ExtraSignPrivacy Policy
1. Who we are
ExtraSign is published by Eric Z (“we”). Contact: candy66861@gmail.com.
2. Data that stays on your device
- Change orders: titles, descriptions, amounts, line items, projects, clients, company details, logo, price list, notes and history.
- Photos you take in the app or pick from your library, including their capture time and location.
- Location: with your permission, the app reads your location only while you take a photo or a signature is made, to record where it happened. There is no background location.
- Signatures and the names and roles of the people who sign.
- Clients from Contacts: if you pick a contact, only the fields you choose are copied into the app. The app does not read your address book.
- PDFs, backups and evidence packages you create go only where you send or save them.
Backups: version 1.0 has no cloud sync. If you create a backup file in Settings › Data and save it to Files or iCloud Drive, it is stored where you choose (iCloud Drive is operated by Apple under Apple’s privacy policy). We cannot access it.
3. Data we collect
3.1 Anonymous usage statistics (you can turn this off)
We record events such as “change order created”, “signature completed” or “PDF shared”, with coarse details such as the PDF layout, whether the PDF language differs from the app language, or a photo count range. Each event includes a random installation ID created by the app, app version, iOS version, device model, language, region and time zone.
We never collect the content of your change orders: no titles, descriptions, amounts, client names, addresses, photos, coordinates or signatures. We do not collect your name, email address or the advertising identifier (IDFA).
Purpose: learning which features are used so we can improve the app. Turn it off at any time in Settings (“Share anonymous usage statistics”); the app stops sending its own events right away, and the analytics SDK stops completely the next time the app starts. Raw events are kept for 90 days; daily totals without any ID are kept for 400 days.
3.2 Crash reports
If the app crashes, Firebase Crashlytics (Google) receives a crash report: stack trace, app version, iOS version, device model, free memory and storage, and a Crashlytics installation ID. We use it only to fix bugs. It is turned off together with usage statistics.
3.3 Diagnostic logs
The app keeps a short technical log on your device (for example “PDF generation took 1.2 s” or an export error code) for up to 7 days. It never contains the content of your change orders. Only when we investigate a problem, usually one you reported, can we ask the app to upload this log for a specific installation ID. Uploaded logs are deleted within 90 days.
3.4 Network data
When the app sends statistics or logs to our server, our hosting provider Cloudflare processes your IP address to deliver the request and protect against abuse. We do not store IP addresses.
3.5 Purchases
Payments are handled by Apple. We never receive your payment details or Apple Account. Anonymous statistics record that a purchase or restore happened, with the price and currency.
3.6 Support email
If you email us, we receive your email address and what you write (and anything you attach). We use it only to answer you and keep support emails for up to 2 years.
4. What we never do
- No advertising and no ad SDKs.
- No tracking across other companies’ apps or websites, no IDFA.
- No selling or sharing of data, no data brokers, no profiling.
5. Permissions
| Permission | Why |
|---|---|
| Camera | To photograph the work. |
| Location (While Using) | To record where a photo was taken and where a change order was signed. Optional. |
| Photos | Photos are picked with the system picker; the app sees only the photos you choose. |
6. Your clients’ data
When you record a client’s name, contact details or signature, you decide what to record and with whom to share the PDF. The data stays on your device (and in backups you export); we do not process it. Please tell your clients that you keep a record of the change order.
7. Service providers and international transfers
| Provider | What for | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Servers and database | Usage statistics, diagnostic logs | USA and Cloudflare’s global network |
| Google LLC (Firebase Crashlytics) | Crash reports | Crash reports | USA |
| Apple Inc. | App Store, purchases, iCloud | Handled under Apple’s privacy policy | — |
Data may be processed outside your country. For users in the EEA, the UK and Switzerland, transfers rely on the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses offered by these providers.
8. Legal bases (EEA, UK)
Usage statistics, crash reports, diagnostic logs and abuse protection: our legitimate interest in running and improving a reliable app (Art. 6(1)(f) GDPR); you can object at any time by turning statistics off. Support: your request (Art. 6(1)(b) GDPR).
9. Your choices and rights
- Turn off anonymous statistics and crash reports in Settings.
- Delete drafts, void signed change orders, or delete the app to remove everything on the device. Delete backup files you exported in the Files app.
- Because we do not know who you are, we can only find server data by its installation ID. Email us to request access or deletion.
- Depending on where you live (for example under the GDPR or California law), you may have rights to access, correct, delete, restrict or object to processing and to data portability, and to complain to your data protection authority. We do not sell or share personal information.
10. Children
ExtraSign is a business tool and is not directed at children.
11. Security
All connections use HTTPS. Our server holds no change orders, photos, signatures or client data. This website uses no cookies and no third-party scripts.
12. Changes
We will update the date above when this policy changes. If a future version adds features that send change order data to a server (for example remote signing links), we will update this policy before releasing them.
13. Contact
Eric Z · candy66861@gmail.com