Privacy policy

Overview

This policy explains how SignDeck (“we”, “us”) handles information when you use the SignDeck mobile app for iOS and Android and this website.

Information we collect

Your files

The PDF tools (sign, scan, protect, unlock, redact, watermark, merge, split, organize, compress, images to PDF and back, compare, audit and remove hidden data) run on your device, and your files stay on your device.

The one exception is Doc to PDF (Word, Excel, PowerPoint, RTF and TXT files). The file you choose is uploaded to our converter server over HTTPS. The upload and the converted result are deleted right after the conversion finishes.

Data stored only on your device

Your saved signatures and the History list are stored only on your device.

Data stored on our servers

Your account id and sign-in provider (guest, Google or Apple). A guest account is tied to a random device identifier.
Your name and email address, only if you sign in with Google or Apple.
Your credit balance and credit history (reason, tool used, amounts and dates).
Purchase records (store, product, store transaction id and status).
Device records: platform, app version, last-seen time, a one-way hash of the device identifier, and a push token if notifications are on.
Hashed session tokens.
Server logs (request id, status and timing, with secrets redacted).

When you contact us

If you email us, we receive your email address and whatever you include in your message.

Purchases and credits

Every new account, including guest accounts, starts with welcome credits. Each tool use costs credits (usually 1). More credits are available as consumable in-app purchase packs, billed by Apple (App Store) or Google (Google Play), which handle the payment. You must sign in with Google or Apple to buy credits.

We store the purchase records listed above so we can add the credits to your balance. If a store refunds a purchase, the credits from it are removed.

How we use information

To run your account and your credit balance, including moving guest credits into your account when you sign in.
To verify purchases and add or remove the matching credits.
To convert files with Doc to PDF when you use it.
To send push notifications, if you turn them on.
To prevent abuse of welcome credits.
To keep the service working and secure, using server logs.
To answer your messages.

Storage and retention

Data on your device (files, saved signatures and History) stays there until you remove it in the app or uninstall the app. Doc to PDF uploads and results are deleted right after the conversion finishes.

Account data on our servers is kept while your account exists. When you delete your account, it is removed or anonymized as described on Delete your account and data.

Your choices and deletion

Use the app as a guest. Signing in with Google or Apple is optional, except to buy credits or use Doc to PDF.
Clear History and saved signatures inside the app.
Turn notifications off to stop push notifications.
Delete your account inside the app (Account tab, then Delete account). It takes effect immediately. Uninstalling the app does not delete server data. Full details: Delete your account and data.

Security

Data is sent to our servers over TLS. Session tokens and the device identifier are stored only as one-way hashes, and secrets are redacted from server logs. No method of storage or transmission is completely secure.

Your rights in California (CCPA/CPRA)

California residents may have the right to know, delete and correct personal information. We will not discriminate against you for exercising these rights. To delete your account and data, see Delete your account and data.

Changes to this policy

This version was last updated on 23 October 2026. If we change this policy, we will update that date and, for significant changes, let you know in the app or on this website.

Contact us

For help, visit support.

SignDeck.