Privacy Policy

Effective date: October 7, 2026

This Privacy Policy explains how Egregor (the "App", available on iPhone) and the website digitalsignatureapp.com (together, the "Service") handle your information. The Service is operated by Alvin Jacobs, an individual based in Buenos Aires, Argentina ("we", "us", "our"), who is responsible for your personal data.

1. The Short Version

- Your documents stay on your iPhone. We only receive a SHA-256 fingerprint of each file you sign or verify, never the file itself.
- Your private signing key is created inside your iPhone's secure hardware and never leaves it.
- Signatures are publicly verifiable: anyone who has a file and your username can check whether you signed it.
- Identity verification is optional and only for the Pro plan. It is done by Stripe. We never receive images of your ID or your selfie.
- We do not sell your data, show ads, or use analytics or tracking tools.
- You can delete your account at any time from the App.

2. Information We Collect

2.1 Account information
- Your username.
- Your password, stored only as a bcrypt hash. We cannot read your password.
- The date your account was created.

2.2 Device information
For each device you use with the App:
- A random device identifier generated by the App. It is not Apple's hardware identifier or your advertising identifier.
- The device name. By default this is the name set in your iPhone's settings, which often includes your first name (for example, "Alvin's iPhone").
- Your device's public key.
- The date the device was registered.

2.3 Signature records
When you sign a file, we store its SHA-256 fingerprint, your digital signature, which device made it, the date and time, and whether the signature was made with an active subscription from an identity-verified device.

2.4 Subscription information
Subscriptions are purchased and billed by Apple through the App Store. Apple sends us a signed record of your purchase, from which we store your plan, whether it is active, its expiry date, and Apple's transaction identifier. We never receive your payment card or bank details.

2.5 Identity verification (Pro plan, optional)
Identity verification is performed by Stripe, Inc. through its Stripe Identity service. Stripe uses your camera to capture a photo of your government ID and a live selfie, and checks that they match. We do not receive or store images of your ID or your selfie. From Stripe we receive and store:
- Your first and last name as shown on your ID.
- The date and time of verification.
- Stripe's verification session identifier.
- If a check fails, a short reason (for example, "document expired") so the App can explain what went wrong.
Stripe's processing of your ID and selfie is governed by Stripe's own privacy policy: https://stripe.com/privacy

2.6 Server logs
Our hosting provider keeps technical logs of requests to our server, which may include your IP address, the time of the request, and the address requested. We use these logs only for security and troubleshooting, and they are kept for up to 30 days.

2.7 Information stored only on your iPhone
Your private signing key and your login session are stored only on your device, in the iPhone's Keychain. We cannot access them.

2.8 What we do not collect
We do not collect the contents of your documents, your biometric data (Face ID and Touch ID are handled entirely by your iPhone), your contacts, your location, your photos, or any advertising or tracking identifiers.

2.9 Our website
Our website is hosted by Wix.com, which may set cookies that are strictly necessary for the site to work. When you verify a signature on the website, it sends us only the username you enter and the fingerprint of the file, never the file itself.

3. How We Use Your Information

We use your information only to:
- Create and manage your account and devices.
- Register your signatures and let anyone verify them.
- Issue signature certificates for Pro users.
- Apply your subscription and the limits of your plan.
- Carry out identity verification when you request it.
- Keep the Service secure and prevent fraud and abuse.
- Respond to your messages and support requests.
We do not use your information for advertising, and we do not sell it.

4. Legal Bases for Processing

Where the law requires a legal basis, we rely on:
- Performance of our contract with you (the Terms of Use), to provide the Service.
- Your consent, for identity verification. You can choose not to verify, or release a verified device at any time.
- Our legitimate interests in keeping the Service secure and preventing fraud.
- Compliance with legal obligations.

5. What Other People Can See

Verifying signatures is a public feature. Anyone who has a copy of a file and knows a username can check:
- Whether that user signed that exact file, and when.
- Which of the user's devices made the signature (shown as the random device identifier).
- Whether the signing device was identity-verified.
Anyone can also check whether a given username exists.

If you signed from an identity-verified device while subscribed to Pro, anyone with the file and your username can also download a signature certificate. It shows your ID-verified first and last name, your username, the device name, your public key, and the relevant dates. Certificates and verification results that others have downloaded cannot be recalled.

6. Who We Share Information With

We share information only with the service providers needed to run the Service:
- Apple, which processes your subscription purchases.
- Stripe, Inc., which performs identity verification.
- Railway Corp., which hosts our server and database in the United States.
- Wix.com, which hosts our website.
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or transfer of the Service, in which case this Policy will continue to apply to your information.

7. International Transfers

We are based in Argentina, and our server and database are hosted in the United States. Your information may therefore be processed outside your country. We take the steps required by applicable law to protect it when it is transferred.

8. How Long We Keep Information

- Account, device, signature and subscription records: until you delete your account.
- Identity verification results: until you release the device's verification or delete your account.
- Server logs: up to 30 days.
- Backups: deleted data may remain in backups for up to 30 days before being overwritten.

9. Deleting Your Data

You can delete your account in the App under Profile > Delete account. This permanently removes your account, your devices and your signatures from our servers, and removes your signing key from that iPhone. After deletion, your past signatures can no longer be verified.

Deleting your account does not cancel your subscription. Cancel it in your Apple ID account settings. Data held by Stripe must be requested from Stripe directly.

10. Your Rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, and to withdraw your consent at any time. To exercise these rights, contact us at info@digitalsignatureapp.com. We will respond within the time required by law.

Argentina: under Personal Data Protection Law No. 25,326, you may exercise your right of access free of charge at intervals of no less than six months, unless you have a legitimate reason to do so sooner. The Agency for Access to Public Information (AAIP), the authority responsible for enforcing Law No. 25,326, handles complaints regarding violations of personal data protection rules.

European Economic Area and United Kingdom: you also have the right to lodge a complaint with your local data protection authority.

11. Security

- Signing keys are created and stored in your iPhone's secure hardware and require Face ID or Touch ID to use.
- All communication with our server is encrypted with HTTPS.
- Passwords are stored only as bcrypt hashes.
- Subscription records from Apple and verification results from Stripe are cryptographically checked before we accept them.
No system is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires.

12. Children

The Service is not intended for anyone under 18 years of age, and we do not knowingly collect information from them. If you believe a person under 18 has created an account, contact us and we will delete it.

13. Changes to This Policy

We may update this Policy from time to time. We will post the new version on this page with a new effective date, and announce significant changes in the App.

14. Contact

Alvin Jacobs (Egregor)
Buenos Aires, Argentina
Email: info@digitalsignatureapp.com

Questions? Contact us at info@digitalsignatureapp.com