Privacy Policy

Effective 4 August 2026

The short version. Your scans, the photos taken during them, your room maps and your WiFi readings stay on your iPhone. There is no account, and we hold no copy of your home. Four things do leave your device, and each one is named below — an anonymous speed test, anonymous usage events, your subscription status, and, only if you choose to import a floor plan, that plan image.

What stays on your iPhone

These never leave your device, and we have no way to see them, because they are never sent to us:

• Your AR scans and the 3D model of your home.
• Photos taken during a scan.
• Room maps, room names, and the devices you pin onto them.
• Your WiFi readings, and the name of the network you measured.
• Your quiz answers and app preferences.

They live in Signl's private container on your iPhone and are removed when you delete the app. There is no backup on our side, so we cannot restore them for you.

What leaves your iPhone

Four flows, and no others. They are described one at a time rather than summarised, because the difference between them matters.

1. Speed measurement — Cloudflare

To measure throughput and latency, Signl transfers a small test payload against Cloudflare's public speed-test endpoint (speed.cloudflare.com) and times it. Like any web request, Cloudflare can see the request and the IP address it came from. No scan data, no network name and no identifier is sent with it — it is an anonymous transfer of a fixed number of bytes, used only as a stopwatch.

2. Usage analytics — PostHog

Signl sends product analytics events to PostHog, on their European infrastructure (eu.i.posthog.com). We use them to see where people get stuck — how many finish the setup quiz, how many abandon a scan part-way, how many reach the paywall — because that is the only way to tell a confusing step from a popular one.

The events are a fixed, closed list: setup started and each step finished, speed test finished, scan started, completed, abandoned or deferred, results shown and unlocked, paywall shown or dismissed, and purchase started or completed. They carry counts, durations and outcomes — how many rooms a scan detected, how long it took, how many dead zones were found, which subscription was bought. Your answers to the setup quiz (the problem you have, the rooms affected, your type of home, its floors, how many people live there) are attached to those events.

What PostHog does not receive: the geometry of your home, the 3D model, any scan photo, the name of your WiFi network, and your location. A scan reports that it found three rooms and two dead zones — never where those rooms or dead zones are.

There is no account in Signl, so nothing identifies you by name or email; each install is its own anonymous entry. Session replay — the feature that records the screen — is switched off, and will not be turned on while this page says it is off.

3. Floor-plan import — optional, and only if you use it

If you import a floor plan, that image is sent off your device. This is the one flow that carries a picture of your home's layout, so it is worth reading in full. It happens only when you choose to import a plan; if you never do, nothing here applies to you.

The image goes to two of our own services, both of which are stateless — the image is held in memory for the length of the request, never written to disk, never logged and never kept:

• The plan reader extracts the rooms and their dimensions. It runs our own model, and the image goes nowhere else.
• The visualiser turns the plan into the 3D view. It uses two outside providers: the plan image is sent to Google's image model to be redrawn as a clean render, and that render — not your original image — is then sent to fal.ai to build the 3D mesh. Their own terms govern what they do with what they receive.

4. Subscriptions — Apple and RevenueCat

Signl Pro is bought through Apple. We never see your payment details: Apple handles the transaction, and we are told only whether a subscription is active. RevenueCat manages that subscription state for us and receives an anonymous identifier it generates itself, plus your purchase and renewal status from Apple. No name, no email address, and nothing from your scans.

Camera

Signl uses the camera so ARKit can detect the real floor of your room and paint your measured coverage onto it. Camera frames are processed on your device, in real time, to track the floor. They are never recorded, never stored and never uploaded.

Location

iOS only reveals the name and signal strength of the WiFi network you are connected to if an app has location access. Signl requests location for that reason alone. Your location is not stored, not logged and not transmitted anywhere.

WiFi information

With that permission, Signl reads the name of your current network and its signal strength, and records them against positions in the room as you walk. This stays on your device as part of the scan.

What Signl does not do

• No account, no sign-in, no profile.
• No advertising identifier and no ad tracking.
• No selling or sharing of personal data with anyone.
• No upload of your AR scans, scan photos, room maps or WiFi readings.
• No screen recording, and no crash-reporting SDK.

This website

This site is hosted on Vercel. Vercel Analytics records cookieless metrics — page views, referrers, and which steps of the web demo people reach — without profiling individual visitors. Email addresses submitted to the Signl waiting list are stored in a Neon Postgres database and used only to announce the launch. If you joined and want your address removed, email us and it will be deleted.

Your rights

Under the GDPR you may ask for access to your personal data, its correction or its deletion, and you may object to its processing. Because almost everything Signl holds is on your own device, deleting the app exercises most of those rights immediately and completely. For the analytics events and the waiting list, email us and we will act on it.

The controller is Victor Backouche, reachable at the address below. If you believe your data has been mishandled, you may complain to the French supervisory authority, the CNIL (cnil.fr), or to the authority in the country you live in.

Children

Signl is not directed at children under 13.

Changes

If this policy changes, the effective date above changes with it, and the updated policy is posted on this page.

Contact

Questions about privacy, or a deletion request: victorbackouche@gmail.com.

Signl · Terms · Support · Home