Security fixes are applied to the latest main branch and the newest published release.

Please do not open a public issue for a security vulnerability. Contact the maintainers privately through the GitHub security advisory flow for this repository.

Include:

• A short description and impact.
• Affected version or commit.
• Reproduction steps or a minimal proof of concept.
• Any suggested mitigation.

Please allow reasonable time for verification and a fix before public disclosure. Do not include personal documents, access tokens, private keys, or other sensitive data in a report.

ClearPDF is designed to process PDFs locally. The app does not include ads, accounts, analytics, or cloud PDF processing. Scanner and text-selection features use the disclosed on-device ML Kit components; contributors must not add hidden data collection or network upload behavior.