Privacy Policy

Updated at October 6th, 2026

Introduction

Scan & Sign (referred to in this document as "Scan & Sign", "the app", "we", "us", or "our") is an iOS application for personal document signing. With Scan & Sign you can scan paper with the camera or open a PDF or a photo, place a saved signature, stamp or set of initials, extract and translate the text, and then export or share the signed file. This Privacy Policy explains what information we do and do not collect when you use the app, how that information is used, with whom it may be shared, and the rights and choices available to you.

We have built Scan & Sign with a privacy-first posture. The documents you open and the signatures you create are processed and stored locally on your device. Scan & Sign does not require you to create an account, sign up, or log in, and we do not operate a cloud sync service for your documents. By downloading, accessing, or using Scan & Sign, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the app.

Definitions and key terms

To help explain things as clearly as possible in this Privacy Policy, every time any of these terms is referenced, they are strictly defined as:

• App: the Scan & Sign application for iOS, including all of its features and functionality.
• Device: the iPhone or other Apple device on which you install and run the app.
• Document: any PDF, image, or other file you open, view, sign, or export within the app.
• Signature: any drawn, typed, or photo-based signature or set of initials that you create and save within the app.
• Personal Data: any information that relates to an identified or identifiable individual.
• Service Providers / Third-Party Services: the third-party companies and software development kits (SDKs) we use to provide analytics, crash diagnostics, advertising attribution, and subscription management, as described in this Privacy Policy.
• Identifiers: device and analytics identifiers such as the Advertising Identifier (IDFA), the Identifier for Vendors (IDFV), Firebase installation and instance identifiers, and Amplitude device or user identifiers.
• ATT: Apple's App Tracking Transparency framework, which governs access to the IDFA and cross-app tracking.
• You: the individual using the app, or the company or legal entity on whose behalf such individual is using the app.

Information we collect

We collect only the information described below. We have deliberately designed Scan & Sign so that the most sensitive information you handle — your documents and your signatures — never leaves your device. The limited information we do collect is gathered automatically through third-party SDKs and falls into four categories: analytics and product usage, crash and diagnostic information, advertising and attribution data, and subscription-related data.

Information you provide to us

Scan & Sign requires no account, sign-up, or login, and we do not ask you for your name, email address, postal address, or similar contact details in order to use the app. The documents you open and the signatures you create are not "provided to us" in any meaningful sense, because they are not transmitted to or accessible by us. If you contact us directly — for example, by emailing our support address — we will receive the information you choose to include in that communication (such as your email address and the contents of your message) so that we can respond to you.

Information collected automatically via analytics

When you use the app, certain information is collected automatically through third-party analytics tools, namely Google Firebase Analytics and Amplitude. This information helps us understand how the app is used so we can improve it. It may include:

• In-app events and actions, such as which features you use and which screens you view;
• Session information, such as the date, time, frequency, and duration of your use of the app;
• Device and technical information, such as your device model, operating system version, app version, and device language;
• Coarse location information, such as your country or region, inferred from technical signals and not from precise GPS;
• Analytics identifiers, such as Firebase installation/instance IDs and Amplitude device or user IDs.

Importantly, this analytics data describes how the app is used. It does not include the contents of your documents or your signatures.

Crash and diagnostic information

To keep the app stable and to fix problems, we use Google Firebase Crashlytics to collect crash and diagnostic information. When the app crashes or encounters certain errors, we may automatically receive crash reports, stack traces, the state of the device and the app at the time of the crash, and related diagnostic information. This helps us identify and resolve bugs. Crash diagnostics do not include the contents of your documents or signatures.

Advertising and attribution identifiers

To measure the performance of our marketing campaigns and to understand how new users discover the app, we use the Meta (Facebook) SDK and Google Ads On-Device Conversion measurement. These tools help us attribute app installs to specific campaigns and measure their effectiveness. They may access your device's Advertising Identifier (IDFA) and other identifiers, but only with your permission, as described in the section "Advertising, IDFA and App Tracking Transparency" below. Scan & Sign is primarily funded by subscriptions; these advertising and attribution tools are used for marketing measurement rather than to serve in-app advertising.

How your documents are handled

This is one of the most important parts of this Privacy Policy, so we want to state it plainly: your documents and signatures stay on your device.

• The PDFs and photos you open, and the signatures and initials you create, are created, processed, and stored locally on your device.
• We do not upload, transmit, store, back up, or otherwise have access to the contents of your documents or your signatures.
• We cannot read your documents or signatures, and we cannot share them with anyone, because they never reach our servers — we do not operate document servers for this purpose, and there is no cloud sync feature in the app.
• Text recognition (OCR) and translation run entirely on your device, using Apple's on-device frameworks. The content of your documents is never sent to us or to any third party for recognition or translation. On iOS 18 and later, translation may download a language pack from Apple once; that download contains no document content.
• Signed copies of your documents are saved within the app's own local storage on your device so that you can re-open them from your recent documents. They remain on your device under your control.
• When you choose to share or export a signed document — for example, via the system share sheet — you, and not Scan & Sign, decide where it goes. Once you send a file to another app or service, that file is handled according to the privacy practices of the destination you chose.

In short, the contents of your documents and signatures are private to you and are never collected by us.

How we use information

We use the limited information we do collect for the following purposes:

• To operate, maintain, and provide the features and functionality of the app;
• To understand how users interact with the app and to improve our features, usability, and overall product experience;
• To detect, diagnose, fix, and prevent crashes, bugs, and other technical problems;
• To measure and improve the performance of our marketing campaigns and to attribute app installs, where permitted;
• To manage and validate in-app subscriptions and purchases;
• To respond to your support requests and other communications;
• To comply with applicable legal obligations and to protect our rights and the rights of our users.

We do not sell your personal information

We do not sell your personal information, and we have not done so. We do not trade your documents, your signatures, or your personal data to third parties for monetary or other valuable consideration. The third parties described in this Privacy Policy act as our service providers to deliver analytics, crash diagnostics, advertising attribution, and subscription management, and they process information only for those purposes and in accordance with their own privacy policies.

Third-Party Services

We rely on a small number of reputable third-party service providers to deliver analytics, crash reporting, advertising attribution, and subscription management. These providers process information on our behalf or in their own capacity in accordance with their respective privacy policies. We encourage you to review their policies:

• Google (Firebase Analytics & Firebase Crashlytics): analytics and crash diagnostics. See https://firebase.google.com/support/privacy and https://policies.google.com/privacy.
• Amplitude: product analytics. See https://amplitude.com/privacy.
• Meta (Facebook): advertising attribution and campaign measurement. See https://www.facebook.com/about/privacy.
• Google Ads On-Device Conversion: install attribution and conversion measurement. See https://policies.google.com/privacy.
• Adapty: in-app subscription management. See https://adapty.io/privacy/.
• Apple: App Store distribution and payment processing for in-app purchases and subscriptions. See https://www.apple.com/legal/privacy/.

We are not responsible for the privacy practices of these third parties, and your use of their services is governed by their own terms and privacy policies.

Advertising, IDFA and App Tracking Transparency

Scan & Sign uses advertising and attribution SDKs (Meta and Google Ads On-Device Conversion) to measure marketing performance. On Apple devices, access to the Advertising Identifier (IDFA) and any tracking across apps and websites owned by other companies is controlled by Apple's App Tracking Transparency (ATT) framework.

The app will only access the IDFA or engage in cross-app tracking if you grant permission through the ATT prompt presented by the operating system. If you decline, the app will continue to function and we will not use the IDFA to track you across apps and websites owned by other companies. You can review or change your tracking preference at any time in your device settings under Privacy & Security, then Tracking. You can also enable "Limit Ad Tracking" or reset your Advertising Identifier from your device settings.

Subscriptions and Payments

Scan & Sign lets you sign your first 3 documents for free. To unlock unlimited signing and additional Premium features, you may purchase an auto-renewing subscription, available on a weekly, monthly, or yearly basis. All subscriptions and purchases are sold and processed through the Apple App Store.

Payment is handled entirely by Apple in accordance with Apple's terms and privacy policy. We never receive, process, or store your payment card numbers or other payment credentials. We use Adapty to help us manage subscription state and entitlements (for example, whether you currently have an active Premium subscription), but the underlying payment transaction is conducted by Apple. Subscriptions automatically renew unless auto-renewal is turned off at least 24 hours before the end of the current period; you can manage or cancel your subscription at any time through your Apple ID account settings.

Data Retention

Because your documents and signatures are stored locally on your device, they are retained for as long as you keep them on your device and you control their deletion — for example, by deleting individual documents or signatures within the app, or by deleting the app, which removes its locally stored data from your device.

Analytics, crash diagnostic, and attribution data processed by our third-party providers is retained in accordance with those providers' retention practices and our configured settings, and only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law. If you contact us by email, we retain that correspondence for as long as necessary to address your request and for our records.

Data Security

We take reasonable and appropriate measures to protect information against loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. Storing your documents and signatures locally on your device — rather than on remote servers — significantly reduces the exposure of that sensitive content. The security of data on your device also depends on the security of the device itself, including device passcodes, biometric locks, and operating-system protections. The data handled by our third-party providers is protected using the security measures those providers maintain. However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

We are based in Belarus, and our third-party service providers may process information in the United States and other countries. As a result, information collected through the app may be transferred to, stored in, and processed in countries other than the one in which you reside, where data protection laws may differ from those in your jurisdiction. Where required by applicable law, we and our service providers rely on appropriate safeguards for such international transfers. By using the app, you understand that your information may be transferred to and processed in such countries.

GDPR (EEA and UK residents)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have certain rights under the General Data Protection Regulation (GDPR) and the UK GDPR with respect to your personal data, including the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with a supervisory authority.

The legal bases on which we rely to process personal data include: your consent (for example, for access to the IDFA and cross-app tracking via the ATT prompt, and for analytics where consent is required); our legitimate interests (for example, to understand and improve how the app is used, to keep the app stable through crash diagnostics, and to measure marketing performance), provided these interests are not overridden by your rights; and compliance with our legal obligations. To exercise your rights, please contact us using the details in the "Contact Us" section. Where processing is based on consent, you may withdraw that consent at any time, including by adjusting your tracking preferences in your device settings.

California Residents (CCPA) and CalOPPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information, including the right to know what categories of personal information we collect and how we use it, the right to request access to or deletion of your personal information, and the right not to be discriminated against for exercising your privacy rights.

We do not sell your personal information. We have not sold, and do not sell, the personal information of our users, including California residents, in exchange for monetary or other valuable consideration.

Under the California Online Privacy Protection Act (CalOPPA), we also disclose how we respond to "Do Not Track" signals. The app does not currently respond to Do Not Track browser signals, as it is a native mobile application rather than a website; you can, however, control tracking through Apple's App Tracking Transparency framework and your device settings, as described above. To exercise your California privacy rights, please contact us using the details in the "Contact Us" section.

Children's Privacy

Scan & Sign is intended for a general audience and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us so that we can take appropriate steps to delete such information. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to remove that information.

Your Consent

By using Scan & Sign, you consent to our processing of information as described in this Privacy Policy. Where we rely on your consent — such as for access to the IDFA and cross-app tracking through Apple's App Tracking Transparency framework — we will obtain that consent before processing, and you may withdraw it at any time through your device settings.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our app, or applicable law. When we make changes, we will revise the "Updated at" date at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we handle information. Your continued use of the app after any changes become effective constitutes your acceptance of the revised Privacy Policy.

Governing Law

This Privacy Policy and any matters relating to it are governed by and construed in accordance with the laws of the Republic of Belarus, without regard to its conflict-of-law provisions, except where mandatory data-protection laws of your country of residence apply. By using the app, you agree to the application of the laws of Belarus to the extent permitted by applicable law.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Via Email: daniil.appcenter@gmail.com