Last updated October 2, 2026
Privacy Policy
Who we are
Signature Maker: eSign & Form (“eSign”, “the app”) is published on the App Store by Alina Bohuslavska, an independent developer (“we”, “us”). We are the controller of the limited data described below. You can reach us at support@esigncreator.com.
The short version
- Your documents, signatures, form entries and autofill details are stored only on your device. We never receive them.
- There is no account. We don’t ask for your name, email or phone number.
- We collect anonymous usage analytics and purchase records so we can fix problems, improve the app and manage subscriptions.
- We don’t sell your data, show ads, or track you across other companies’ apps and websites.
Data that stays on your device
The following is created and stored locally in the app’s private storage on your iPhone, iPad or Mac and is not sent to us or to any third party:
- Documents you import, scan, sign or fill in, and the files you export.
- Your saved signatures, initials and stamps, including signatures extracted from photos.
- Form templates and your autofill profile (for example, a name or address you choose to save).
- Document lock settings. Face ID and Touch ID are handled entirely by iOS; the app only receives a yes/no result and never has access to your biometric data.
Document conversion, scanning and signature background removal all run on your device. If you use iOS device backups (iCloud Backup or a computer backup), this local data may be included in those backups under Apple’s terms. Deleting the app deletes this data from the device.
Device permissions
- Camera: to scan paper documents and photograph a signature. Images are processed on the device.
- Photos: to show your recent photos so you can pick one to sign. Selected images are processed on the device.
- Face ID: to unlock documents you have locked.
Each permission is optional and can be changed at any time in the iOS Settings app.
Data we collect
Usage analytics
We use PostHog to understand how the app is used, for example which screens are opened, whether importing a document succeeded, or whether a paywall was shown. Events are linked to a random identifier generated by the app, not to your name, email or Apple ID. Along with events we receive technical information such as device model, iOS version, app version, language and region settings, and the IP address the request came from (used to estimate an approximate country or city).
Analytics events never include the content, names or text of your documents, your signatures, or anything you type into a form.
Purchases and subscriptions
Payments are processed by Apple. We never see your payment card or Apple ID details. We use RevenueCat to validate purchases and manage subscription status. RevenueCat receives an anonymous app user identifier, the products you bought, transaction and renewal dates, your App Store country and currency, and technical device information.
Ad attribution
If you installed eSign after tapping an Apple Search Ads advertisement, iOS provides a one-time attribution token through Apple’s AdServices framework. We send it to Apple (and to RevenueCat) to learn which campaign, ad group or keyword led to the install, and we attach that campaign information to analytics. If you open the app from a link containing campaign parameters (such as utm_source), we record those parameters too. This is not cross-app tracking: we do not use the advertising identifier (IDFA) and never ask for tracking permission.
When you contact us
If you email us, we receive your email address and whatever you include in the message, and use it only to reply to you.
Why we use this data
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Provide paid features and restore purchases | Purchase records | Performance of a contract |
| Find bugs, measure what works and improve the app | Usage analytics, device information | Legitimate interests |
| Understand which ads bring people to the app | Attribution data | Legitimate interests |
| Answer support requests | Your email and message | Legitimate interests |
| Meet tax, accounting and legal obligations | Purchase records | Legal obligation |
Service providers
We share data only with the providers that process it on our behalf:
- PostHog, Inc. (analytics, servers in the United States): privacy policy
- RevenueCat, Inc. (purchase management, United States): privacy policy
- Apple Inc. (payments and Search Ads attribution): privacy policy
We may also disclose information if required by law or to protect our rights, or to a successor if the app is sold or transferred. We do not sell or rent personal information, and we do not “share” it for cross-context behavioral advertising.
International transfers
Our providers are based in the United States. Where data from the EU, UK or Switzerland is transferred there, it is protected by the providers’ standard contractual clauses or an equivalent safeguard.
How long we keep data
Analytics data is kept for as long as it is useful for improving the app and is then deleted or aggregated. Purchase records are kept for as long as needed to provide your purchases and to meet legal and accounting requirements. Support emails are kept while we handle your request and for a reasonable period afterwards.
Your choices and rights
Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have the right to access, correct, delete or port your personal data, to object to or restrict its processing, and to complain to your local data protection authority. To exercise these rights, email support@esigncreator.com. Because we don’t know who you are, we may ask for details that let us find your data, such as the approximate date of a purchase.
- Deleting the app removes all documents and signatures from your device and resets the anonymous analytics identifier.
- You can turn off camera, Photos and Face ID access in iOS Settings.
- You can manage or cancel subscriptions in Settings → your name → Subscriptions.
We will not treat you differently for exercising any of these rights.
Security
Your documents are stored inside the app’s sandbox on your device, protected by iOS data protection and, if you choose, by a document lock. Data sent to our providers travels over encrypted connections (HTTPS). No method of storage or transmission is perfectly secure, but we keep the data we hold to the minimum described here.
Children
eSign is a general productivity app and is not directed at children under 13 (or the equivalent age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to this policy
If we change how the app handles data, we will update this page and the “Last updated” date above. For significant changes we will also let you know in the app.
Contact
Questions about privacy? Email support@esigncreator.com.