Siglume Privacy Policy

Last updated: 6 July 2026

1. Data Controller

The data controller of the personal data processed through the Siglume application is:

Alessandro Penna Email: alessandro_penna@icloud.com

For any requests relating to this Privacy Policy or the exercise of rights under applicable data protection laws, users may contact the Data Controller at the address indicated above.

2. Introduction

Siglume is an iOS application that enables users to create a digital version of their handwritten signature and apply it to PDF documents.

The application has been designed in accordance with the principles of data minimization, privacy by design, and privacy by default. Siglume does not require users to create an account, does not provide proprietary cloud services, and does not transmit to the Data Controller any signatures, images, or documents processed by the user.

The application’s core functionalities operate locally on the user’s device. Signatures created, images imported, and PDF documents used for signing remain under the user’s control and are not uploaded to servers managed by the Data Controller.

3. Data Processed

Use of the application may involve the processing of images containing signatures, photographs imported by the user, PDF documents, and related outputs generated by the application.

Such content is used solely to enable the operation of the functionalities requested by the user and remains stored locally on the user’s device.

Signatures created through Siglume, related thumbnails, imported PDF documents, and exported PDF documents are not transmitted to the Data Controller and are not uploaded to infrastructure controlled by the Data Controller.

The application may also access permissions granted by the user to use the device’s camera, photo library, and file management system.

4. Purposes of Processing

The data processed through the application is used exclusively to enable the user to capture a signature, process it, convert it into an image with a transparent background, edit it using the available tools, store it locally, apply it to PDF documents, and generate new copies of signed documents.

Information relating to purchases and subscriptions is used solely to verify the user’s entitlement to access the application’s premium features.

The Data Controller does not use signatures, images, documents, or subscription-related information for advertising, profiling, behavioural marketing, or artificial intelligence training purposes.

5. Payment Data and Subscriptions

Payment and subscription-related data is handled exclusively by Apple through its In-App Purchase system and by RevenueCat for the technical management of subscriptions.

Apple directly manages payments, billing, renewals, and all financial information associated with purchases made by the user. The Data Controller does not receive or store any credit card details, bank account information, or other payment instrument data.

RevenueCat may process limited technical information relating to subscriptions, such as subscription status, purchase events, renewals, expirations, and related timestamps, solely for the purpose of enabling the proper functioning of the application’s premium features.

Such information is associated with pseudonymized identifiers used for the technical management of the service.

The Data Controller does not collect or retain any payment data.

Where applicable under Regulation (EU) 2016/679 (“GDPR”), any processing of personal data carried out by or on behalf of the Data Controller is based on the performance of the services requested by the user pursuant to Article 6(1)(b) GDPR and, where necessary, on the Data Controller’s legitimate interest in ensuring the security, reliability, and proper functioning of the application pursuant to Article 6(1)(f) GDPR.

7. Data Retention

Siglume is designed to store signatures and documents exclusively on the user’s device.

The Data Controller does not possess copies of signatures, images, or documents processed through the application and is not technically able to recover them if they are deleted by the user.

Saved signatures remain stored locally until they are deleted by the user or until the application is removed from the device.

8. Disclosure of Data to Third Parties

The Data Controller does not sell, license, lease, or otherwise commercially exploit users’ personal data.

As signatures, images, and documents are processed locally on the user’s device, such content is neither disclosed to the Data Controller nor shared with third parties.

Technical information necessary for the management of purchases and subscriptions may be processed by Apple and RevenueCat strictly to the extent necessary for the provision of the service.

9. International Transfers

Siglume does not transfer signatures, images, documents, or any other content created by the user to external servers.

10. Permissions Requested by the Application

To enable its functionalities, Siglume may request access to the device’s camera to capture signature images or digitize documents, to the photo library to import existing images, and to the device’s files to import and export PDF documents.

Such permissions are requested only when necessary for the execution of the functionality selected by the user and may be revoked at any time through the device settings.

11. Security

The Data Controller implements reasonable technical and organizational measures designed to ensure the security of the application and reduce the risk of unauthorized access, loss, alteration, or improper disclosure of data.

As documents and signatures are stored locally on the user’s device, the physical and logical security of the device, including passwords, passcodes, biometric authentication, and backup procedures, remains the responsibility of the user.

12. Data Subject Rights

Where the GDPR or other equivalent data protection legislation applies, users may exercise the rights granted by law, including the rights of access, rectification, erasure, restriction of processing, objection to processing, and data portability, subject to the limitations provided by applicable law.

As the Data Controller does not collect or store on its own systems any signatures, images, or documents created through the application, certain rights may, in practice, be incapable of being exercised against the Data Controller with respect to data that remains exclusively under the user’s control on their device.

Users also have the right to lodge a complaint with the competent data protection supervisory authority.

13. Changes to this Privacy Policy

The Data Controller reserves the right to update or amend this Privacy Policy at any time in order to reflect legal, technical, or functional developments affecting the application.

The updated version will be made available within the application and shall fully replace all previous versions as of the date of its publication.

14. Contact Information

For any questions concerning this Privacy Policy or the processing of personal data in connection with the use of Siglume, please contact:

Alessandro Penna Email: alessandro_penna@icloud.com