PenSignPrivacy Policy
The short version: your signatures stay on your device and in your own iCloud. We never receive them, and we don't track you.
What never leaves your device
- Signature extraction is fully on-device. Photos you take or import are processed with Apple's on-device frameworks. They are not sent to any server or third-party API.
- Your signatures, initials, drawings, tags and the PDFs you import are stored in the app's private storage on your device, protected by iOS Data Protection.
- Face ID / Touch ID is handled by iOS. PenSign only learns whether authentication succeeded; it never sees biometric data.
iCloud sync (optional)
If you turn on iCloud Sync, your signatures, initials, tags and a few preferences are stored in your private iCloud database through Apple's CloudKit so they appear on your other devices. This data is tied to your Apple ID. We — the developer — cannot access it. Imported PDF documents are not synced. Turning sync off stops syncing from that device; you can remove data from iCloud via iOS Settings → Apple Account → iCloud → Manage Storage.
Purchases
The one-time unlock is processed by Apple. To validate the purchase and restore it across your devices we use RevenueCat, which receives a random anonymous app user identifier, the purchase receipt/transaction information from Apple, and basic technical details (app version, OS version, device model, country/storefront). RevenueCat never receives your signatures, documents, name or email from us.
Data we collect
| Category | Collected? | Notes |
|---|---|---|
| Signatures, photos, documents | No | On-device and your private iCloud only |
| Purchase history | Yes | Via Apple and RevenueCat, linked to an anonymous ID, used only to unlock the app |
| Analytics, advertising, tracking | No | No analytics SDKs, no ads, no tracking |
| Contact info, location, contacts | No | Never requested |
Permissions
- Camera — to photograph your signature or scan a document. Used only while you are on the capture screen.
- Photos — PenSign uses the system photo picker, so it only ever sees the photo you choose. "Add to Photos" permission is requested only if you save an exported image.
- Face ID — only if you enable the lock.
Shortcuts and sharing
When you export, copy or share a signature or signed PDF, or run an PenSign action in Shortcuts, the file goes to the destination you choose. What happens next is governed by that app or service.
Retention and deletion
Your data stays until you delete it. Delete individual items in the app, use Settings → Clear Local Data, or delete the app. With iCloud Sync on, deletions propagate to your iCloud copy.
Children
PenSign is not directed at children under 13 and does not knowingly collect personal information from anyone.
Changes
If this policy changes, the updated version will be posted here with a new effective date.
Contact
Questions about privacy? Open a request on our support page.