Privacy Policy

eSign · Effective 21 October 2026

This Privacy Policy explains what eSign (“the App”) does with your information. The App is developed and published by Cevat Akdemir, an individual developer based in the Republic of Türkiye (“we”, “us”). We are the data controller for the limited processing described below.

We have written this policy to be specific rather than generic: it describes only what eSign actually does. If a service is not named here, the App does not use it.

The short version

• The App does not require an account, and we do not ask you to sign up or log in.
• We do not sell your personal information, and we never have.
• We do not use your data to serve you advertising, and the App contains no ad networks.
• The App collects anonymous usage and crash data to help us improve it — no advertising, no third-party tracking — and you can turn this off in Settings.
• Your content stays on your device, and in your own iCloud account when iCloud sync is on (it is on by default, and you can turn it off in Settings).

Information stored on your device

Everything you create in eSign — your documents (PDFs, pictures and scans), your signatures and stamps, the items you place on pages, form values, the text recognised on scans, and your settings — is stored locally on your device by the App.

This data is not transmitted to us. We operate no server that receives it, and we have no technical means of reading it. It remains under your control: it is included in your device backups if you have those enabled, and it is removed when you delete the App (see “Deleting your data” below for how iCloud copies are handled).

Your documents, the camera and your photos

eSign works on files you choose to bring in. This is how each way in is handled:

• Files, Photos and other apps. A document you pick from the Files app, choose from your photos, open in eSign from another app or drop onto it is copied into the App’s private storage on your device. The App reads only the items you pick. It does not get access to your whole photo library or to your other files.
• Camera. The camera is used only when you choose to scan a document, a signature or a stamp. iOS asks for your permission first, and you can withdraw it at any time in Settings → eSign → Camera. Scans stay on your device.
• Password-protected PDFs. A password you type is used once, on your device, to open the file while it is imported. It is not saved.
• Text recognition. Pages that have no text of their own, such as scans, are read on your device with Apple’s Vision framework so that you can search them. The recognised text is stored with the document on your device and is not sent to us.
• Spotlight and Siri. So that you can find a document from the Home Screen search or ask Siri or Shortcuts to open it, the App gives iOS the document’s name, its text, its thumbnail and its dates. iOS keeps this in its own search index on your device, which is protected while the device is locked. Apple handles it under Apple’s Privacy Policy. You can turn it off in Settings → Siri & Search → eSign.
• Sharing and exporting. When you share, export or drag out a document, the flattened copy goes to the app or person you choose, for example Mail, Messages, AirDrop or Files. It does not pass through us. From that moment the recipient’s own terms and privacy practices apply, and we cannot recall the copy.
• Widget and Control Center control. They contain no document data. They only start a scan or open the file picker.

Free shares. To apply the free allowance of signed documents, the App keeps a record of the signed copies you have shared. Each one is a short code (a hash) made from the document’s internal ID and from which signature, text, date, mark and form values are on it, never the content itself or the document’s name. The record is kept in the Keychain on your device, so deleting a document or the App does not reset it, and it syncs through iCloud Keychain if you have that turned on. Only Apple holds it there; we do not receive it. Erasing the device removes it.

The App keeps its files in storage that iOS protects while your device is locked. Documents you delete move to the App’s Trash and are removed for good after 30 days.

iCloud sync

eSign can keep your data in step across your devices using Apple’s iCloud, through the CloudKit framework built into iOS. This is on by default for devices that are signed in to iCloud, and you can turn it off at any time in the App’s settings.

When syncing is on, your data is stored in the private database of your own iCloud account. It is not stored on our servers and it is not shared with us. We cannot see, retrieve or restore it. Apple provides this storage as our processor, and its handling of the data is governed by Apple’s Privacy Policy and your iCloud terms with Apple.

What syncs: your documents with the items placed on them and their form values, your signatures and stamps and their order, and the Trash. Document names, placed items and form values are stored in CloudKit’s end-to-end encrypted fields, and files are stored as CloudKit assets, which Apple encrypts. Deleting a document, signature or stamp on one device deletes it from your iCloud and from your other devices. A document too large for iCloud stays on the device it is on. Settings such as the theme stay on each device.

CloudKit also uses Apple’s silent push notifications to tell your device that something changed in iCloud. They travel from Apple to your device and are never shown as alerts. We do not run a push server and we do not collect your device’s push token.

Turning syncing off stops further data from leaving your device. Any copy already in iCloud stays in your account until you remove it, which you can do from Settings → [your name] → iCloud → Manage Account Storage on your device.

Purchases and subscriptions (RevenueCat)

In-app purchases and subscriptions in eSign are sold by Apple through the App Store. We use RevenueCat to keep track of what you are entitled to, so that a purchase you have made is recognised on your other devices and can be restored.

We never receive your payment details. Your card, billing address and Apple ID stay with Apple. We do not see them at any point.

RevenueCat receives:

• a randomly generated identifier for the installation, used as the subscriber ID, and the identifier for vendors (IDFV) — an Apple identifier that is shared only among apps from the same developer and is reset when you delete them;
• the App Store transaction receipt, which tells us which product was bought, when the subscription renews or expires, and whether it is active;
• basic technical context — app version, device model, operating system version, and country derived from the App Store storefront.

RevenueCat, Inc. acts as our data processor and provides protection for this data equal to that described in this policy; see the RevenueCat Privacy Policy.

Managing or cancelling a subscription is done through Apple, in Settings → [your name] → Subscriptions on your device. Apple’s handling of the purchase is covered by Apple’s Privacy Policy.

Product analytics (PostHog)

eSign uses PostHog to understand how the App is used in aggregate, so we can see which features are worth improving and where people get stuck.

PostHog receives:

• a randomly generated identifier for the installation, which is not your name, email address, Apple ID or advertising identifier;
• a small set of events that mark steps in using the App: going through the welcome pages (which page was reached and when they were finished); importing a document (whether it came from Files, Photos, a scan or another app, the kind of file and a rounded page count); creating a signature or stamp (whether it was drawn, typed, made from a photo or a preset); placing a first item; sharing a document (the format, a rounded page count, and how many signatures, stamps, text boxes, dates and marks it held); editing pages, merging documents and using search (the fact that you did, not what you searched for); changing a setting (the setting’s name and its new value); opening the App from Siri, Shortcuts, a widget, a Home Screen quick action or Spotlight (which one); the eSign Pro screen being shown or closed, a purchase being started, completed, cancelled or failing (with a short reason such as a network problem), and the result of restoring purchases, each with which part of the App opened the screen; problems such as an error category or a sync problem; and the App being installed, opened, updated or closed. We do not record which screens you view or which controls you tap, and we never send prices, receipts or your Apple Account to PostHog.
• basic technical context: app version, device model, operating system version, a rounded count of the documents in your library, whether iCloud sync is on, and whether you have eSign Pro. Your IP address reaches PostHog’s servers as part of any internet connection, but PostHog is set to discard it, and the App tells PostHog not to work out a location from it.

PostHog does not receive the content you create in the App. Event names describe actions, not the text, images or personal details you enter.

PostHog Inc. acts as our data processor and provides protection for this data equal to that described in this policy; see the PostHog Privacy Policy and Data Processing Agreement. We do not use PostHog for advertising, and we do not enable cross-app or cross-site tracking.

Analytics is on by default. You can turn it off at any time in the App’s settings; when it is off, no events are sent.

Crash and error reporting (Sentry)

eSign uses Sentry to report crashes and errors, so that faults can be diagnosed and fixed.

A crash report contains:

• the technical stack trace describing where in the code the failure occurred;
• app version, device model, operating system version, and device state at the time (such as free memory);
• a random technical identifier that Sentry’s software may generate for the installation, so that repeated reports from one device can be grouped. No name, email address or account identifier is attached to a report, and this identifier is not your Apple Account or your advertising identifier;
• a few recent app events leading up to the failure, for example the App moving to the background;
• anonymous session start and end markers, so we can measure how many sessions end in a crash;
• reports of the App freezing or being ended by the system, and the diagnostics iOS itself makes when the App freezes or uses unusually much processor time or storage writing (stack traces and counts only).

Crash reports are not intended to contain the content you create. We do not attach your data to reports, and we do not send Sentry your name or email address. Because a stack trace is generated automatically at the moment of failure, we cannot guarantee that a fragment of data is never included incidentally; where that is possible we configure Sentry’s data-scrubbing to remove it.

Functional Software, Inc. (Sentry) acts as our data processor and provides protection for this data equal to that described in this policy; see the Sentry Privacy Policy. Reports are retained for a limited period and then deleted automatically.

Crash reporting is on by default. You can turn it off at any time in the App’s settings. It is the same switch as for product analytics, so turning it off stops both.

The App Store and ratings

eSign may invite you to rate it, and offers a link to write a review. Both are handled entirely by Apple’s App Store. If you choose to leave a review, the review and any name shown alongside it are published by Apple under your App Store account, not by us. We receive only the aggregate, anonymous statistics Apple makes available to every developer — such as total downloads and the average rating — which do not identify you.

Legal bases for processing

Where the GDPR or the Turkish Personal Data Protection Law (KVKK) applies, we rely on the following bases:

• Performance of a contract — the processing needed to make the App work as you have asked it to, including recognising a purchase you have made.
• Legitimate interests — keeping the App stable and secure, which is why crash reports are collected, and seeing in aggregate how the App is used so we can improve it, which is why product analytics is collected, balanced against your interest in privacy. You can object at any time in the App’s settings — one switch covers both analytics and crash reports, and collection stops.

How long we keep information

Data stored on your device is kept until you delete it or delete the App. Data in your iCloud account is kept until you remove it from that account. Crash reports are retained for up to 90 days and then deleted automatically. Analytics events are retained in aggregated form for up to 12 months. Purchase records are kept for as long as your entitlement may need to be restored, and for as long as tax and accounting law requires us to keep them. If you email us, we keep the correspondence for as long as needed to deal with it, and normally delete it within 24 months.

Deleting your data

You can remove your information at any time, without asking us:

• Delete the App from your device. That removes the data it stored locally.
• To remove the iCloud copy, turn syncing off in the App and then delete the App’s data in Settings → [your name] → iCloud → Manage Account Storage. Deleting the App alone does not necessarily remove data already in iCloud.

For anything held by the third-party services named above, write to cevatsupport@gmail.com and we will delete what we can identify. Because we deliberately avoid collecting information that identifies you, please tell us anything that helps us locate the records — for example the device and the approximate date. We answer within 30 days.

Children

eSign is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at cevatsupport@gmail.com and we will delete it.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent you have given. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR; residents of the Republic of Türkiye have equivalent rights under the KVKK; residents of California have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

We do not sell or share personal information as those terms are used in the CCPA/CPRA, and we do not engage in cross-context behavioural advertising.

To exercise any right, email cevatsupport@gmail.com. Exercising these rights is free. You also have the right to complain to your local data protection authority.

International transfers

Some of the service providers named above are based in the United States and other countries outside your own. Where personal data is transferred out of the European Economic Area, the United Kingdom or the Republic of Türkiye, it is done under the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism offered by the provider.

Security

Data on your device is protected by iOS, including the device encryption that applies when your device is locked with a passcode. Connections to any service named above use encrypted HTTPS. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy — for example if a future version of the App uses a new service. The effective date at the top of this page always shows when it last changed. When a change is material, we will make it noticeable in the App or on the App Store listing rather than relying on you to re-read this page.

Contact

Cevat Akdemir
Email: cevatsupport@gmail.com

We are an individual developer, not a company, and we have not appointed a data protection officer because we are not required to. Email reaches us directly.