NDA App

Privacy Policy

Last updated: April 22, 2026

This policy describes how the NDA App iOS application ("the App") collects, uses, and stores information. The App is operated by [OPERATOR LEGAL NAME] ("we," "us," or "the Operator") and is used on-site at private property or controlled-access environments to capture non-disclosure agreements ("NDAs") from visitors, contractors, vendors, delivery personnel, and other individuals granted access.

1. Who this policy applies to

This policy applies to individuals ("Visitors") who use a device running the App, typically an iPad operated as a kiosk. It does not cover third-party websites, software, or services you may reach from outside the App.

2. Information we collect

When you complete the check-in flow inside the App, we collect the following:

Identity document image. A photograph of a government-issued photo ID (for example, a driver's license or passport), captured using the device camera.
Extracted ID data. Text extracted from the ID using on-device optical character recognition (OCR), which may include your name, address, date of birth, document number, issue date, and expiration date.
Photograph of you. A selfie photograph captured using the device camera to confirm presence at signing.
Signature. A handwritten signature you draw on the device screen.
Contact information. A phone number and/or email address you provide for visitor lookup and optional delivery of a signed copy.
Visit metadata. Visitor type (for example: guest, contractor, vendor), company or host name, timestamp of the visit, and the version of each NDA you signed.
Signed NDA document. A PDF copy of each NDA you signed, with your name, signature, timestamp, and a cryptographic hash of the document contents embedded for tamper-evidence.

We do not collect device location, contacts, health data, financial account information, advertising identifiers, or cross-site browsing activity. The App does not include third-party analytics SDKs, advertising SDKs, or social-media trackers.

3. How the information is used

To bind you to the NDA you signed and create a record of that agreement.
To identify you if you return to the property, so repeat visits can skip steps you have already completed.
To allow the Operator's authorized staff to verify who was on site and when.
If you opt in, to email you a copy of the NDA you signed.

We do not sell personal information. We do not use your information for advertising or profiling. We do not share your information with third parties for their own marketing.

4. Where your information is stored

All captured data is stored locally in an encrypted SQLite database on the same iPad running the App. Data is not transmitted to our servers or any third-party cloud service by default. The Operator may export signed PDFs or CSV summaries on demand; any such export leaves the device only at the direction of an authorized administrator of the property.

If you opt in to email delivery of your signed copy, your email client and email service provider will process the outbound message; that processing is governed by their own privacy policies, not this one.

5. How long we keep your information

The Operator retains visitor records for as long as reasonably necessary to enforce the NDA you signed and to maintain an access-control record, or for a shorter period if required by law. An administrator may delete individual records or all records at any time from within the App's admin panel.

6. Who can see your information

Only individuals authorized by the Operator and physically in possession of, or authenticated to, the device can view captured records. Access to the administrator view is gated by a passcode and, where enabled, by Face ID or Touch ID. The App does not transmit personal data to Apple, to us (the developer), or to any third party.

7. Children

The App is intended for use by adults granted access to private property. It is not designed for use by children under 13, and we do not knowingly collect information from children under 13. If you believe a minor's information has been captured, the Operator can delete the record on request.

8. Your rights

Depending on where you live, you may have the right to:

Know what personal information has been collected about you.
Request a copy of your record.
Request correction of inaccurate information.
Request deletion of your record, subject to the Operator's legal obligations.
Withdraw consent to processing, subject to the same.

To exercise any of these rights, contact the Operator at the address below. Because records are stored on the device at the property, please allow a reasonable time for the request to reach an on-site administrator.

9. Security

We use Apple platform security features, local database encryption, and access controls to protect captured information. No method of electronic storage is perfectly secure, and we cannot guarantee absolute security; however, because data remains on-device by default, the attack surface is limited to the physical device.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the App after a change means you accept the updated policy.

11. Contact

Questions about this policy, or requests to exercise your rights:

[OPERATOR LEGAL NAME]
[MAILING ADDRESS]
Email: [CONTACT EMAIL]