Effective 2026. SIGIL is made by Hadger (IP Shmigirilov).
SIGIL has no server, no account and no analytics. The phrases you type, the marks the app draws and the images you import are processed only on your device. Nothing you write is transmitted by us, ever. What SIGIL keeps, which is your recent marks, your circles and their names, lives in local storage on your iPhone or iPad.
Circle keys are generated on your device and stored in the iOS Keychain. They are never sent anywhere by us and we have no copy of any of them. That has a consequence worth stating plainly: if you lose a key and have no backup, we cannot recover it and neither can anyone else. Key export and backup are free in the app at every tier, always, for exactly that reason.
App Store purchases (Apple StoreKit). Everything else, including writing a mark, saving it, importing one and reading it, works in Airplane Mode. There is no Private Cloud Compute and no cloud model. Nothing leaves the device unless you tap Share and hand an image to the system share sheet yourself.
Data Not Collected. There is no account, no identifier, and no tracking of any kind.
Writing and reading a mark requires no permission and shows no prompt: importing an image uses the system picker, which iOS does not gate behind an authorization dialog. The one permission SIGIL ever requests is add-only access to your photo library, and only at the moment you first save a mark to Photos. There is no microphone, camera, location, contacts, health or notification access.
SIGIL is not a messenger. It has no inbox, no contacts, no directory and no transport of its own, so there is no message history on any server because there is no server. Sending a mark means sharing an image through an app you already use, under that app's own privacy policy.
Any mark or circle can be removed in the app at any time; deleting a circle deletes its key from the Keychain. Deleting the app deletes everything it stored.
hadger.support@gmail.com