SignCare eSign app — Privacy Policy
What the SignCare eSign mobile app collects, why, who receives it, how long it is kept, and how to contact us.
Last updated: 21 October 2026
This policy covers the SignCare eSign Android app (package com.signcare.esign.rn), published by SignCare Solutions Private Limited ("SignCare", "we", "us"). The app lets a person sign a document that was sent to them on the SignCare platform, using Aadhaar Face Authentication.
It applies only to the mobile app. Your use of the SignCare web platform is covered by the privacy policy at signcare.io/privacy-policy.
In short: the app does not ask for your Aadhaar number, does not store anything on your phone, and does not capture your face itself. Face authentication happens in UIDAI's own AadhaarFaceRd app. We only receive the details printed on your digital signature certificate, so that we can attach the signature to your document.
Who is responsible for your data
You sign a document because an organisation (for example a bank, employer or service provider) sent it to you through SignCare. For the document and the signature that organisation decides why your data is processed, and SignCare processes it on its behalf to deliver the eSign. For questions about why you were asked to sign, contact that organisation. For anything about how the app or SignCare handles your data, contact us (see Contact us).
What the app collects and why
| Data | When | Why | Where it goes |
|---|---|---|---|
| QR code contents (a transaction reference and a security code; no personal data) | When you scan the QR shown on the SignCare web page | To open the right signing request | SignCare servers |
| Camera images | Only while the QR scanner is open | To read the QR code | Processed on your phone only. Images are never stored or uploaded |
| Signature result: your name, the last 4 digits of your Aadhaar number, year of birth, gender, state and PIN code as shown on your eSign certificate, plus the signed document data | After you complete face authentication | To attach your legally valid signature to the document and show the signer details in the document's audit trail | SignCare servers, then to the organisation that requested your signature |
| Error report (an error message, your phone's platform and the time) | Only if you tap Send log after an error | To help our support team fix the problem | SignCare servers |
| Technical connection data (IP address, request time) | Every time the app talks to our servers | Security, fraud prevention and troubleshooting | SignCare server logs |
What the app does not collect: your full Aadhaar number, your face image or biometrics, your contacts, photos, files, location, or any advertising or tracking identifiers. The app has no ads and no user account.
Aadhaar Face Authentication
When you tap Proceed to Face Auth, the app hands over to UIDAI's AadhaarFaceRd app, which captures your face and performs the authentication. Your face data goes from that app to UIDAI through a licensed eSign Service Provider, under the Aadhaar Act, 2016 and UIDAI's regulations. It does not pass through the SignCare app or SignCare's servers.
The digital signature certificate is issued by a Certifying Authority licensed under the Information Technology Act, 2000. That provider keeps its own records as required by the Controller of Certifying Authorities' rules.
You give consent on the consent screen before authentication starts. If your Aadhaar biometrics are locked, authentication fails. You can unlock them in the mAadhaar app or at myaadhaar.uidai.gov.in.
Who we share data with
- The organisation that requested your signature receives the signed document and the signer details in its audit trail.
- The licensed eSign Service Provider and UIDAI take part in authentication and certificate issuance, as described above.
- Our hosting and infrastructure providers store and process data on our behalf in India, under contracts that bind them to confidentiality and security.
- Authorities, when the law requires it.
We do not sell your data or use it for advertising.
Storage on your phone
The app stores no personal data on your device. The signed result is held in memory only until it is uploaded. If the upload fails on a weak connection, the app keeps it in memory until you tap Retry upload or close the app. Uninstalling the app removes everything it installed.
Security
- All traffic between the app and SignCare is encrypted with HTTPS (TLS).
- Requests for a signing transaction are protected by a per-transaction security code, so a QR code only works for the document it was created for.
- Access to signer data on our side is limited to staff who need it to run and support the service.
How long we keep data
- Signed documents and their audit trail are kept for as long as the organisation that requested the signature keeps them under its agreement with SignCare, or longer where the law requires.
- Error reports and server logs are kept for a limited period for troubleshooting and security, then deleted.
Your rights
Under the Digital Personal Data Protection Act, 2023 and other applicable law you can ask us to:
- tell you what personal data we hold about you and how we use it,
- correct or update inaccurate data,
- erase data we no longer need to keep (signed documents may have to be retained for legal reasons, and the organisation that requested your signature may also hold its own copy),
- withdraw consent for future processing (this does not affect signatures already made),
- handle a grievance about how your data is processed.
The app has no account, so there is nothing to delete inside it. Uninstall the app to remove it from your phone. To make a request about data held on our servers, email us from the address or mobile number linked to the signing request.
Children
The app is meant for adults signing documents. It is not directed at children, and we do not knowingly process children's data through it.
Changes to this policy
We may update this policy when the app or the law changes. The date at the top shows the latest version. Significant changes will also be announced on app.signcare.io/signcare-app.
Contact us
SignCare Solutions Private Limited
- Privacy and grievance requests: support@signcare.io (subject: "Privacy — SignCare eSign app")
- Support portal: support.signcare.io
- Website: signcare.io
We aim to acknowledge privacy requests within 7 days and resolve them within 30 days.
SignCare is not affiliated with UIDAI or the Government of India.