Privacy Policy · Signafy
Last Updated: 2026/10/9
1. Introduction
Signafy is an app provided by Tunahan Aktay (“we”, “us”, or “our”), who is committed to protecting your privacy. This Privacy Policy applies to Signafy and its various versions and is part of our Terms of Use. This policy explains what data the app processes, why, and your choices. Before the app first sends your name, a drawing or a photo for AI processing, it asks for your permission and names the AI providers involved; if you decline, nothing is sent. Signafy shows no ads and does not track you across other companies’ apps or websites.
None of the data collected by this app is linked to your identity: we never collect your email address and there is no account. The name you type for a signature is used only to draw that signature, as described in section 4.
2. Who We Are
Signafy is developed and operated by Tunahan Aktay, who is responsible for the processing described in this policy. Contact: tunahanaktay.apps@gmail.com.
3. Data We Collect
We collect the following categories of data, none of which is linked to your identity:
User Content
Other User Content: Used for App Functionality
The name or initials you type on the Create screen are sent, with the style you chose, to our AI providers (see section 4) so they can draw your signature. The text is discarded once the signature is returned.
Photos or Videos: Used for App Functionality
A signature you draw with your finger is sent as an image to our AI providers when you ask the app to refine it. A photo or scan of a signature on paper is processed on your device; it is sent to our AI providers only if you choose the cleanup option for a difficult scan and agree to it. Your drawings, scans and signatures are saved only on your device, in My Signatures, until you delete them there or delete the app.
Identifiers
Device ID: Used for App Functionality, and Analytics
A device identifier is collected to keep AI requests secure and to prevent abuse. Firebase and Mixpanel also assign a random identifier for analytics. These identifiers are random and not linked to your name, email address or account.
Location
Coarse Location: Used for Analytics
Firebase Analytics and Mixpanel estimate your approximate country and city from your IP address. We do not request or collect your precise location.
Purchases
Purchase History: Used for App Functionality, and Analytics
If you make in-app purchases, transaction data is processed by Apple and RevenueCat to manage your subscription. This data is used to provide access to premium features and to analyze purchasing trends in aggregate. RevenueCat also receives Apple’s install attribution token, which tells us whether the app was found through an Apple Search Ads campaign; Apple provides it without identifying you. RevenueCat also sends subscription events, such as renewals and cancellations, to Mixpanel under the same random identifier.
Usage Data
Product Interaction: Used for Analytics
We collect data about how you interact with the app (e.g., screens viewed, features used) through Firebase Analytics and Mixpanel. This helps us understand how the app is used and identify areas for improvement.
Diagnostics
Crash Data: Used for App Functionality
Crash reports are collected through Firebase Crashlytics to help us identify and fix issues that affect app stability.
Other Diagnostic Data: Used for App Functionality, and Analytics
Additional diagnostic information (e.g., error logs) may be collected to monitor app health and improve reliability.
Other Data
Other Data Types: Used for App Functionality
Your IP address is used to keep AI requests secure and to prevent abuse.
4. Your Name, Drawings and Scans
This section describes in detail what Signafy sends for AI processing, and what stays on your device.
What is sent, and when?
| What you do | What is sent | Where it goes |
|---|---|---|
| Create a signature from your name | The name in the form you chose (full name, first name or initials) and the style | AIProxy, then OpenRouter, then Google’s AI model |
| Refine a signature you drew | The drawing, as an image, with the name and the style you chose | AIProxy, then OpenRouter, then Google’s AI model |
| Scan a signature on paper | Nothing. The app removes the background on your device | Stays on your device |
| Clean up a difficult scan | The photo or scan, only after you choose this option and agree | AIProxy, then OpenRouter, then Google’s AI model |
How is it processed?
Requests pass through AIProxy, a secure relay that forwards them without storing them, to OpenRouter, Inc., which passes them to Google’s AI model that draws your signature. These requests run with zero data retention: your name, drawing or photo is not stored or used to train models, and it is discarded once the result is returned. The processing is entirely automated, and no person views your requests.
Do you analyze signatures to identify me?
No. Signafy does not analyze your handwriting or signature to identify you, verify your identity or build a profile. No signature, drawing or photo is stored on our servers or by our AI providers.
Where are my signatures kept?
On your device only. Signatures you keep are saved in My Signatures on your iPhone, and they do not sync to iCloud or to any server of ours. Signatures you save to Photos or Files, or share to another app, are then handled by that app.
5. Legal Bases
We process your name, drawings and photos with your consent, given in the app before your first AI request; analytics and crash data on our legitimate interest in keeping the app working and improving it; security data, such as your IP address, on our legitimate interest in preventing abuse; and purchase data to provide your subscription.
6. Third-Party Services
We use the following third-party services:
- OpenRouter, Inc.: AI processing. Passes each request to the AI model and does not store, retain, or reuse names, drawings or photos.
- Google: Runs the AI model that draws your signature. Requests are processed with zero data retention and are not used for training.
- RevenueCat: Subscription and purchase management. Collects device identifiers and purchase history to manage entitlements, and Apple’s install attribution token for Apple Search Ads.
- Firebase Analytics: Usage analytics. Collects device identifiers, product interaction data, and approximate location derived from your IP address.
- Mixpanel, Inc.: Product analytics. Collects app interactions, a random identifier, and approximate location derived from your IP address.
- Firebase Crashlytics: Crash reporting and diagnostics. Collects crash data and diagnostic information.
- Firebase Remote Config: Delivers app settings; receives a Firebase installation ID and IP address to do so.
- AIProxy: Secure AI service routing. Uses a random, stable device identifier and your IP address for security. Requests pass through without being stored.
- Apple In-App Purchases: Secure transaction handling.
These services process data only to the extent required for their core functions. None of the data collected is linked to your personal identity.
7. Data Retention
- Names, drawings and photos sent for AI processing: Never stored on any server. They exist with our AI providers only while your signature is being drawn, typically seconds.
- Your signatures: Saved only on your device, in My Signatures, until you delete them there or delete the app.
- Analytics and diagnostics: Analytics events and diagnostics are kept by Firebase, Mixpanel and Crashlytics under random identifiers for as long as their retention settings allow, and are then deleted.
- Purchase information: Managed by Apple and RevenueCat under their respective privacy and retention policies.
- No user data is linked to personal identity.
8. Data Security
- All data transmission between your device, our services, and third-party providers is encrypted.
- We never receive your signatures, drawings or photos, unless you send one to us for support; they go only to the AI providers named above, and stay on your device in My Signatures.
- We do not analyze signatures or handwriting to identify you.
- We apply appropriate technical and organizational measures to protect your data. While no system can guarantee 100% security, we continuously work to safeguard your information.
9. Children’s Privacy
Signafy is not intended for children under 13, or under the minimum age of digital consent in your country if higher. We do not knowingly collect any data from children. If you believe data was shared with us in error, please contact us at tunahanaktay.apps@gmail.com and we will help delete it.
10. International Transfers
Our providers process data in the United States and other countries. Where EU or UK law requires it, these transfers rely on the providers’ data protection terms, such as the EU Standard Contractual Clauses.
11. Your Rights
Depending on where you live, including Turkey, the EU, the UK and California, you can ask to access, correct or delete your personal data, object to or restrict its processing, withdraw consent at any time, and complain to your local data protection authority. Because the data we collect is not linked to your identity, we may be unable to find records that belong to you; email us and we will help as far as we can. You can delete your signatures from My Signatures or by deleting the app. We do not sell your personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted here with a revised “Last Updated” date. If a change is significant, we will announce it in the app or on this page before it takes effect.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: tunahanaktay.apps@gmail.com