Overview
Paraph is designed with privacy as a core principle. We believe your data belongs to you, and we've built our app to respect that belief completely.
This policy applies to the Paraph macOS application and the paraph.app website. It explains what data we do and do not collect, how we handle the limited data involved in support requests, and your rights under applicable privacy laws including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Data the App Collects
None. The Paraph application does not:
- Track your usage or behavior
- Collect analytics or telemetry
- Access your emails or contacts
- Store any data on external servers
- Share any information with third parties
Data the Website Collects
The paraph.app website does not use cookies, analytics, or tracking technologies of any kind. No data is collected from browsing the site.
The only data we receive from the website is when you voluntarily submit the support contact form. This includes your name, email address, and message content. This information is sent to us via email and is used solely to respond to your inquiry. We do not store this data in any database or use it for any other purpose.
Local Data Storage
All app data stays on your Mac and in your personal iCloud account:
- Signatures are stored locally using SwiftData and synced via your iCloud account using CloudKit
- Images (logos, headshots) are embedded in your signatures and synced with them
- Mail.app assignments are stored locally only (not synced)
Paraph never transmits your signature data, images, or personal information to any server other than Apple's iCloud (via CloudKit, using your own Apple ID).
Network Communications
Paraph only makes network connections to:
- Apple's CloudKit servers for iCloud sync (using your Apple ID)
- Apple's App Store for license verification (handled by macOS)
We have no servers. There is no "phone home" functionality. Your signature data never leaves your device except to your own iCloud account.
Third-Party Services
Paraph does not integrate with any third-party analytics, advertising, or tracking services. The only third-party involvement is:
- Apple App Store — for distribution, payment processing, and license verification. Apple's handling of your purchase data is governed by Apple's Privacy Policy.
- Apple CloudKit — for iCloud sync of your signatures. Data is stored in your personal iCloud account and governed by Apple's privacy policies.
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we process the limited personal data described above under the following legal bases:
- Contract performance — Processing necessary to provide the app and respond to your support requests (Article 6(1)(b) GDPR)
- Legitimate interest — Maintaining the security and functionality of our service (Article 6(1)(f) GDPR)
Your Rights
Since Paraph does not collect or store personal data through the app, most data rights are inherently satisfied. Your signatures and images are entirely under your control on your own device and iCloud account.
Regarding support form submissions, and under applicable privacy laws (including GDPR and CCPA), you have the right to:
- Access — Request a copy of any personal data we hold about you
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your personal data ("right to be forgotten")
- Portability — Request your data in a structured, machine-readable format
- Objection — Object to processing of your personal data
- Restriction — Request that we limit processing of your data
- Withdraw consent — Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us. We will respond within 30 days (or within the timeframe required by applicable law).
If you are in the EEA and believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority.
International Data Transfers
Paraph is operated from the United States. If you contact us via the support form, your message will be processed in the United States. We do not systematically collect or store personal data, so no ongoing international data transfers occur. For EEA users, the legal basis for any transfer is contract performance (responding to your inquiry).
Data Retention
We do not maintain a database of user information. Support emails are retained only as long as necessary to resolve your inquiry and are handled through standard email. You may request deletion of your support correspondence at any time.
Children's Privacy
Paraph does not knowingly collect personal information from anyone under the age of 16 (or 13 in jurisdictions where that is the applicable age). The app is a utility tool with no user accounts or data collection.
Changes to This Policy
If we change this policy, we will update the "Last updated" date at the top of this page. For material changes that affect your rights, we will make reasonable efforts to notify you (such as a notice on our website). Given our commitment to not collecting data, we don't anticipate significant changes.
Contact
If you have questions about this privacy policy or wish to exercise your data protection rights, please contact us.
Paraph · United States
Email: support@paraph.app