Privacy Policy
Last updated: 9 October 2026
1. Who we are
PocketCraft OÜ ("PocketCraft", "we", "us") builds Fax, an iPhone app that turns a scanned or imported document into a fax and delivers it to a telephone fax number. This notice explains what the app handles, why it handles it, and what you can ask us to do about it. It covers the Fax iOS app and this website, and nothing else you may reach through a link we publish.
For the purposes of the EU General Data Protection Regulation, PocketCraft OÜ is the controller of the personal data described here.
2. The short version
- You never create an account. There is no name, email address or password to hand over.
- Documents you scan or import stay on your iPhone. Sending one fax uploads that one document so it can be delivered, and nothing else leaves the device.
- We measure how the app is used so we can fix and improve it, and we count pages against your weekly allowance.
- We do not sell your information, we do not share it with data brokers, and we never read the contents of your documents for advertising, profiling or to train any model.
3. How your device is recognised without an account
Fax has no sign-up. Instead, iOS issues every app developer a per-device identifier, known as the identifier for vendor. Fax uses that single value as its user identifier everywhere — with our own backend, with the subscription service that remembers what you have purchased, and with the analytics that tell us whether a screen is working.
Two consequences worth knowing. First, the identifier is scoped to us and to your device, so it cannot be used to recognise you in another developer's app. Second, iOS normally issues a fresh identifier if you delete Fax and install it again, which means the reinstalled app looks to us like a brand-new user and will not carry your history across.
Our backend pairs that identifier with an anonymous sign-in token so that the documents you upload can only be read back by the device that sent them.
4. Documents on your device
Scanned pages, imported photographs, imported files and anything you organise into folders are written to the app's private storage area on your iPhone. That library is not uploaded, not synchronised and not visible to us. It is removed when you delete the app.
Two details about how documents get in. When you add a photograph, Fax uses the system photo picker, which runs outside the app: we receive only the specific images you select, and the app never gains access to your photo library. When you pick a recipient from your address book, Fax uses the system contact picker, which also runs outside the app: we receive only the single phone number you tap, and the app never reads your contacts. Neither of these asks you for a permission, because neither of them needs one.
5. Sending a fax
Sending is the only moment a document leaves your iPhone. When you confirm a send, we receive:
- the document, flattened into a single PDF file, including any cover page you added;
- the recipient's fax number, both as you typed it and in normalised international form;
- the destination country derived from that number;
- the sender name you put on the cover page, if you added one;
- the number of pages, which we count in order to apply your weekly allowance.
That PDF is stored in our document store, and our server software then hands it to Fax.Plus, the telecommunications provider operated by Alohi SA, which places the actual telephone call and reports back whether the fax was answered, delivered or refused. We keep a record of each transmission — the fields listed above plus the delivery status, timestamps and the provider's reference — so the app can show you an accurate history and so we can investigate a failed send.
The server software that performs this work runs in the European Union.
One thing we want to be plain about. A fax is delivered over the public telephone network. That leg of the journey is not encrypted, and no fax service of any kind can make it so — this is a property of the network, not of our app. The connection between your iPhone and our servers is encrypted, and so is the connection between our servers and the carrier, but the final telephone call is as private as any other fax sent from any other machine. Please take that into account when deciding what to send, and double-check the number before you confirm: a fax delivered to a wrong but valid number cannot be recalled.
6. Subscriptions and payment
Fax functions are sold as an auto-renewing subscription. Apple processes the payment, not us. We never see your card number, your bank details, your billing address or your Apple Account credentials.
To know whether to unlock the app, we use a subscription management service, which tells us which product you bought, over which period, whether you are inside a free trial, whether the subscription is active, and when it renews or lapses. That record is tied to the device identifier described in section 3, never to your name.
7. Measurement, diagnostics and crash reports
We use product analytics and crash reporting to find out which parts of the app work and which break. These record events such as "a screen was opened", "a button was tapped", "a send failed", along with context about the device and the app rather than about you: device model, iOS version, app version and build, an installation identifier we generate ourselves, how many sessions you have started, whether you currently hold a subscription, whether you are eligible for a trial, how many faxes you have sent, and the destination country of your most recent one.
Crash reports contain the technical state of the app at the moment it stopped — the code path, the device model and the iOS version. They do not contain your documents.
8. The tracking prompt
On first launch, iOS asks whether Fax may track you across other companies' apps and websites. That prompt belongs to Apple and the choice is yours.
If you allow it, we pass Apple's advertising identifier to our attribution provider, which tells us which advertising campaign led you to install Fax. That is the only thing we use it for; we do not sell it and we do not build an advertising profile from it.
If you decline, no advertising identifier is collected or shared. We still count anonymous installs so we know roughly how well a campaign performed, but nothing in that measurement is tied to Apple's cross-app identifier. Declining does not limit any feature of the app, and you can change your mind at any time in Settings → Privacy & Security → Tracking on your iPhone.
9. The one permission we ask for
Fax asks for camera access, and only when you open the scanner. It is used to photograph the pages you are faxing and for nothing else. Decline it and every other route into the app — importing a photograph, importing a file — keeps working.
As explained in section 4, the photo and contact pickers run outside the app and therefore ask you for nothing.
Fax does not use location. There is no location code in the app and no location permission in its configuration, so neither we nor any component we bundle can determine where you are. The country you may see in your fax history is the destination country of the number you dialled, not yours.
10. Why we are allowed to handle this information
Under the GDPR we rely on the following grounds:
- Performance of a contract. Everything in section 5 — the document, the number, the delivery record — is what makes a fax arrive. Without it there is no service to provide.
- Legitimate interests. The measurement and diagnostics in section 7, keeping the service secure, enforcing the page allowance, and preventing the app being used to send unlawful faxes. We have weighed these against your interests and kept the data to what the purpose needs.
- Consent. The tracking described in section 8, and nothing else. You give it through Apple's prompt and can withdraw it in iOS Settings at any time.
- Legal obligation. Retaining what tax and accounting law requires us to retain about a sale.
11. Who else handles your information
We use a small number of specialist providers. Each acts on our instructions, and each is bound by a contract that limits them to the purpose below.
| Provider | What it does for us |
|---|---|
| Alohi SA (Fax.Plus) | Places the telephone call that delivers your fax and reports the outcome |
| Google (Firebase) | Hosts our backend: anonymous sign-in, the document store, the transmission database, the server software, crash reporting and remote configuration |
| Apphud | Records which subscription you hold so the app knows what to unlock |
| Amplitude | Product analytics |
| Adjust | Advertising attribution, as described in section 8 |
| Apple | Distributes the app and processes every payment |
Some of these providers are established outside the European Economic Area, principally in Switzerland and the United States. Where that is the case, the transfer is covered either by a European Commission adequacy decision or by the European Commission's standard contractual clauses, together with the technical measures those clauses require.
We have never sold personal information, and we have never shared it with a data broker.
12. How long we keep things
- Your on-device library lasts until you delete the file or delete the app. It is yours and we cannot reach it.
- Uploaded documents and transmission records are kept so that your history stays accurate and so that a disputed or failed delivery can be investigated. They remain until you ask us to erase them, which you may do at any time under section 13.
- Analytics and crash data are kept on the retention schedules of the providers in section 11, which run to a maximum of a few years, after which they are deleted or aggregated beyond recognition.
- Subscription records are kept for as long as the subscription is active and afterwards for the period that accounting law requires.
13. Your rights
If you are in the European Economic Area or the United Kingdom, you may ask us to give you a copy of what we hold about you, correct it, erase it, restrict what we do with it, hand it to you in a portable form, or stop relying on legitimate interests to process it. Where we act on your consent, you may withdraw it without affecting anything done beforehand.
Write to support@pocketcraft.site. Because Fax has no account, we need something that lets us locate your records: the destination numbers of the faxes concerned and roughly when you sent them are usually enough. Please write from the device you used, if you still have it. We will respond within one month, and we will tell you if we need longer because a request is complex.
You may also complain to a data protection authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), and you may equally complain to the authority where you live.
If you are a California resident, you have the right to know what personal information we collect and why, to request its deletion, to request correction, and not to be discriminated against for exercising any of these. California also gives you a right to opt out of the sale or sharing of personal information; we do neither, so there is nothing to opt out of. Use the same address above. Other US states grant comparable rights and we handle those requests the same way.
14. Children
Fax is a business and household utility and is not directed at children. We do not knowingly collect information from anyone under 13, or under the age of digital consent in their country where that is higher. If you believe a child has used the app and left information with us, write to us and we will delete it.
15. Security
Traffic between the app and our servers is encrypted in transit, and documents at rest in our storage are encrypted by the storage platform. Access rules restrict each uploaded document to the device that uploaded it. Our provider's credentials live in a managed secret store and never in the app or in our source code.
No system is perfect, and the telephone leg of a fax is outside anyone's control, as section 5 explains. If a breach ever affects your information and the law requires us to tell you, we will.
16. Changes to this notice
When we change the app in a way that changes this notice, we will update it here and move the date at the top. If a change is significant, we will say so in the app before it takes effect. Material changes that depend on your consent will be made only after you have given it.
17. Contact
PocketCraft OÜ
Estonia, EU
support@pocketcraft.site