Penseal — PDF eSign & Fill

Overview

Penseal is a local-first PDF signing and form-filling application. Your privacy is our priority. This policy explains how Penseal handles your data.

Data Collection

Penseal does NOT collect, store, or transmit any personal data.

• No account required
• No sign-up, no email, no tracking identifiers
• No analytics that include document content
• No backend server

Documents

• All documents are processed locally on your device. Your PDFs never leave your device. They are not uploaded to any server.
• When you sign a PDF, Penseal exports a new copy (e.g. contract_signed.pdf) and leaves the original untouched.
• File access is only used to open PDFs you explicitly select via the system file picker (Android: Storage Access Framework, iOS: Files).
• Temporary/cache files are stored in the app's temporary directory and can be cleared via Settings → Clear Cache.

Signatures

• Signatures are private local assets.
• Drawn, typed, and uploaded signatures are stored as images in your app's documents directory (signatures/).
• They are never uploaded to any server. Signature previews are generated locally.

Permissions

File access

To open PDFs you choose. Penseal does not scan your device.

Storage

To save signed PDFs to Documents/signed/ and signatures to signatures/.

Biometric (optional)

If you enable App Lock, biometric authentication (Face ID / Fingerprint) is used locally via the operating system. No biometric data leaves your device.

Data Safety (Google Play)

Data collected: None
Data shared: None
Data encrypted in transit: Not applicable (no data leaves device)
Data encrypted at rest: Files are stored as standard PDFs/images on device storage. For full encryption, use system-level device encryption (device passcode). Penseal does not falsely advertise file encryption.

Advertising

• If ads are shown (Free tier only), they are generic placeholder banners on Home/Documents.
• No document content is ever sent to advertising systems.
• Ads are never shown while signing, placing signatures, editing, or reading documents.
• Pro users see no ads.

In-App Purchases

Pro features (unlimited signatures, advanced colors, etc.) are handled via the platform store (App Store / Play Store) using in_app_purchase. No payment data is handled by Penseal directly. All billing is via the store's sandbox/test and production flows. Restore Purchases is available in the paywall.

Crash Safety

Signing exports write to a temporary file (_signed.pdf.tmp) then atomically rename to the final file. If the app crashes or storage is interrupted, no corrupt PDF is left pretending to be valid. Original files are never overwritten.

Children's Privacy

Penseal does not knowingly collect data from children. As no data is collected, no special handling is required.

Changes

We may update this policy to reflect app changes. The date at the top will be updated. Continued use after changes means acceptance.

Contact

For privacy questions, contact: adnanakhtar798@gmail.com
This policy is also available inside the app at Settings → Privacy Policy.