Privacy policy

The short version

Silo PDF does not collect, store, or transmit the contents of your PDFs. Every operation — merging, splitting, rotating, redacting, OCR, compression, scanning — happens entirely on your device using Apple’s PDFKit and Vision frameworks. We never see your files, and neither does anyone else.

This policy explains, in a lot more detail, exactly what the app does and doesn’t touch.

What Silo does locally on your device

When you use Silo, the app reads PDFs from locations you explicitly pick (the iOS document picker, Photos, or files opened with Silo from another app). It processes them in memory and writes the result back to local storage — either the system share sheet, the Files app, or Silo’s sandboxed app storage.

PDFs never leave your device as part of normal use of any tool.

What Silo sends over the network

Silo makes a small number of network requests, each for a specific, disclosable reason:

• RevenueCat — for the Silo Pro one-time in-app purchase. When the app starts, it asks RevenueCat whether your Apple ID has purchased Pro. No personal data is sent; RevenueCat receives an anonymous device identifier from Apple’s StoreKit.
• PostHog (analytics) — when the app is configured with an analytics key, Silo sends anonymous product events such as “tool opened” or “paywall viewed”. Events never include filenames, file contents, or anything about the PDFs you process. You can opt out in Settings.
• App Store receipt verification — handled by iOS itself, not by us. Apple verifies your purchase.

That is the complete list. No CDNs, no marketing pixels, no session replay, no document upload.

What we store about you

Nothing on our servers. Silo has no user accounts, no email signup, and no cloud sync.

Locally, on your device, Silo stores:

• A list of your recent PDFs (filenames, sizes, and local paths) in the app sandbox.
• Your Pro status, cached from RevenueCat, in iOS Secure Store.
• PostHog’s anonymous device ID in iOS Secure Store, if analytics are enabled.

You can wipe everything at any time by uninstalling the app. All local data is removed with the app.

Permissions we request

Permission	Why
Camera	Only if you use the Document Scanner. Images never leave your phone.
Photo Library	Only if you use the “Images to PDF” tool to pick photos.
Files / Documents	Required to read the PDFs you want to process. Silo only sees files you explicitly pick.

Children

Silo is a utility app with no social features, no ads, and no content targeted at children. We do not knowingly collect personal information from anyone, including children.

Changes

If we materially change how Silo handles your data, we’ll update this page and the “Last updated” date. Because Silo doesn’t have a user database, we have no way to notify you directly — please check back here.

Contact

Questions or concerns? Email support@silopdf.com.