, Anthropic, or an OpenAI-compatible endpoint. Selecting a PDF remains local and does not start a network request. On the first AI action for each selected document, AllPDF identifies the provider and host, states the exact character count, and requests confirmation. If confirmed, AllPDF sends only the bounded extracted text needed for that action; the PDF file itself is not sent through the AI flow. The selected provider independently controls its processing, retention, model-improvement, security, and international transfers under the user’s relationship with that provider. API credentials entered by the user are stored through the device’s secure-storage facility where supported and are not sent to HAFYCH.
An App may request a device permission only when required for a user-selected function. The operating system presents the applicable permission description and allows the user to grant, deny, or revoke access. Denial may prevent the relevant feature from working. No permission should be treated as authorization for an unrelated purpose. Exact permissions must remain consistent with the released App and store listing.
Based on the current stated configuration, HAFYCH does not intentionally:
operate a HAFYCH user-account database or require a HAFYCH username and password;
operate a backend that stores ordinary User Content;
receive complete payment-card numbers, CVV values, or online-banking passwords;
sell User Content or personal data;
use an HAFYCH advertising network or intentionally track users across unrelated apps or websites for targeted advertising;
ask for a date of birth or independently verify age;
employ personnel or contractors who routinely access User Content; or
collect sensitive content merely because a user stores it locally or in a user-selected cloud account.
This Section is limited to HAFYCH’s intentional practices. Operating systems, app stores, RevenueCat, cloud providers, GitHub, and networks may process data independently. A released build or provider configuration that introduces another data flow must be disclosed before or when it becomes active.
Where the GDPR, UK GDPR, or another law requires a legal basis, HAFYCH may process personal data for the following purposes and bases:
| Purpose | Typical data | Typical legal basis |
|---|---|---|
| Provide and restore purchases and entitlements | Purchase history, App User ID, product and entitlement status | Performance of contract; legitimate interests in reliable licensing and fraud prevention |
| Respond to support, privacy, security, and legal requests | Email, message, attachments, identifiers, diagnostic details | Performance of contract or pre-contract steps; legitimate interests; legal obligation |
| Protect Apps, users, rights, and provider accounts | Security, entitlement, transaction, abuse, and communication records | Legitimate interests; legal obligations; establishment, exercise, or defense of legal claims |
| Comply with law, sanctions, tax, accounting, platform, and court requirements | Transaction, identity, correspondence, and legal records | Legal obligation; legitimate interests in compliance and defense |
| Improve product and subscription operation | Aggregated or pseudonymous purchase and entitlement information | Legitimate interests; consent where legally required for optional processing |
| Enable user-selected cloud or file-provider features | Selected content, file metadata, and authorization data handled on device or by provider | Performance of the user’s request; consent or provider authorization where required |
HAFYCH will rely on consent where mandatory law requires it for a permission or optional processing. Consent may be withdrawn prospectively through the relevant setting or by contacting HAFYCH, but withdrawal does not invalidate earlier lawful processing.
HAFYCH may disclose limited personal data only where necessary and lawful to:
RevenueCat for subscription, purchase validation, entitlement, analytics, and fraud-prevention functions;
Google Play or Apple for distribution, purchase, subscription, refund, tax, platform, security, and compliance functions;
Google, Apple, Google Drive, Dropbox, or another user-selected operating-system file provider to perform a feature the user requests;
OpenAI, Anthropic, or a user-configured OpenAI-compatible provider when the AllPDF user explicitly confirms an AI text request;
Google or an email provider to receive and respond to support, privacy, security, or legal email;
GitHub for Website hosting and related request processing;
professional advisers, courts, arbitral tribunals, regulators, law enforcement, platforms, insurers, or other authorities where reasonably necessary to establish, exercise, defend, enforce, or comply with legal rights and obligations; or
a lawful successor or transferee in connection with a sale, assignment, succession, restructuring, financing, or transfer of an App or related rights, subject to applicable privacy law.
HAFYCH does not sell personal data. A user-directed transfer to Google Drive or a provider folder selected through the operating system is controlled by the user and the provider’s own terms.
RevenueCat, Google, Apple, GitHub, cloud providers, and other Third-Party Services may process data in countries outside your residence, including outside the European Economic Area or United Kingdom. Where HAFYCH is legally responsible for a transfer, HAFYCH may rely on an adequacy decision, provider data-processing terms, standard contractual clauses, another approved transfer mechanism, or a specific lawful derogation. User-directed transfers to a selected provider are also subject to that provider’s terms and transfer safeguards.
| Category | Typical retention / control |
|---|---|
| Local User Content | Until the user deletes it, clears App data, resets the device, or uninstalls the App; exported and backup copies may remain elsewhere. |
| Google Drive, Dropbox, or user-selected provider folder | Controlled by the user and provider. Deleting from the App may not delete the provider copy; deletion must also be performed through the provider. |
| AI request text | Controlled primarily by the user-selected provider under its terms and the user’s configuration. AllPDF does not store the transmitted text on a HAFYCH backend. |
| RevenueCat purchase and entitlement data | Retained under RevenueCat and app-store policies and as needed for entitlement, refund, fraud, tax, legal, and support purposes. HAFYCH may request deletion of a RevenueCat customer record where legally appropriate and technically identifiable. |
| Support and ordinary correspondence | Ordinarily up to three years after the request is closed; longer where needed for a legal hold, repeated abuse, or an unresolved dispute. |
| Legal notices and dispute records | Up to six years after final resolution, or longer where a mandatory limitation, enforcement, tax, or records rule requires it. |
| Tax, accounting, purchase, refund, and compliance records | For the period required by applicable law, platform rules, or legitimate defense and audit needs, which may be up to ten years in some contexts. |
| Website request data | Determined primarily by GitHub and network providers under their policies; HAFYCH does not operate a separate web-log backend. |
You may request deletion of personal data controlled by HAFYCH by emailing nazariihafych@gmail.com with the subject “PRIVACY REQUEST.” HAFYCH may ask for information reasonably necessary to identify the relevant support record, transaction, or RevenueCat App User ID. HAFYCH cannot delete data it does not possess or control, including local files, user-controlled backups, Google Drive or Dropbox files, AI-provider records, copies in a user-selected provider folder, app-store records, or provider data retained under the provider’s own legal obligations.
Because there is no HAFYCH user account, there is currently no HAFYCH account to delete. Users delete local data through App or device controls and delete cloud data through the selected provider. Purchase records may remain with Google, Apple, RevenueCat, tax authorities, or other providers where legally required.
Depending on applicable law, you may have the right to request access, correction, deletion, restriction, portability, or objection; withdraw consent; and lodge a complaint with a competent supervisory authority. These rights may be limited where HAFYCH does not control the data, cannot identify the record, must retain it, or has overriding legal grounds.
To exercise a right, email nazariihafych@gmail.com with the subject “PRIVACY REQUEST.” HAFYCH may verify identity or authority in a proportionate manner. Do not send a passport or other high-risk identity document unless HAFYCH specifically explains why a less intrusive method is insufficient.
A person in the European Union may complain to the supervisory authority in the Member State of habitual residence, place of work, or alleged infringement. A person in another jurisdiction may contact the local authority available under applicable law.
The Apps are intended only for persons aged 18 or older and are not directed to children. HAFYCH does not ask for a date of birth or operate an account system that independently verifies age. A person under 18 must not use the Apps. If HAFYCH learns that it directly controls personal data submitted by a person under 18 in violation of this Policy, HAFYCH will take reasonable steps to delete or restrict it, subject to legal requirements.
A user may choose to place sensitive or regulated information in local files or a user-selected cloud account. HAFYCH does not receive that content merely because the App handles it. Do not send sensitive data to HAFYCH support unless necessary and lawful. The Apps are not represented as certified for regulated medical records, payment cards, classified information, critical infrastructure, or child data unless an App-specific notice expressly states otherwise.
HAFYCH applies measures reasonably appropriate to the limited data and systems it controls, including limiting direct access to provider accounts and avoiding a HAFYCH User Content backend in the current architecture. Third-Party Services maintain their own security. No security measure is absolute, and HAFYCH does not guarantee that an App, provider, device, network, or storage location is invulnerable.
Users are responsible for device security, operating-system updates, passwords, cloud-account security, file permissions, backups, recovery material, and safe exports. Security concerns may be reported to nazariihafych@gmail.com. Do not publicly disclose a vulnerability before allowing a reasonable opportunity to investigate and remediate, unless applicable law protects a different disclosure process.
HAFYCH does not intentionally sell personal data or operate cross-app behavioral advertising. RevenueCat processes purchase history for App functionality and subscription analytics and may process additional identifiers or attributes if configured. App stores and operating systems may independently process data for their own security, measurement, advertising, or platform purposes under their policies.
HAFYCH does not currently make a decision that produces legal or similarly significant effects solely by automated processing of a user’s personal data. Entitlement validation may automatically enable or disable paid features based on platform purchase status.
The static Website may use cookies, local storage, security mechanisms, or request logs supplied by GitHub Pages, the browser, or network providers. HAFYCH does not intentionally place advertising cookies on the Website. Browser controls may be used to block or delete cookies, although provider functionality may be affected.
HAFYCH may update this Policy to reflect an App, provider, law, store requirement, or data-flow change. The revised version will identify its effective date and be made available through the Website, App, or store. Where law requires notice or consent for a material new use, HAFYCH will provide it before or when the new processing begins.
Privacy controller: Nazarii Hafych / HAFYCH
Email: nazariihafych@gmail.com
Telephone: +48 571 088 639
Public contact address: Kharkiv Oblast, Kharkiv District, village of Borshchova, Bazivska Street 10, Ukraine
Website: https://hafych.github.io/
PART III
Applies to the shared architecture reported for current HAFYCH Apps as of 29 July 2026
This Schedule is a factual supplement to the Privacy Policy. It does not claim that every HAFYCH App uses every optional feature. A released App’s store declaration and permission prompts must be narrower and exact for that package and version.
Provider: Nazarii Hafych / HAFYCH
Current confirmed store distribution: Google Play
Apple App Store distribution: Not currently used as of 29 July 2026
Website: https://hafych.github.io/
User accounts: No HAFYCH account, login, or registration system
HAFYCH backend: None for ordinary User Content
Employees or contractors with content access: None; the Provider acts alone
Minimum age: 18 years
Own advertising system: None declared
Own analytics platform: None declared; RevenueCat provides subscription and purchase analytics
| Data flow | Data involved | Destination / access | Purpose | Control / deletion |
|---|---|---|---|---|
| Local App use | User-selected content, settings, local metadata, files depending on App | Device and operating-system storage; HAFYCH does not receive ordinary content | Provide the selected App function | User deletes through App/device; uninstall may not delete exports or backups |
| Google Drive | Selected file contents, names, identifiers, metadata, authorization and sync information | Directly to Google Drive through device/provider integration; no HAFYCH content server | Open, save, import, export, sync, or back up as selected by user | User revokes access and deletes files through Google account/provider |
| Dropbox | A result file selected for upload, its name and transfer metadata, authorization and error information | Directly to Dropbox after the user selects Dropbox and confirms the transfer; no HAFYCH content server | Save a completed AllPDF result at the user’s request | User disconnects the provider and deletes the file through Dropbox |
| User-selected folder / operating-system file provider | Selected file contents, names, identifiers, metadata and sync information where the operating system exposes the folder | Directly through the device and selected provider; an Apple-selected folder may be backed by iCloud Drive; no HAFYCH content server | Open, save, import, export, or sync as selected by the user | User manages the folder and provider through operating-system/provider controls |
| AllPDF AI request | A bounded amount of extracted text, provider/host, request parameters and technical error information; the PDF itself is not sent by this flow | OpenAI, Anthropic, or the OpenAI-compatible host selected by the user, only after document-specific confirmation | Perform the specific AI action requested by the user | User controls the provider account and provider-side deletion/retention; HAFYCH has no copy on an HAFYCH backend |
| RevenueCat | App User ID; purchase history; product, transaction, subscription, trial, entitlement, refund and status information; app/platform/locale metadata | RevenueCat systems; HAFYCH may view dashboard data | Purchase validation, entitlements, fraud prevention, subscription analytics, support | Request through HAFYCH where record can be identified; provider and store retention may continue |
| Google Play | Google account and payment data held by Google; product, order, receipt/purchase token, subscription and refund status available to App/providers | Google systems; limited transaction/status data to HAFYCH or RevenueCat | Distribution, payment, tax, subscription, refund, security, entitlement | Managed through Google account and Google Play; mandatory records may remain |
| Support email | Email address, message, attachments, screenshots, App/device/purchase details voluntarily supplied | Google email infrastructure and Nazarii Hafych | Support, privacy, legal, security, billing, and dispute handling | Ordinarily retained up to three years; legal records longer as stated in Policy |
| Website | IP address, browser/device and request data, timestamps, security logs, cookies or similar provider data | GitHub Pages, GitHub, network providers; HAFYCH does not run a separate web backend | Host and secure the Website | Provider-controlled under GitHub policies |
| AI prompt / system clipboard | Selected manuscript text and generated prompt | Device system clipboard; no automatic AI-provider transmission | Let the user copy a prompt for optional use in an external service | User replaces or clears clipboard content and controls any later paste or transmission |
The inspected AllPDF and Writer Studio release code configures RevenueCat without a custom App User ID, so RevenueCat assigns an anonymous App User ID. The code does not call logIn, setEmail, setPhoneNumber, setDisplayName, setAttributes, or collect advertising identifiers. The current projects have no third-party analytics or attribution integration and no application webhook; Google Play RTDN is connected directly to RevenueCat. Each project uses the pro entitlement and is intended to expose monthly and annual packages through its current offering.
For the current configuration, the Google Play Data safety declaration must include purchase history collected for App functionality and analytics. Personal information and advertising/device identifiers are not introduced by the inspected RevenueCat integration. This conclusion must be rechecked whenever the SDK, release code, RevenueCat project, or provider integrations change.
No HAFYCH account is created, so a HAFYCH account-deletion flow is not applicable. A user may:
delete local data through App or device controls;
delete cloud data and revoke provider access through Google Drive, Dropbox, or the selected operating-system file provider;
manage or cancel subscriptions through Google Play; and
request deletion of data controlled by HAFYCH or a RevenueCat customer record by emailing nazariihafych@gmail.com and supplying information reasonably necessary to identify the record.
The inspected Writer Studio Android manifest declares microphone access for its user-invoked dictation feature. AllPDF declares camera access for user-invoked capture and scan features; it does not request microphone, advertising-ID, or broad all-files access. Network access is supplied through the platform and provider libraries used for user-invoked Google Drive, Dropbox, AI, RevenueCat, and Google Play functions. Each permission must remain limited to the feature the user requests, be explained by the operating system and store documentation, and be rechecked in the final merged release manifest before every publication.
HAFYCH’s current risk-reduction measure is architectural: ordinary User Content is not stored on a HAFYCH backend. This does not eliminate risk on the device, in cloud storage, in the app store, or at RevenueCat. Users remain responsible for device security, provider accounts, permissions, backups, and recovery material. HAFYCH makes no certification or guarantee of regulatory suitability.