Raha Sign Privacy Policy
Effective October 7, 2026. Applies to the Raha Sign Android app and the signing pages at rahatools.com/s/.
The short version
- Documents you sign only for yourself stay on your phone. They are never uploaded.
- Documents you send for signature are stored encrypted so the people you choose can sign them.
- We don’t sell your data, don’t show ads, and don’t use your documents to train AI.
- You can delete your account and all your documents at any time, in the app.
What we collect and why
| Data | Why |
|---|---|
| Account: name, email, password (stored only as a secure hash), or your Google account email if you sign in with Google | To create and secure your account |
| Documents you send for signature: the PDF, the fields you place, your message, recipients’ names, emails and optional phone numbers and access codes | To deliver the document and collect signatures |
| Signatures and filled-in values (as images and text) | To complete the document and build the final signed PDF |
| Audit trail: when a document was sent, opened, signed or declined, with the signer’s IP address and browser or device | To prove who signed what and when (Certificate of Completion), as e-signature laws expect |
| Your saved signature and initials (drawn or typed) | So you can reuse them; uploaded signature images stay on your phone |
| Push notification token, app version and language | To tell you when someone opens or signs your document |
| Plan and purchase status (from Google Play) | To give you the features you paid for |
We do not collect your contacts, location, or files you don’t choose, and the app does not track you across other apps or websites.
Documents you sign yourself
When you use “Sign myself”, the PDF, your signature and the signed copy are created and kept on your device only. Remove them in the app or by uninstalling it.
Who we share data with
Only with the people you send a document to (they see the document, the sender’s name and email, and earlier signers’ completed fields), and with service providers that run the app for us under contract:
- Supabase (database, sign-in, encrypted file storage; servers in the United States)
- Resend (sending emails such as invitations, reminders and completed copies)
- Google (Firebase Cloud Messaging for notifications, Google sign-in, Google Play for purchases)
We may disclose data if the law requires it. We never sell or rent personal data.
How long we keep data
Documents, signatures and audit trails are kept until you delete the document or your account. Deleting your account removes your profile, documents, files and templates from our systems right away; copies in encrypted backups expire within 30 days. A document you received from someone else belongs to that sender’s account.
Security
All connections use HTTPS. Files are stored encrypted in a private storage bucket and are only reachable through short-lived links. Every completed PDF gets a SHA-256 fingerprint anyone can check at rahatools.com/s/verify.
Your rights
You can access, correct, export or delete your data. Most of this is in the app (Account). Residents of the EU, UK and California (GDPR, UK GDPR, CCPA/CPRA) have the right to know, access, correct, delete and port their data, and to object to processing; we honor these for everyone. To make a request, email us; we answer within 30 days.
Delete your account
In the app: Account → Delete account. Or see rahatools.com/s/delete-account.
Children
Raha Sign is not meant for children under 16, and we don’t knowingly collect their data.
Changes
If we change this policy we’ll update the date above and, for important changes, tell you in the app or by email.
Contact
Email support@rahatools.com.