Privacy Policy

1. Summary

This app is designed for on-device processing. It provides Multi-Space app sessions, an authenticator, a private vault and security controls. The current version has no developer-operated server, account system, cloud sync, advertising or third-party analytics SDK.

Except for websites you choose to open, Apple services and iOS system features, the app does not actively upload your sessions, authenticator secrets or vault content to the developer.

2. Data processed on this device

• Multi-Space: App names, aliases, website addresses, groups, session policies and independent identifiers you create.
• Web sessions: Cookies, cache, sign-in state and website storage are kept by Apple WebKit in the selected app's separate website data store. Website content and sign-in information are governed by the relevant site.
• Authenticator: App and account names and TOTP settings are stored locally. Seed secrets are stored in the iOS Keychain and codes are generated on the device.
• Vault: Photos, videos, files, notes and collection metadata you import are stored in the local app container. The current version does not add application-level encryption to vault files; protection relies on the iOS sandbox, device passcode and system data protection.
• Security and audit: Lock settings, auto-lock preferences and short records of key actions are stored locally. Audit records do not include passwords, codes, cookies, page text or vault content.

3. System permissions

• Camera: Used only when you scan a QR code to add an authenticator account. Camera frames are not saved.
• Photos and Files: Used only to read items you actively choose to import or scan.
• Biometrics or device passcode: iOS performs authentication. The app does not receive your face, fingerprint or passcode data.
• Clipboard: Written only when you copy a code, and cleared according to your authenticator setting.

You can revoke permissions in iOS Settings. Revoking a permission does not delete saved data, but the related feature may stop working.

4. Purchases and Apple services

Lifetime unlock is processed by Apple StoreKit. Apple handles your Apple ID, payment method, order, taxes and refunds. The app receives only verified transaction identifiers, status, purchase time and revocation or refund information; it does not receive your full Apple ID, card number or payment password.

A local entitlement cache is used at launch and refreshed in the background through StoreKit. After reinstalling or changing devices, the same Apple ID can restore the purchase through StoreKit or Restore Purchases.

5. Third-party websites and destinations

Websites opened in Multi-Space or Incognito Web connect directly to their own servers. They may process account, network, device and browsing information under their own privacy policies. This policy does not control third-party sites.

When you export vault content or use system sharing, the destination app, cloud service or recipient receives the ordinary exported copy and handles it under its own rules.

6. Sharing, sale and tracking

The developer does not sell personal data or use local data for cross-app tracking, advertising profiles or data brokerage. The current version has no third-party advertising or behavioral analytics service.

7. Retention, deletion and recovery

• Apps in Multi-Space, authenticator accounts, security settings and audit records remain until you delete them or uninstall the app.
• Vault content in Recently Deleted remains on the device until restored or permanently deleted.
• Clearing website data removes cookies, cache and sign-in state for the selected app.
• Uninstalling normally removes local sandbox data. The current version does not provide developer cloud recovery.
• Non-consumable purchase records are managed by Apple; uninstalling does not cancel a completed lifetime purchase.

8. Security

The app uses the iOS sandbox, Keychain, system authentication and WebKit data isolation to reduce unauthorized access. No local storage can be guaranteed absolutely secure. Use a strong device passcode and check recipients before exporting sensitive content.

9. Children

This app is not directed specifically to children and does not knowingly collect children's personal information. Because there is no developer account system or developer-operated server, the developer cannot identify a user's age from local content.

10. Updates and contact

This policy may be updated when features, system requirements or laws change. Important changes will be reflected in an app update or by a new date on this page.

For privacy, deletion or purchase questions, use the App Support contact listed on the App Store product page. Apple handles purchase and refund support through its purchase history and support channels.