What stays on your device
Local projects stay on your device. Only when choosing Save online or Upload PDF do paying Pro subscribers send the file, name and folder organization to Deluma’s private library, stored in the United States. Limits are 10 GB, 1,000 PDFs and 120 MiB per file. Each completed upload counts toward the plan allowance; downloading a saved file does not count again. Trials and free benefits do not enable storage. There is no public sharing or automatic project upload.
Optional account, when configured
Creating a Deluma account is optional. When you create an account or sign in, Deluma processes your email address, authentication identifier, and protected session credentials. The database may store basic profile preferences, plan status, and access rights.
When you subscribe to Pro, the database also stores provider customer and subscription references, product, status, expiration, identifiers, cryptographic event digests, and limited technical security logs. It does not receive full card details, the full contents of payment-service notifications, or PDF content. The editor remains available on Free without a subscription. Local projects stay on your device. Only when choosing Save online or Upload PDF do paying Pro subscribers send the file, name and folder organization to Deluma’s private library, stored in the United States. Limits are 10 GB, 1,000 PDFs and 120 MiB per file. Each completed upload counts toward the plan allowance; downloading a saved file does not count again. Trials and free benefits do not enable storage. There is no public sharing or automatic project upload.
Retention and deletion
Turning off renewal keeps access until the paid period ends. After that, new uploads and online changes are blocked, but download and deletion remain available for three calendar months. The automatic worker then deletes files and folders from the online library. Renewing a paid subscription before deletion stops scheduled removal. Notices appear in the library and by email. PDFs are encrypted before entering the private storage; this is not end-to-end encryption. Deluma keeps encrypted operational backups of library PDFs, with six-day retention and daily cleanup. These copies are for technical recovery and do not provide user versions or a trash bin. Deletions must also be reapplied during recovery. Keep a local copy. We do not guarantee immediate forensic erasure of the provider’s physical infrastructure copies.
Account and support timelines
Unconfirmed registrations are deleted after 72 hours. Temporary ticket codes expire after 10 minutes and their technical records are removed after expiry. Expired verification and recovery tokens are kept for up to 7 days; ended sessions for up to 30 days; rate-limit controls for up to 2 days; completed email queues for up to 90 days; and security events for up to 180 days. Resolved or closed tickets and administrative audit records are kept for up to 24 months. Financial records may remain longer only for accounting, tax, fraud prevention, disputes, and legal duties.
Export
When you export, you choose the destination of the copy. From that point on, retention, backup, and sharing depend on the location or app you selected. Optional email delivery sends the PDF, filename, recipient and verified account email to the Deluma server and email provider, using the official support email address as sender. The attachment is processed in memory and is not saved to the library. For up to 30 days we keep only a technical delivery record, without content, filename or recipient address. The email provider and recipient mailbox apply their own retention and size rules.
Backup protection by platform
On Android, cloud backup and automatic device-to-device transfer are blocked for files and metadata. On iOS and macOS, durable project folders are marked to stay out of Apple backups and are not moved to purgeable cache. On Windows, backups configured by you or by the system may include the app's local data.
Browser storage
On the Web, the app requests persistent storage without blocking the editor. The browser may deny the request or remove data because of storage pressure or manual clearing. Export important copies.
Processing and optional uploads
Available editing, viewing and conversion tools process PDFs on your device. Optional uploads to the online library or sending by email are described above and depend on your choice. Online Office conversion is unavailable in this version. We do not use PDFs for training or advertising. A handwritten signature is a visual mark created locally, without a digital certificate.
In the Android app, OCR uses Google ML Kit. Images and recognized text stay on the device. The SDK sends Google technical device and app data, per-installation identifiers, and performance and usage metrics for diagnostics and maintenance. These metrics are separate from Deluma’s optional metrics and are not controlled by the profile setting. This notice concerns Android OCR, not Web or iOS OCR.
Public pages and support
The public privacy and support pages do not open project storage and do not receive your PDFs. They store your language preference and, only if you choose to donate, the data described below. The hosting provider may process technical data needed to deliver and protect the page, such as your network address and browser user agent.
Voluntary donations
When you donate, Deluma stores the amount, currency, status, and technical payment references, plus your name, comment, and email when provided or required by the provider. Stripe processes USD payments and Mercado Pago processes BRL through Pix. Deluma does not receive full card details or the content of your PDFs. Records are kept only for the minimum time needed for reconciliation, fraud prevention, accounting, and legal obligations. For questions or requests, use the secure support form.
Controller and your rights
Deluma is provided by Fabricio Medeiros Martins, an individual based in Brazil, using Stromlogic/stromlogic.com as a brand reference. Contact us through the secure support form. To request access, correction, portability, objection, or deletion of personal data, open a privacy ticket through the secure support form. We may verify your identity before acting on the request to prevent unauthorized access to account data.
Delete your account and data
On the website or in the app, sign in, open Security and choose Delete account → Request deletion. Confirm your decision and identity when asked. Export any files you want to keep first: deletion ends access to the account.
When deletion completes, Deluma cancels active renewal, ends sessions and deletes or anonymizes account data. The cleanup process removes online library files and folders, retrying after failures. Operational backups follow the six-day retention described in this policy. Financial, support and security records follow the periods and obligations described above.
Deleting your account does not erase local projects or exported copies. Remove them through the local library, clear the app’s data, or delete copies from the destination you chose.
If you have lost access, use the support form and state that you want to delete your Deluma account and associated data. We will verify your identity before acting. Do not send your password, authentication codes or PDFs.