Thank you for using "KeyBox" (hereinafter referred to as "the App"). We deeply value your privacy and implement strict technical measures to protect your personal information. This Privacy Policy clearly and transparently explains how we handle your data when you use the App to store and manage passwords, credentials, and other sensitive information. Please read it carefully before using the App.
1. Data Storage Principles
The App is a fully offline password and credential management tool that adheres to the following core principles:
1. Local and iCloud Storage: All passwords, keys, credentials, and related metadata you create (hereinafter collectively referred to as "App Data") are stored solely locally on your device and in your iCloud account associated with your personal Apple ID. We do not upload this data to any third‑party servers operated or controlled by us.
2. No Backend Services: The App has no backend servers. This means we are unable to collect, store, process, or access any of your App Data. Data synchronization occurs entirely between your devices via Apple's iCloud service.
3. Data Encryption: All App Data is encrypted locally on your device using industry‑standard algorithms. Data transmitted via iCloud is also encrypted in transit and at rest by Apple's infrastructure. The encryption keys are managed by your device's secure enclave and iCloud Keychain, ensuring that only you can access your data.
4. Data Ownership: You fully own and control all your App Data. You can add, delete, modify, query, and manage the synchronization of your data through the App's functions or directly via Apple's iCloud settings.
2. Information We Collect
For the basic operation and functionality of the App, we only access information under the following necessary circumstances, through standard methods provided by Apple's operating system (iOS/iPadOS):
1. iCloud Read/Write Permissions: When you enable iCloud sync, the App requests access from the system to the storage space allocated for it within your iCloud Drive to read and write your App Data. This process is entirely managed by the Apple system; we cannot access other data in your iCloud.
2. Face ID / Touch ID Permission (Optional): If you choose to enable biometric authentication to lock the App, we request permission to use the device's Face ID or Touch ID. The biometric data is never accessed or stored by the App; it is handled entirely by the device's secure hardware and operating system.
3. Anonymous Diagnostic Data (Optional): Depending on your system settings, Apple may provide us with completely anonymous, non‑personally identifiable aggregated data through its "App Analytics" function, such as crash reports, performance metrics, and feature usage frequency (e.g., counts of "passwords added," without specific content). You can choose whether to share this data with the App Developer in iOS/iPadOS under "Settings" > "Privacy & Security" > "Analytics & Improvements."
Our Commitment: We do not collect your identity information (such as name, email, Apple ID), device unique identifiers, location information, nor do we collect the specific content of your App Data (e.g., the actual passwords or credentials you store).
3. Data Security
1. Transmission Security: When your App Data is synchronized across devices via iCloud, its encrypted transmission is solely the responsibility and handled by Apple Inc., adhering to its globally leading security standards.
2. Storage Security: Data stored locally on your device is protected by your device passcode, biometric locks, and the App's optional biometric unlock feature. Storage security within iCloud is ensured by Apple's encryption measures.
3. Our Measures: Since we do not operate any servers and do not transmit your data to us, the risk of data interception or leakage at our end is fundamentally avoided. The App uses the secure enclave and iCloud Keychain to manage encryption keys, ensuring that even if your device is compromised, your data remains protected.
4. User Responsibility: You are responsible for keeping your device and Apple ID credentials secure. We strongly recommend enabling strong passcodes and biometric authentication on your device, and using two‑factor authentication for your Apple ID.
4. Third‑Party Services
The App's core synchronization functionality relies on the Apple iCloud service. Your use, storage, and security of iCloud data are also governed by Apple's iCloud Terms and Conditions and its Privacy Policy. We recommend reviewing Apple's relevant policies to understand their data handling practices.
Apart from Apple iCloud, the App does not integrate any other third‑party analytics, advertising, or social SDKs.
5. Your Rights
You always retain complete control over your data:
• Access and Modification: You can access and modify all data directly within the App.
• Deleting Data: You can delete individual items or all data within the App. To completely delete data stored in iCloud, you can do so via iOS/iPadOS under "Settings" > "[Your Name]" > "iCloud" > "Manage Account Storage" > "KeyBox."
• Stopping Synchronization: You can turn off iCloud sync for the App at any time within the App's settings or the system's iCloud settings.
• Exporting Data: The App may provide an export feature to allow you to back up your passwords to a secure file (e.g., encrypted CSV or JSON). Use this feature responsibly and store the exported file in a safe location.
6. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in laws, technology, or our operational practices. The updated policy will be posted on this page with the "Last Updated" date revised. For significant changes, we will notify you prominently within the App. We recommend reviewing this policy periodically.