Privacy Policy
In short: KeyCedar collects no personal data. Everything you enter stays on your device and in your own iCloud — we can't see it and we can't access it. We have no servers of our own, and the app contains no third-party SDKs, analytics or ads.
1. Scope
This policy covers the iOS app KeyCedar (钥匣 / 鑰匣, "the app") and the website keycedar.com. The app is developed and operated by Beijing Tongchuang Hengji Information Technology Co., Ltd. ("we", "us").
2. Where your data is stored
Everything you enter in the app — account profiles, passwords (if you choose to add them), security questions, recovery kits, phone numbers, subscriptions, transactions and app ownership records — is stored only in these places:
- Your device: the database file is protected by iOS Data Protection and cannot be read while your device is locked.
- Your own iCloud: if iCloud is turned on, your data syncs through Apple's CloudKit to the private database of your iCloud account. Sensitive fields use CloudKit end-to-end encryption, so neither Apple nor we can read them. App settings (such as the auto-lock delay) sync through iCloud key-value storage.
iCloud is provided by Apple and governed by Apple's Privacy Policy. If your Apple Account region is mainland China, iCloud is operated by Guizhou-Cloud Big Data Industry Co., Ltd. (GCBD).
We have no servers or back end that can access this data, and no account system — you never need to sign up or sign in.
3. Network requests made by the app
On first launch, the app asks you to read and accept this policy. Until you accept, the app makes no network requests. After that, apart from iCloud sync described above, the app makes only these requests:
| Purpose | Sent to | What is sent |
|---|---|---|
| Fetch exchange rates to convert spending in different currencies | A public exchange-rate data service | A request for the public rate table only — no user identifiers, and none of your account or subscription data |
| Search app names and icons (App ownership) | Apple's public search API | The search terms you type |
As with visiting any website, the server receiving a request can see your device's IP address. We do not receive these requests ourselves and have no access to that information.
4. System permissions
- Face ID or Touch ID: used to unlock the app. Authentication is handled by iOS; the app only learns whether it succeeded and never has access to your biometric data.
- Notifications: used for reminders about renewals, trial endings, low balances and phone number top-ups. All reminders are scheduled and delivered locally on your device without any server.
- Clipboard: written only when you tap Copy, and can be cleared automatically after a delay you choose. The app does not read your clipboard.
You can turn off these permissions at any time in iOS Settings.
5. Third-party SDKs
The app contains no third-party SDKs — no analytics, advertising, crash reporting or push services.
6. Crash reports
If you have turned on "Share With App Developers" in iOS Settings → Privacy & Security → Analytics & Improvements, Apple provides us with crash reports and usage statistics for the app. This information is collected and processed by Apple and does not include anything you enter in the app. You can turn this off at any time.
7. Encrypted backups
You can export your data as an encrypted .keycedar file, protected by a password you choose. Where you keep the file (for example, in the Files app or AirDropped to another of your devices) is entirely up to you; we never receive it. Please keep the backup password safe — we cannot recover it for you.
8. Website and support email
- Website: keycedar.com is hosted on Cloudflare. It uses no cookies, no visitor analytics and no third-party scripts. To deliver the site and protect it from attacks, Cloudflare processes network information such as visitors' IP addresses, subject to Cloudflare's privacy policy.
- Support email: when you write to support@keycedar.com, we receive your email address and the content of your message. We use it only to reply to you — never for marketing, and we don't share it with anyone. Email is forwarded to our mailbox through Cloudflare. If you would like our correspondence deleted, just let us know.
Please never send passwords, security answers or recovery keys by email. We don't need them to help you, and we will never ask for them.
9. Deleting your data
- Deleting a record in the app deletes it from both your device and iCloud.
- Deleting the app removes its data from your device. To delete its iCloud data, go to iOS Settings → your name → iCloud → Manage Storage, find KeyCedar and delete its data.
10. Your rights
Because we don't collect or store your app data, you can view, correct, export and delete all of it directly in the app. For support emails, you can ask us at any time to provide or delete them, and we will respond within 15 business days.
11. Children
The app is intended for adults and is not directed to children under 14. We do not knowingly collect personal data from anyone, including children.
12. Changes to this policy
If this policy changes materially (for example, if the app starts making a new kind of network request), we will update the date on this page and let you know in the app.
13. Contact
Beijing Tongchuang Hengji Information Technology Co., Ltd.
Email: support@keycedar.com