Effective date: October 7, 2026
eSign Fill & Sign PDF Document (“eSignature”, “the app”, “we”) is published by Zintex OÜ, Ahtri tn 12, Tallinn 15551, Estonia. This policy explains what happens to your data when you use the app on iPhone or iPad, and what happens to the data of a person who signs a document you send them. The short version: your documents and signatures stay on your device and in your own iCloud; a document leaves your device only when you send it for signing; beyond that, only what subscriptions, remote app settings, crash reports and basic usage statistics need.
Everything you scan, import or create — camera scans, photos, imported PDFs, signatures you draw, stamps, text, watermarks and file names — is stored locally on your device. Background removal for signature and stamp images runs on your device. We cannot see any of it.
If you protect the app with a passcode or Face ID, that check happens on your device through Apple's frameworks; we never receive your face data or passcode.
When you share or export a document, the app hands it to the destination you choose (Mail, a messaging app, Files and so on). What happens to it after that is governed by the service you sent it through, not by us.
If iCloud is turned on for the app, your saved signatures, stamps, watermarks and document list are stored in your private iCloud database so they appear on your other devices. This storage belongs to your Apple Account and is covered by Apple's privacy terms; it is not accessible to us.
When you use Request signature, the app creates an anonymous account for your installation (a random identifier, with no name or email) and uploads the PDF you chose, together with the title you entered and, if you added one, the name of the person who should sign. These are stored with our hosting provider Supabase (Supabase Inc.) in the European Union (Frankfurt, Germany) and are readable only by your installation of the app and by the person who has the signing link.
The person you send the link to opens a signing page hosted on Cloudflare Pages (Cloudflare Inc.). When they sign, we receive and store the name they type, the signature they draw, their confirmation that they agree to sign electronically, and the time they opened and signed the document. The signature is added to the PDF, with a line stating their name and the time of signing, and the signed copy is stored next to the original so you can download it. As with any website, Cloudflare and Supabase process the signer's IP address and browser information to deliver the page and protect the service; this is kept in their short-lived technical logs and is not added to the document or used by us for anything else.
A signing link stops working after 30 days, once the document is signed, or when you cancel it. The original document, the signed copy and the signing details are deleted automatically 90 days after the request was created, or earlier on request (see “Your rights”). Save the signed copy to your documents if you want to keep it. Please send documents for signing only to people you are entitled to share them with, and tell the signer that their signature and name will be recorded.
Subscriptions (Apple and Adapty). Subscriptions are sold and charged by Apple through the App Store. To check whether your subscription is active and to restore it on another device, the app uses Adapty (Adapty Tech Inc.), a subscription-management service. Adapty receives your App Store purchase receipt, a random identifier generated by the app (not linked to your name or email), basic device and app information (model, OS and app version, language, country/region) and your IP address as part of the network connection. We never see your name, Apple ID or payment card details.
Remote app settings (Google Firebase). The app uses Firebase Remote Config (Google LLC) to fetch a small set of settings, for example how the subscription screen behaves. To deliver them, Firebase uses an app-instance identifier and basic device and app information.
Usage statistics (Google Firebase). The app uses Firebase Analytics to understand how the app is used — for example how many people open it and which screens they reach. Firebase receives a randomly generated app-instance identifier, device model, OS and app version, language, country/region derived from your IP address, and the names of in-app events. It never receives your documents, their contents, their file names or your signatures.
Crash reports (Google Firebase). If the app crashes, Firebase Crashlytics sends a crash report — the technical state of the app at the moment of the crash, device model, OS and app version, and an app-instance identifier — so we can fix the problem. Crash reports contain no document content.
That is the complete list. The app has no sign-in with your name or email and no ads.
No name or email address of yours on our side. No advertising identifier — the app does not ask for tracking permission and does not track you across other apps or websites. No contacts, no precise location. We do not show ads, we do not sell or share data, and we do not build a profile of you. The identifiers above are pseudonymous: they identify an installation of the app, not you by name.
Camera. Used only when you scan a document. The image is processed on your device.
Photo library. Used only when you pick images to sign or to use as a signature or stamp; only the images you pick are read.
Face ID. Used only if you turn on app protection; the check happens on your device.
Permissions can be changed or revoked at any time in iOS Settings, and the app keeps working without them for everything that does not need them.
Where EU/EEA or UK data-protection law applies, storing and delivering a document you send for signing, and recording the signer's details, is necessary to provide the feature you asked for; purchase verification is necessary to perform the contract you enter into when you subscribe; remote settings and crash reports are processed on the basis of our legitimate interest in keeping the app working; usage statistics are processed on the basis of our legitimate interest in improving the app, or on your consent where local law requires it. For a signer, the details recorded with their signature are processed on the basis of our and the sender's legitimate interest in having a record of who signed and when. Supabase, Cloudflare, Adapty and Google act as our processors under their data-processing terms and may process data outside the EU/EEA under appropriate safeguards such as Standard Contractual Clauses.
Data on your device and in your iCloud is kept until you delete it or the app. Documents sent for signing and their signing details are deleted automatically 90 days after the request was created. Analytics events are retained by Firebase for up to 14 months and crash reports for up to 90 days, and are then deleted automatically. Purchase and subscription records are kept by Apple and by Adapty for as long as needed to provide and verify your subscription and to meet legal obligations.
The app is a productivity tool and is not directed at children under 13 (or the age of digital consent in your country, if higher). We do not knowingly collect data from children.
If you are in the EU/EEA, UK or another jurisdiction with data-protection law, you have the right to access, correct, export or delete personal data held about you, to object to processing and to complain to a supervisory authority (in Estonia, the Andmekaitse Inspektsioon). This includes people who signed a document sent through the app. Email us and we will help, including with requests to Adapty and Google about subscription and analytics records. Because we identify installations rather than people, please tell us the document title and roughly when it was sent or signed so we can find the right records.
Any change to this policy will be posted on this page with an updated effective date. Material changes will be announced in the app.
Zintex OÜ · Ahtri tn 12, Tallinn 15551, Estonia
zintex.ou@gmail.com