Privacy Policy

Sign Docs — Fill & Sign documents · Effective: September 12, 2026

1. Who we are

Sign Docs ("the app", "we") is an iOS application for scanning, filling and signing documents, developed by Andrey Alferchik, an independent developer. For anything in this policy, contact [email protected].

2. What stays on your device

Everything that makes up your work in the app is stored locally, inside the app's private container on your iPhone:

• your documents, scans and their edit history;
• your signatures, initials and stamps;
• your saved templates;
• app settings and free-usage counters.

We cannot see, read or retrieve any of it. Deleting the app deletes this data. If you use iCloud device backups, Apple may include the app's data in your backup under Apple's own terms — that backup belongs to you, not to us.

3. What reaches our server, feature by feature

The app talks to our server (api-signdocs.paralegalmind.com) only for the features below, always over an encrypted connection (HTTPS). If you never use these features, the app works fully offline apart from anonymous registration and crash reporting described below.

AI Document Check

When you run an AI check, the app sends the recognized text of your document — never the file, photo or scan itself. The text is passed to an AI model provider to produce the summary, then discarded: we do not store document text on our server. Our processing journal keeps only technical metadata (text length, timing, status).

AI processing currently uses models from Anthropic and Google, accessed through the OpenRouter platform. We have disabled the use of your content for model training in these services. Providers process the text transiently as our data processors.

AI signature generation

If you ask the app to generate a signature, the name you typed is sent to an AI image model and the resulting images are returned to your device. The name is not stored on our server after processing.

Word to PDF conversion

This is the one feature that uploads a file: converting a Word document faithfully requires the document itself. The file is converted in a temporary, per-request workspace on our server and is deleted before the response is sent back — it is never written to permanent storage, backups or logs. The journal keeps only file sizes and timing.

Cloud import (Google Drive, Dropbox)

If you connect a cloud storage account to import documents:

• authorization happens directly between your device and the provider; the access keys are stored only in your device's Keychain, never on our server;
• file listings and downloads travel directly from the provider to your device — they do not pass through our servers;
• we request read-only access, use it solely to show you your files and download the ones you pick, and never modify or delete anything in your cloud storage;
• you can disconnect at any time in the app's Settings, which deletes the stored keys; you can also revoke access in your Google or Dropbox account settings.

Sign Docs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use cloud file data for advertising, do not sell it, and do not allow humans to read it.

Device registration and abuse protection

To ration free usage and protect the service from abuse, the app registers with a random identifier generated on your device. It is not derived from your name, Apple ID, email or hardware serials, and we cannot link it to you. Alongside it we process: a short-lived access token, an Apple App Attest verification result (proof the request comes from a genuine app on a genuine device), and a request journal containing the feature used, status, sizes and timestamps. Your IP address is used transiently for rate limiting and security and appears in standard server logs.

Feedback form

If you write to us through the in-app "Contact us" form or the form on our support page, we receive the text you typed, the e-mail address you chose to leave (optional), and technical context that helps us understand the report: app version, iOS version, device model, app language and whether Pro is active. The message is stored on our server and forwarded to the developer's mailbox. We use it only to read your feedback and, if you left an e-mail, to reply.

Usage analytics

To understand which features are used and where people get stuck, the app sends anonymous usage events (screens opened, features used, purchase started or completed) to Mixpanel, and subscription status to Adapty. These events carry a random identifier and device model, never your name, e-mail, documents or their text. We do not use this data for advertising or tracking across apps, and we do not use the advertising identifier (IDFA).

Crash reporting

The app uses Apple's built-in MetricKit to collect crash and hang reports — stack traces plus device model and OS version. These reports never contain your documents or their text. No third-party crash or analytics SDK is embedded.

4. Purchases

Subscriptions and purchases are handled entirely by Apple through your Apple account. We never see your payment details. Apple's own privacy policy applies to the transaction.

5. What we never do

• We do not sell or rent any data.
• We show no advertising and use no advertising or tracking SDKs.
• We do not build profiles of you and do not use your content to train AI models.
• We do not store your documents, scans, photos or converted files on our servers.

6. How long data is kept

• Uploaded Word files: seconds — deleted within the same request.
• Document text sent for AI analysis: not stored after the response is produced.
• Technical journal (feature, status, sizes, timings): up to 12 months, used for usage limits, abuse prevention and service health.
• Crash reports: up to 90 days.
• Feedback messages: up to 12 months.
• Anonymous usage analytics: up to 12 months.
• Server logs with IP addresses: up to 30 days.

7. Security

All traffic is encrypted in transit (TLS). Our infrastructure sits behind a web application firewall, access to servers is restricted to key-based authentication, and secrets are stored only on the server with restricted permissions. On your device, access keys live in the iOS Keychain.

8. Where data is processed

Our server is hosted in a European Union data center. AI providers (Anthropic, Google, OpenRouter) may process requests in the United States or other regions where they operate, under their own safeguards for international transfers.

9. Your rights and choices

• Every server-side feature is optional — the core of the app works without them.
• Deleting the app removes all app data from your device.
• Depending on where you live (including the EU/EEA, UK and California), you may have rights to access, correct, delete or restrict processing of personal data. Because our server data is keyed only by a random identifier, tell us the identifier shown in the app's diagnostics if you want the associated journal entries deleted — we will comply within 30 days.
• To exercise any right, email [email protected].

Where GDPR applies, our legal bases are: performance of a contract (providing the features you invoke), legitimate interests (service security, abuse prevention, crash diagnostics), and consent (connecting a cloud storage account).

10. Children

Sign Docs is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from them.

11. Changes to this policy

If we change this policy, the new version will be published at this address with an updated effective date. Material changes will be additionally highlighted in the app.

12. Contact

Andrey Alferchik · [email protected]