Effective date: 26 October 2026
This Privacy Policy explains how GAL APP LTD (“we”, “us”) processes data when you use Signature: sign documents (SignQuick), a mobile application for signing documents, PDFs and images on iPhone (the “App”). We are the controller of this data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. PRO bought on the website temfy.app/signquick/ is sold by ART APP LTD as described in section 4.
We process data on the basis of our legitimate interest in running and improving the App, to perform our contract with you (subscription), and with your consent where we ask for it (tracking permission, camera and photo access, support requests). This does not limit the rights you have under the law of your country.
Documents and images you open from Files or Photos, the signatures and initials you draw or capture with the camera, and the signed files are processed on your device and are not sent to our servers. Signatures and initials are stored in the App on your device. Signed documents are saved where you choose (Files, Photos) or shared through the system share sheet — you choose what to send and to whom. Camera and photo library access is requested only to capture a signature and to open or save your documents; you can withdraw it in your device settings.
Subscriptions are sold and billed by the App Store; we never see your payment details. Purchases are handled by RevenueCat (USA), which receives a random anonymous user ID created on your device (not linked to your name, email or phone number), your purchase history, the device identifiers described in section 6, your Firebase installation and app instance IDs and the details in section 5 (subscription status, install source, app language), so that purchase statistics match usage statistics. RevenueCat Privacy Policy.
Buying PRO on the Website. PRO bought on temfy.app/signquick/premium/ is sold and billed by ART APP LTD (a private company limited by shares, registered in England and Wales, company number 16291637, registered office 86–90 Paul Street, London EC2A 4NE), which is the controller of the payment and subscription data described in this paragraph; the terms of purchase are in the Terms of Sale.
The Website subscription record (the email hash and its link to the App’s user ID) is kept for as long as it is needed to provide and restore access and is deleted at your request; payment records are kept for as long as the law requires. A Website subscription is cancelled on the Manage subscription page.
The App does not collect your contacts, precise location, health data, or browsing and search history.
The App asks for permission to track (App Tracking Transparency). If you allow it, the advertising identifier (IDFA) is passed to RevenueCat and Google Analytics for Firebase to measure which advertising brought installs and purchases. Without permission the IDFA is not available to the App; RevenueCat then receives only the identifier for vendor (IDFV) and the IP address. You can change your choice at any time in Settings → Privacy & Security → Tracking.
We do not sell data or share it with third parties other than the processors listed in this Policy — Google (Firebase, Google Analytics, Crashlytics, Remote Config; Google Analytics on the Website), Apple (App Store, Apple Search Ads install source, Sign in with Apple), RevenueCat, Stripe (Website payments), Yandex (Yandex.Metrica on the Website), Netlify (hosting of the Website and its server functions, support request intake and storage), Telegram FZ-LLC (delivery of support requests) — or where disclosure is required by law. These processors may process data in the USA, the European Union and other countries; such transfers rely on appropriate safeguards such as standard contractual clauses.
Data on your device is kept until you delete it or the App. Purchase history is kept as long as needed to provide the subscription and for accounting. Usage statistics and crash reports are kept according to the retention settings of the services in section 5. Technical details of support requests are deleted after 12 months; the Telegram conversation is kept for as long as needed to answer.
You have the right to access, correct or delete your personal data, to restrict or object to processing, to data portability and to withdraw consent, by writing to the address in section 11 (please include your support request number if you have one). You can complain to the UK Information Commissioner’s Office (ico.org.uk) or the data protection authority of your country. Tracking, camera and photo permissions can be withdrawn in your device settings. Data travels between the App and servers over an encrypted connection (HTTPS). The App is not intended for children under 13 and we do not knowingly collect their data.
We may update this Policy. The current version is always available at temfy.app/signquick/privacy.html.
GAL APP LTD — a private company limited by shares, registered in England and Wales, company number 16411704
Registered office: 86–90 Paul Street, London EC2A 4NE, United Kingdom
Email for personal data requests: artappltd@gmail.com