SecureKit privacy policy

What we collect

Nothing. SecureKit does not collect, transmit, store, or process any personal information about you. We have no database of users, because there are no user accounts to put in one.

This is not a promise about how carefully we handle your data. It is a statement that we never receive it.

What the app stores, and where

Your passwords, two-factor secrets, private notes, document scans, photos, and audio recordings are stored in SecureKit’s own container on your iPhone, encrypted with 256-bit AES-GCM. The key that decrypts them is held in the iOS Keychain and released only after Face ID, Touch ID, or your device passcode.

SecureKit does not sync to iCloud, does not use CloudKit, and has no cloud vault. If you delete the app, its stored data goes with it. If you lose the device and have no backup, the data is gone — which is the cost of nobody else holding a copy.

Device permissions

SecureKit asks for these only at the moment a feature needs them, and each one can be declined without preventing you from using the rest of the app.

Face ID

Unlocks your vault. SecureKit asks iOS to authenticate you and receives only a yes or no — it never sees your face data, which stays in the Secure Enclave.

Camera

Scans documents into the vault and reads authenticator QR codes. Captured images go straight into encrypted storage; nothing is written to your camera roll.

Microphone

Records voice notes directly into the vault. Recordings are encrypted as they are saved and never leave the device.

Photos

Imports photos you choose into the encrypted vault. Full access is requested only so SecureKit can offer to delete the originals afterwards — iOS shows its own confirmation before anything is removed, and declining costs you nothing but that convenience.

Notifications

Reminds you before a saved document expires. These are scheduled on your device by your device. No server is involved and no push token exists.

Purchases

SecureKit Premium is sold through the App Store as an auto-renewable subscription, monthly or yearly. Payment is handled entirely by Apple. We never see your payment details, your name, or your email address — the app only asks StoreKit whether this Apple Account currently holds an active entitlement, and receives a yes or no.

Your subscription is managed in your Apple Account settings, and it renews unless you cancel at least 24 hours before the end of the current period. Apple’s handling of your purchase is governed by Apple’s own privacy policy, not this one.

If you bought the earlier one-time SecureKit Premium unlock, it remains yours permanently. Moving to subscriptions does not revoke it.

Backups you create

An encrypted backup is a single file produced on your device and encrypted with a recovery password you choose. SecureKit does not upload it anywhere. Where that file goes afterwards — AirDrop, Files, an external drive, or a cloud folder — is entirely your decision, and this policy cannot cover what the destination does with it.

We cannot recover your recovery password. It is not stored, transmitted, or escrowed by anyone, which is precisely why the archive is safe to keep wherever you like.

Analytics, tracking, and advertising

There are none. SecureKit contains no analytics SDK, no crash-reporting service, no advertising identifier, and no third-party trackers. It does not participate in any form of behavioural profiling, and there is nothing about you for us to sell, because we hold nothing about you.

Deleting your data

Every item you save can be deleted inside the app, and Settings includes an option to erase the entire vault permanently. Deleting SecureKit from your iPhone removes its stored data along with it. No request to us is required, and none would help — we have nothing of yours to delete.

Children

SecureKit is rated 4+ and collects no information from anyone, of any age. It is a general-purpose utility rather than a service directed at children.

Changes to this policy

If this policy changes, the updated version is published on this page with a new date. Because the app collects nothing, any future change would be about features rather than data handling — and if that ever stopped being true, it would be stated plainly here rather than buried in a revision.

Contact

Questions about this policy or the app can go to hello@inasgroup.net. SecureKit is made by Inas Group.