Privacy Policy
Doc Scan & Sign is built to keep your documents yours. There are no accounts, no analytics, no advertising, and we never sell or share your data with third parties. This policy explains the little that does happen with your data, in plain language.
Documents you scan and edit stay on your device
Scans, imported PDFs, edits, passwords, and recognized text are stored only on your iPhone (and in your own iCloud/device backups, which you control). Text recognition (OCR) runs entirely on-device. Nothing is uploaded unless you explicitly share a document or send it for signature.
What we process when you request a signature
When you tap "Request Signature," the app uploads that one document to our server so your signer can view and sign it in their browser. For that request we store:
- The document (PDF) and its title;
- The field layout you placed (signature/initial/name/date positions);
- What the signer provides: their drawn signature and/or initials, and their typed name, if your request asks for them. The date is stamped from the signing time — signers do not enter it;
- Access tokens for the private links — stored only as one-way hashes, so the server itself cannot reconstruct the links;
- A push notification token for your device, only if you allow notifications, used solely to tell your app the document was signed.
How long signature data is kept
- Unsigned requests expire and are deleted 14 days after creation.
- Signed documents are kept so the signer can revisit their link, then deleted no later than 14 days after signing.
- If you cancel a request in the app, the document and all associated data are deleted from the server immediately.
Who can see what
Signature links are private, unguessable URLs. Anyone you share a signing link with can view that document (and, after signing, the signed result) until it expires — treat the link like the document itself. We do not read your documents; they are processed automatically and only to provide the signing feature.
Server logs
Like nearly every web service, our infrastructure (including our hosting and the Cloudflare network in front of it) keeps standard technical logs — IP addresses, request times, and similar — used only for security and keeping the service running.
What we don't do
- No accounts or sign-in — we don't know who you are.
- No analytics, tracking, or advertising SDKs.
- No selling, renting, or sharing of your data with third parties.
Your choices
- Use the app fully offline — scanning, OCR, and editing never require a network.
- Cancel any signature request to delete its server data immediately.
- Delete documents in the app to remove them from your device.
- Questions or deletion requests: [email protected].
Children
The app is not directed at children under 13 and collects no personal information from anyone beyond what is described above.
Changes
If this policy changes, the new version will be posted at this address with an updated effective date.