KAGIBAKO Privacy Policy
KAGIBAKO ("the app") is designed with your privacy first. This policy applies to every use of the app.
1. The developer does not collect or track
The app contains no advertising, tracking, or analytics SDKs. There is no developer-operated server. The developer never receives your data and does not track you.
2. Where your data lives
The app deliberately splits what it stores into two places.
- Service names, contracts, prices, renewal dates, notes, account identifiers, and API key labels: the app's on-device database. If you are signed in to iCloud, this syncs through your private iCloud (CloudKit) database, between your own devices only.
- The API keys, access keys, and account passwords themselves: your device's Keychain. If iCloud Keychain is enabled, these sync between your own devices only, protected by Apple's end-to-end encryption.
Secrets are never stored in the app's database or in CloudKit. The database holds only a reference key (a random UUID) that points into the Keychain. Because of this separation, the app's database file, its backups, and the CloudKit records contain no secrets even if obtained.
When iCloud is used, this data resides in your own iCloud account. The developer cannot access your iCloud.
3. Information sent externally (only on your action)
- Opening a sign-in page: when you choose to open a service's login page, the app opens that URL in your browser. As with normal web browsing, standard information such as your IP address and User-Agent reaches the site you visit. The developer does not log this. The site's handling of your data is governed by its own privacy policy.
- The app sends no other network traffic. It never transmits your stored secrets to any external service.
4. Clipboard
Copying a secret places it on your device's clipboard. The app automatically clears what it wrote after a short interval. However, another app may read the clipboard before it is cleared, and Apple's Universal Clipboard may carry the content to your other devices signed in to the same Apple ID. This is OS behavior and beyond the app's control.
5. Biometrics
Face ID / Touch ID is evaluated entirely on your device; only the result (success or failure) is returned to the app. Biometric data never reaches the app and never leaves your device.
6. Notifications
Renewal reminders are local notifications generated on your device. They do not pass through any developer server.
7. In-app purchases
Purchases are processed by Apple's App Store; the developer never accesses your payment information.
8. Deleting your data
Deleting the app removes its on-device database. To fully remove secrets held in the Keychain and data held in iCloud, delete those items inside the app before removing it.
9. Contact
For questions about this policy, contact support@kiribako.app.