Most free PDF tools want an account, an upload, or both, and most black-box redaction leaves the original text sitting underneath.
Design, development and release, end to end.
Redaction That Proves Itself
53: Screens designed
Scope, Constraints & Reality
Documents are processed on the device. The OCR engine, its language data and all fonts ship inside the app, so it works fully offline. The only request it ever makes is one you start: stock image search.
Drawing a black box over text in a PDF often leaves the text underneath, still selectable. For a tool people use on contracts and IDs, that failure is the whole risk.
Latin uses the PDF standard fonts. Devanagari, Cyrillic and Greek embed subset Noto fonts, and other scripts need a font you add.
An Electron shell serves the app from a private origin with a strict content security policy, a sandboxed renderer and a minimal preload bridge.
Design Decisions
Redaction That Proves Itself
Each redacted page is rebuilt as an image in a brand-new document, so the original text and graphics are not carried over. The output is re-opened and checked for leftover text before success is reported. The trade-off is stated, not hidden: those pages become images, so OCR restores a searchable layer.
Every State Designed, Not Just The Happy Path
The Figma file runs to 53 screens: empty, loading, unsaved changes, saving, save error, toast notifications, and a flow per tool for redaction, OCR, signing, annotation and export. Errors and half-finished states get a layout, instead of falling back to a default.
Honest About Editing Existing Text
Retouching an existing line covers the original, and the original stays in the file underneath. The app says so at the moment of editing and points to Redact for when the text has to be gone. A reassuring lie there would defeat the purpose of the tool.
Impact
Each tool, state and error path was designed in Figma before it was built.
Documents live in local storage. The app has no sign-in and sends nothing anywhere.
A single universal build runs natively on Apple Silicon and Intel, on macOS 13 Ventura or later.