Privacy Policy

Effective date: August 25, 2026

Only Signature is designed to create reusable signature and initials image assets without asking you to upload a private document. This policy explains what the app does automatically, what happens when you choose to export or contact support, what Apple processes for purchases, and what the public website may process.

The legal operator is DuoTap LLC. Privacy questions may be sent to admin@onlysignature.app.

1. Scope

This policy applies to:

  • the Only Signature iOS application;
  • the Only Signature public website;
  • support messages sent to the operator.

It does not control Apple, an email provider, a website host, or a destination you select through iOS. Those providers apply their own policies.

2. What the app processes on your device

The app processes and stores information needed to provide its local features, including:

  • signature and initials strokes, coordinates, timing, pressure when reliably available, canvas dimensions, orientation, and rendering version;
  • drafts, finalized purchased sets, unused included-slot status, thumbnails, preview metadata, and optional local labels;
  • local set identifiers, normalized hashes, transaction associations, export preferences, and purchase-recovery state;
  • local counters used to decide whether the app may ask iOS to consider showing Apple’s review prompt;
  • privacy-safe diagnostics such as app version, build number, device model, operating-system version, non-sensitive error category, StoreKit state category, and export-format category.

This information is used inside the app to draw, preview, save, recover, export, and manage your sets. The operator does not receive your signature or initials content through an Only Signature server because the app has no developer-operated account, signature cloud, database, or upload API.

3. Documents

Only Signature does not request, import, scan, store, or upload your contracts, PDFs, forms, invoices, or other private documents. The sample agreements and forms shown in the app are fictional fixtures bundled with the app.

4. Exports and destinations you choose

When you export, Only Signature opens Apple’s system share sheet. You may choose Save to Files, AirDrop, or another destination offered by iOS and the apps installed on your device. An exported file can go to an on-device folder, iCloud Drive, another cloud provider, email, messaging, Photos if offered by the destination, another app, or another person depending on your choice and settings.

Only Signature does not control those destinations. Their providers may process the exported file under their own terms and privacy policies. This is why we say “Created on your device. We do not upload it,” rather than claiming an exported signature can never leave your device.

5. Share destinations and Files

Only Signature does not request direct Photos-library permission and does not place signature images on the general clipboard. Saving to Files or another destination uses Apple’s system interface and the location you select. Files saved in a cloud-backed Files location or another syncing destination may sync under your Apple or storage-provider settings.

6. Apple purchases

Apple processes in-app purchases, payment credentials, taxes, receipts, transaction status, and refund requests. Only Signature receives the transaction information Apple makes available to verify and associate a purchase with a local Signature Set. Signature images, stroke points, and document content are not sent to Apple as purchase metadata.

Apple may provide the operator with sales, accounting, proceeds, refund, and aggregated App Store reporting. The operator does not receive your full payment-card information. Apple’s privacy policy and media-services terms govern Apple’s processing.

7. App network behavior

The production app does not include advertising, behavioral analytics, tracking pixels, remote session replay, developer-controlled signature storage, or signature-content telemetry. Expected network activity is limited to:

  • Apple StoreKit purchase and transaction communication;
  • links you choose to open for privacy, Terms, support, or the App Store;
  • sharing or saving you initiate through Apple’s system tools.

No App Tracking Transparency prompt is used because the app does not track you across other companies’ apps or websites.

8. Support messages

If you contact support, the operator and its email provider receive the information you choose to send, such as your email address, message, and attachments. Do not attach a signature, initials image, private document, or other sensitive file unless support specifically needs it and you decide the disclosure is appropriate.

Support information is used to respond, prevent abuse, maintain necessary business records, and improve the product without adding signature-content telemetry. To request deletion of a support conversation, email admin@onlysignature.app from the same address and identify the message. The operator will delete it when reasonably verifiable and no legal, security, accounting, or dispute-retention obligation requires continued storage.

9. Website data

The website has no account, form submission, advertising cookie, analytics cookie, tracking pixel, chat widget, fingerprinting code, or behavioral analytics. It does not intentionally set non-essential cookies.

The selected static website host, content-delivery network, domain registrar, and network providers may automatically process technical request data such as IP address, date and time, requested URL, user-agent string, referrer, response status, and security events. This is generally necessary to deliver and secure the site. The final host and its retention period will be named here before deployment. Until a host is selected, no specific host-retention promise is made.

10. Data we do not use

Only Signature does not:

  • sell personal information;
  • share personal information for cross-context behavioral advertising or targeted advertising;
  • use signature content for advertising, AI training, profiling, or identity verification;
  • operate an advertising network;
  • create a developer account profile about you;
  • upload your signature or private document to a developer cloud.

11. Retention and deletion

Reusable sets remain inside the app until you delete a set, choose Delete All Saved Signatures, or delete the app, subject to ordinary device-storage behavior. Temporary export files are created only when needed and are removed after the share flow when safe or during later cleanup. The app excludes reusable signature assets from device backup where technically supported, but Apple controls platform backup behavior.

The in-app deletion action removes drafts, purchased local assets, previews, labels, temporary files, and set-specific preferences. Files you already exported are not deleted from their destinations. The app does not claim secure erasure from flash storage.

Deleting the app may delete reusable sets stored inside it. Because there is no Only Signature account or signature cloud, a consumed purchase cannot reconstruct deleted strokes. Exported files remain wherever you saved them.

Support messages and website infrastructure logs follow the retention practices described above. The final hosting provider and operational support-retention schedule must be completed before public launch.

12. Security

The app uses iOS data protection for local files, backup exclusion where technically supported, protected temporary files, an app-switcher privacy cover, atomic local purchase records, production log minimization, and transaction verification. No system can guarantee absolute security. An unlocked device, jailbroken device, screenshot, screen recording, cloud-synced destination, or recipient can expose an asset.

13. Children’s privacy

Only Signature is a general utility and is not directed to children under 13 or marketed through child-directed imagery. The app does not ask for age and does not operate an account or behavioral tracking system. If the operator learns that a child submitted personal information through support without appropriate authorization, contact admin@onlysignature.app to request review and deletion.

14. International users and applicable rights

Privacy rights depend on where you live and whether a law applies to the operator and the processing. Depending on those facts, you may have rights to request access, correction, deletion, restriction, portability, objection, or information about disclosures. These rights are not unconditional and may not apply to purely local data the operator never receives.

Send a request to admin@onlysignature.app with enough information to understand and verify it. Do not send a signature image as proof of identity. The operator will respond as required by applicable law.

Before distribution in the European Union, European Economic Area, or United Kingdom, the operator will complete its identity, contact, lawful-basis, international-transfer, regulator, and Digital Services Act disclosures as applicable. Before distribution in other regions, the operator will complete any genuinely applicable local supplement rather than claiming rights or legal bases that do not apply.

15. California notice

The app does not sell personal information or share it for cross-context behavioral advertising. The operator does not receive signature content through the app. If California privacy law applies to the operator, California residents may submit applicable requests through admin@onlysignature.app. The final legal review will determine whether statutory thresholds and detailed notice obligations apply.

16. Changes

Material changes will be posted on this page with a revised effective date. If a change affects how signature content is processed, the app and App Store privacy disclosures must be updated before that behavior is released.

17. Contact