Privacy policy
Updated October 18, 2026
Paraph is designed to know as little as possible about you. No account, no sign-up, no ads. Your documents stay on your iPhone.
This page lists everything the app processes, why, and by whom.
Who is responsible
Naelo Studio, publisher of Paraph (see the legal notice). Contact: aurelien@naelostudio.com.
Your documents
The PDFs you import, scan or sign are stored in the app, on your iPhone. They are processed on the device: display, finding where to sign (including iOS text recognition for scanned documents), placing the signature, export.
They are never sent to Naelo Studio or to any provider. They only leave the iPhone when you export them yourself (Mail, Files or another app). The receiving app then applies its own policy.
Your signature and initials
They are saved as strokes in the app. If iCloud sync is on (the default when your iPhone is signed in to iCloud), they are also copied to the key-value storage of your own iCloud account, so they follow you across your devices. Apple hosts them; Naelo Studio has no access.
You can turn this sync off in My signatures > Sync with iCloud.
If you photograph a signature on paper, the photo is cleaned on the iPhone (contrast, background removed). It is sent nowhere and the stroke is never redrawn by AI.
Purchases
Payments are processed by Apple. Naelo Studio never sees your name, email address or payment details.
To validate and restore purchases, the app uses RevenueCat, Inc. RevenueCat receives an anonymous identifier generated by the app, Apple purchase receipts and technical data (iOS version, store country). RevenueCat policy.
Crash reports
If the app crashes, an anonymous technical report is sent to Sentry (Functional Software, Inc.): device model, iOS and app version, error trace. It never contains the content of your documents or your signature. Sentry policy.
Usage analytics
To learn which features are used and where the app gets in the way, Paraph sends anonymous usage events to PostHog, Inc. (for example: document imported, export done, offer chosen), with a random identifier linked neither to your identity nor to your Apple account. Never the content of your documents or your signature. PostHog policy.
Paraph does not use the iPhone advertising identifier and does not track you across apps.
Notifications and permissions
If you subscribe, the app offers a reminder before renewal. It is a local notification scheduled on your iPhone: nothing goes through a server.
The camera is used to scan documents and photograph a signature. These images are processed on the iPhone.
Legal bases and retention
Purchases rely on the performance of the contract; crash reports and analytics on Naelo Studio's legitimate interest in running and improving the app.
Crash reports and analytics are kept for at most [TO BE COMPLETED] months, then deleted. Purchase data is kept as long as needed to restore your purchases and meet accounting obligations.
These providers may process data outside the European Union, with the safeguards required by the GDPR (European Commission standard contractual clauses).
What Paraph does not do
- No account, no email address requested.
- No ads, no ad tracking.
- No sale or rental of data.
- No tracking cookies on this website.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability under the GDPR. As the data processed is anonymous, we generally cannot link it to you; write to us and we will do what we can with the details you provide.
Contact: aurelien@naelostudio.com. You may also lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).
Changes
If this policy changes, the new version is published on this page with its update date.