Subscription and secret manager (iPhone / iPad / Mac)
Subscriptions and keys,
boxed.
Too many subscriptions. API keys scattered across notes, emails and terminal history. KAGIBAKO holds both on a single card per service — and keeps the secrets themselves in your device's Keychain, not in its own database.
For iPhone, iPad and Mac · A one-time purchase, not a subscription
Download on the App Store →
Privacy Policy
Plan, price, billing cycle, next renewal, payment method — plus that service's API keys and console accounts. Everything for one service sits on one card. Monthly equivalents are calculated for you, so a mix of annual and monthly plans still adds up to a number you can read at a glance.
API keys, access keys and console passwords are stored only in your device's Keychain. They are not in the app's database and not in your iCloud records — those hold a reference, nothing more. If the database file or one of its backups were ever taken, the keys would not be in it.
Contracts and notes travel through a private CloudKit database; keys travel through iCloud Keychain, which is end-to-end encrypted. Both move only between your own devices. If a key has not arrived on this device yet, the app says so on the spot — it does not fail quietly.
You get a reminder before the next renewal (7 days by default). Plans that renew on their own and plans you renew yourself say different things, because they need different action. The list shows everything renewing in the next 30 days.
Apple's Passwords app remains the source of truth for signing into websites. KAGIBAKO takes only what a password manager handles poorly: long-lived program keys, and console accounts like AWS. Sign-in shortcuts are recorded too, so per-account URLs that AutoFill struggles with open in one tap.
Mobile carrier lines keep a phone number and a carrier email address per line, separate from the account portal password — because those are two different logins. Useful when a family shares a plan.
App Store pricing takes precedence.