Draft This text is not final and may change before Faxsure launches.
Privacy policy
Last updated October 21, 2026
This policy covers the Faxsure iPhone app and the website faxsure.app. In short: we keep a document only while we send it and delete it as soon as it is delivered, never later than 72 hours. Received faxes are deleted from our servers after 30 days. We never read your documents, never sell your data and never use it for advertising.
What we keep on our servers, and why
| What | Why | How long |
|---|---|---|
| The document you send (PDF), encrypted | To send it to the fax number you chose | Deleted as soon as the fax is delivered. If it was not delivered, kept up to 24 hours so you can try again free. Never longer than 72 hours. |
| The fax number you send to | To dial it, and to retry | The full number is deleted when the fax finishes. We keep only a salted hash and the last 4 digits, for your history and to stop abuse. |
| Fax details: page count, status, attempts, times, the provider's confirmation code | To show progress, make your receipt and return a fax to your balance if it is not delivered | Kept with your balance records (see "Deleting your data") |
| A random device ID and the App Attest key Apple gives your iPhone | To recognise your iPhone without an account, hold your balance and stop abuse | Until you delete your data |
| Purchases: Apple's transaction ID, product and date | To add what you bought to your balance exactly once | Kept for accounting (see "Deleting your data") |
| Your Sign in with Apple identifier (only if you sign in) | To restore your balance on a new iPhone, and for Plus, so your number stays yours | Until you delete your data |
| Send and Plus: subscription status from Apple and sent page counts; with Plus, your fax number and received page counts | To run Send and Plus, and the fair use of Plus | While you have Send or Plus, then as described under "Plus" |
| Faxes sent to your Faxsure number, with the sender's number, encrypted | To deliver them to your inbox | Deleted 30 days after they arrive, or earlier when you delete them |
| Senders you block (a salted hash and the last 4 digits) | To drop their faxes | Until you unblock them or delete your data |
| A push notification token | To tell you when a fax is delivered or arrives | Until you delete your data or turn notifications off |
Document content, page images, cover sheet text and full fax numbers never go into our logs, error reports or analytics.
What stays on your iPhone
Your fax history, receipts, cover sheets, copies of received faxes you open, and everything you do in Fill & sign stay on your iPhone. Fill & sign downloads an official form directly from the agency's website to your iPhone; your answers, drafts and signature are stored only on your iPhone and you can delete them at any time. Only the fax you choose to send leaves your iPhone (under the rules above), plus any copy you share, print or save somewhere yourself.
Analytics
The app records usage events such as "fax submitted" or "fax delivered" to see where people get stuck. These events never contain document content, page images, text you typed, signatures, file names or full fax numbers. The website counts visits without cookies.
Who processes data for us
- Cloudflare runs our servers and storage (documents, received faxes, the website).
- Telnyx sends and receives the faxes and provides Plus fax numbers. We ask Telnyx not to store sent documents.
- Apple handles payments, subscriptions and refunds, Sign in with Apple, App Attest and push notifications.
- PostHog receives the analytics events described above.
- The fax machine you send to receives your document. That is the point of the service.
These companies process data on our behalf and only for these purposes. Their servers may be outside your state, province or country. We do not sell or rent personal information, and we do not share it for advertising.
Plus
Plus ($14.99 a month) gives you your own fax number and 200 pages a month to send. Plus renews automatically until you cancel it in Settings on your iPhone. Faxes sent to your number are kept on our servers for 30 days. If Plus ends, received faxes stay readable for 14 days; after that, the faxes of that number are deleted and the number is held for 60 days in case you subscribe again with the same Apple ID, then released. During those 60 days faxes sent to the number are not kept.
To run Send and Plus we count the pages you send with your monthly pages each billing month (up to200), and for fair use the pages you receive each calendar month (up to 300); see the terms of use.
Health information
People use Faxsure to send their own medical forms and records requests and to receive records at their own number. Faxsure is an app for individuals. It is not a health care provider or a health plan and does not work on behalf of one. We do not read, analyse or index documents; we keep them only for the times above, encrypted in transit and at rest.
Consumer health data (Washington and similar laws)
A document you fax or receive may contain information about your health. We process it only to provide the service you asked for: to send or receive that fax. Categories: the content of documents you fax or receive. Sources: you, and the senders of faxes to your Faxsure number. Shared with: Cloudflare and Telnyx as processors, and the recipient you choose. We do not collect it for any other purpose and do not sell it. To access or delete it, use "Delete my data" in the app or contact us.
Deleting your data
In the app, Settings → Delete my data removes your device record, push token, Sign in with Apple link, received faxes and blocked senders, and revokes Sign in with Apple. If you have Plus, your number is held as described above and you need to cancel the subscription in your iPhone settings, because Apple does not let apps cancel it. Records of purchases and of faxes paid from your balance are kept without your Apple identifier for accounting and to stop the same purchase from being credited twice.
You can also delete received faxes one by one, and Fill & sign drafts and your saved signature at any time.
Canadian users
You can ask what personal information we hold about you, ask us to correct it, or withdraw consent, by contacting us. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada. If a breach of security creates a real risk of significant harm to you, we will tell you and report it as the law requires.
Quebec
Our processors are outside Quebec (see "Who processes data for us").
Security
Documents travel over encrypted connections and are encrypted at rest in a private storage bucket with no public links. Received faxes are opened through links that expire after 5 minutes. On your iPhone, Fill & sign drafts are protected with iOS file protection and your saved signature is kept in protected storage.
Changes
If we change this policy, we update the date at the top and, for changes that matter, tell you in the app before they apply. See also the terms of use.