Privacy Policy

Effective 15 October 2026

The short version

Rafton stores your documents on your iPhone and in your own iCloud. We can't see them.

• No account and no sign-up.
• We don't run a server for your documents.
• No ads, no tracking, no analytics tools. We don't sell or share your data.
• Your clients pay you directly. We never touch your money.

1. Who we are

Rafton is an iPhone app for making estimates, invoices and receipts. It is made and run by Rafton ("we", "us"). You can reach us at support@getrafton.com.

For Quebec's privacy law, the person in charge of the protection of personal information is Rafton, at support@getrafton.com.

This policy covers the Rafton app and this website. When you send a client an approval link, the page your client sees has its own short notice at go.getrafton.com/privacy.

2. What stays on your iPhone and in your iCloud

To make your documents, the app works with your business profile (name, logo, contact details, tax numbers you add), your clients (names, addresses, phone numbers, emails), your price list, your estimates, invoices and receipts, photos, signatures, payment links, notes and reminders.

All of this is stored on your iPhone. If iCloud is on, it is also stored in your own private iCloud database, which Apple runs for you under Apple's privacy policy. We have no access to your private iCloud database, so we can't see, read or recover your documents. If iCloud is off, your documents are saved only on your iPhone, so export a copy regularly.

• Reminders are notifications scheduled on your iPhone. They are not sent through us.
• Imports of your old PDFs and CSV files happen on your iPhone. Nothing is sent to us.
• Translation (when available in the app) happens on your iPhone with Apple's translation feature. Your text is not sent to us.

3. What we receive

Purchase reports from Apple

Apple sells Rafton Pro and handles the payment. Apple gives us sales reports, for example which plan was bought, in which country and when. These reports don't include your name, email address or card details.

Crash reports, only if you agree

If you choose to share analytics with app developers in your iPhone's settings, Apple sends us crash reports and basic diagnostics, such as the device model, the iOS version and where the app crashed. They don't tell us who you are. You can turn this off at any time in Settings > Privacy & Security > Analytics & Improvements.

Your emails, if you write to us

If you email support@getrafton.com, we receive your email address, your message and anything you attach. We use them only to answer you and to fix the problems you report. Our email addresses are run by Cloudflare (Email Routing), which forwards them to our Google (Gmail) inbox.

Visits to this website

Cloudflare hosts this website. To deliver pages and protect the site from attacks, Cloudflare processes your IP address and browser details. This website uses no cookies, no analytics and no tracking, and it loads nothing from other websites.

4. Approval links (when available in the app)

This section applies only once approval links are available in the app, and only if you choose to use them. Approval links are an optional Pro feature that lets you send a client a private link to view an estimate and approve or decline it, or to view an invoice.

End-to-end encrypted

Before the document leaves your iPhone, the app encrypts it. The key is in the part of the link after the "#" sign, which browsers never send to our server. Our server stores only the encrypted document, so we can't read it. Your client's answer and signature are encrypted in their browser with the same key, so we can't read those either.

What our server keeps in readable form

• The link's random ID, its status, and when it was created, viewed and answered, and how many times it was viewed.
• A shortened IP address (first part only) of the person who answered, as part of the approval record.
• Codes the app sends to run the service: a code that proves a link is yours, so only you can withdraw it; a random tag that lets us notify your iPhone; and a one-way code made from your App Store subscription, used to check Pro and to limit how many links can be made each day.

We keep no server logs of full IP addresses or browsers. Cloudflare may keep the full IP address of blocked requests in its security logs for a short time.

Our role

For your clients' details in the document and their answer, we act for you: you decide what to send, and we process it on your behalf (we are your "processor" or "service provider"). We use it only to run the link, never for anything else. For bot checks and keeping the service secure, we decide how data is used ourselves.

Service providers

• Cloudflare, Inc. (USA) hosts the link pages and stores the data (Cloudflare Workers, R2 and D1). Cloudflare Turnstile checks that a person, not a bot, is answering. For this it processes your client's IP address and browser details, and Cloudflare also uses them to improve its bot detection (Turnstile privacy addendum, Cloudflare privacy policy).
• Apple (iCloud) delivers the "viewed" and "answered" notifications to your iPhone. For this our server writes a short record with the random tag and the kind of event, never the document, to Apple's iCloud public database.

How long each item is kept is in section 8.

5. What we don't do

• No ads.
• No tracking across apps or websites.
• No analytics or advertising tools in the app or on this website.
• We don't sell or share personal information.
• No AI cloud processing: we don't send your documents or your text to AI services.
• No cookies on this website.

6. Your clients' data

You decide which client details to put in Rafton and what to send. You are responsible for having the right to keep them and for telling your clients how you use their details, as the law where you work requires. In the app, your clients' details stay on your iPhone and in your iCloud. If you use approval links, we process the client details in the document only on your instructions, as described in section 4.

7. Legal bases and consent

United Kingdom. We answer your emails because it is in our legitimate interests and yours that we help you, or because it is needed for our agreement with you. We keep Apple's purchase reports because tax law requires it. Crash reports reach us only with the consent you give in your iPhone's settings. For approval links, we act on your instructions as your processor; we run bot checks and security for our legitimate interest in keeping the service safe. We deliver this website for our legitimate interest in running it.

Canada. We rely on your consent, which you give when you email us or choose to use a feature. You can withdraw consent at any time, subject to legal or contractual limits, and we will tell you what that means for the service.

8. How long we keep data

9. Your rights and how to complain

We hold very little about you: your emails to us and, if you use approval links, the data in section 4. You can ask us for a copy of it, to correct it, or to delete it, by emailing support@getrafton.com. We answer within the time the law sets, usually within 30 days. Your documents are under your control in the app: you can export or delete them at any time.

United States

We don't sell or share personal information, and we don't use it for targeted advertising or profiling. Depending on your state, you may have the right to know what we hold, to get a copy, to correct it and to delete it. If we refuse a request, you can appeal by replying to our answer; if we refuse the appeal, you can contact your state attorney general. We won't treat you differently for using your rights.

Canada

You can ask to see and correct your personal information. If you aren't satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (OPC). In Quebec, you also have the right to have your information ported to you in a structured format and to withdraw consent, and you can complain to the Commission d'accès à l'information du Québec (CAI).

United Kingdom

You have the right to access, correct and delete your data, to restrict or object to how we use it, to data portability, and to withdraw consent. You can complain to the Information Commissioner's Office (ICO).

Australia

You can ask to see and correct your personal information. Please contact us first; if you aren't satisfied with our answer within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC).

10. Where data is processed

Your iCloud data is stored by Apple under Apple's privacy policy. This website and approval links run on Cloudflare's network; data may be processed in the United States and in other countries where Cloudflare operates. Cloudflare relies on the EU-U.S. Data Privacy Framework and its UK Extension. Support emails are stored by Google (Gmail), in the United States and other countries where Google operates.

11. Security

Your documents are protected by your iPhone's passcode and the security built into iOS. Apple encrypts iCloud data in transit and on its servers. Approval links are end-to-end encrypted, use HTTPS, and keep as little readable data as possible. No system is perfect: if a breach affects your personal information, we will tell you and the regulators as the law requires.

12. Children

Rafton is a business tool for adults. It is not directed at children, and we don't knowingly collect personal information from children. If you think a child has sent us personal information, email support@getrafton.com and we will delete it.

13. Changes to this policy

We may update this policy, for example when we add a feature or the law changes. We will change the date at the top, and we will tell you in the app before a significant change takes effect. We will never weaken the promise that we can't see your documents for documents you already have without your consent.

14. Contact

Rafton. Email: support@getrafton.com.