Privacy Policy

1. Introduction

Fax From Phone ("the App") is developed and operated by Fahad Rashid ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

2. Information We Collect

Account Information

• Email address — used for account creation and login
• Password — stored securely using industry-standard hashing
• Name — if provided during registration

Fax Data

• Fax documents — files you upload or scan for sending via fax
• Recipient fax numbers — the numbers you send faxes to
• Fax history — records of sent faxes including status, timestamps, and page counts

Device and Usage Data

• Device information — device model, operating system version, and unique device identifiers
• Usage data — app interactions, feature usage, and crash reports
• Camera access — used solely for scanning documents to fax (only when you grant permission)

Payment Information

Subscription and in-app purchase transactions are processed by Apple (App Store) and RevenueCat. We do not directly collect or store your credit card or payment details.

3. How We Use Your Information

• Sending faxes — to transmit your documents to the recipient fax number you specify
• Account management — to create, maintain, and secure your account
• Fax history — to display your sent fax records within the App
• Subscription management — to manage your plan and page balance
• App improvement — to analyze usage patterns and improve the App experience
• Customer support — to respond to your requests and resolve issues

4. Legal Basis for Processing (GDPR)

If you are located in the EU/EEA, we process your personal data under the following lawful bases:

• Contractual necessity — processing your account information, fax documents, and recipient numbers is necessary to provide the fax sending service you have requested (Article 6(1)(b)).
• Legitimate interest — we process device and usage data to maintain, secure, and improve the App, which is in our legitimate interest and does not override your rights (Article 6(1)(f)).
• Consent — we access your device camera and photo library only when you explicitly grant permission. You can revoke this consent at any time through your device settings (Article 6(1)(a)).
• Legal obligation — we may process and retain certain data to comply with applicable laws, regulations, or legal requests (Article 6(1)(c)).

5. Third-Party Services

We use the following third-party services to operate the App:

• Sinch — our fax delivery provider. Your fax documents and recipient numbers are transmitted to Sinch to complete fax delivery. See Sinch's Privacy Notice.
• Amazon Web Services (AWS) — we use AWS S3 to securely store uploaded fax documents. Data is encrypted at rest and in transit.
• RevenueCat — manages subscription and purchase processing. See RevenueCat's Privacy Policy.
• Apple App Store — handles payment processing for subscriptions and in-app purchases.

All third-party service providers are contractually required to protect your data with safeguards equivalent to or greater than those described in this Privacy Policy. They may only process your data for the specific purposes outlined above.

6. International Data Transfers

Your data may be transferred to and processed in the United States, where our servers (AWS) and service providers (Sinch, RevenueCat) are located. If you are located in the EU/EEA or other regions with data transfer restrictions, please be aware that your data will be transferred to and stored in a country that may have different data protection laws.

We rely on Standard Contractual Clauses (SCCs) approved by the European Commission and other appropriate safeguards to ensure that your data is protected during international transfers in compliance with GDPR.

7. Tracking and Advertising

The App does not track you across other companies' apps or websites. We do not use advertising identifiers or participate in ad networks. We do not sell, share, or rent your personal information to third parties for marketing or advertising purposes.

8. Camera and Document Access

The App requests access to your device camera to enable document scanning. Camera access is used solely for capturing documents you wish to fax. We do not access your camera in the background or for any other purpose.

The App may also request access to your photo library or files so you can select existing documents to fax. This access is used only when you initiate the action.

9. Data Retention

• Account data — retained as long as your account is active. Deleted upon account deletion request.
• Fax documents — stored on AWS S3 for up to 30 days after transmission to allow you to view your fax history, then automatically deleted.
• Fax history records — metadata (recipient number, status, timestamps) is retained for up to 90 days, then automatically deleted.
• Usage data — aggregated and anonymized data may be retained indefinitely for analytics.

10. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL) for all data transmissions
• Encryption at rest for stored documents (AWS S3 server-side encryption)
• Secure password hashing (bcrypt)
• Access controls and authentication for backend services

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

11. Your Rights

All Users

• Access — request a copy of the personal data we hold about you
• Deletion — delete your account and all associated data directly from the Settings screen within the App. Upon deletion, all your personal data, fax documents, and fax history will be permanently removed within 30 days.
• Correction — request correction of inaccurate personal data

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information
• Non-discrimination for exercising your privacy rights

EU/EEA Residents (GDPR)

If you are located in the EU/EEA, you have additional rights including:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent at any time (where processing is based on consent)
• Right to lodge a complaint with a supervisory authority

If you are located in a jurisdiction where the age of digital consent is higher than 13 (such as 16 in many EU/EEA countries), you must meet that age requirement to use the App.

To exercise any of these rights, please contact us at the address below.

12. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the "Effective Date" above. Your continued use of the App after changes constitutes acceptance of the updated policy.