KeyPocketPrivacy Policy
KeyPocket does not collect any personal data.
The keys, projects and notes you save stay on your own device. We run no servers. The app needs no account, makes no network requests, shows no ads, and contains no analytics or tracking tools.
This policy covers KeyPocket for iPhone, iPad and Mac (the “App”) and the website keypocket.zayen.dev. “We” means the App’s developer, Yu Chen, an individual developer. If the English and Chinese versions differ, the Chinese version prevails.
1. Data stored on your device
The following is entered by you and stored only in the App’s own storage on your device. It is never sent to us or to any third party:
- Secret values (API keys, secrets, tokens)
- Key names, notes and platforms; projects and environment variable names; custom platforms you add
- App settings (appearance, auto-lock, clipboard clearing and so on)
- On Mac, the agent request log: time, agent name, project, variable name and result, up to 200 entries, never the secret value
Encryption. Secret values are encrypted with AES-GCM before they are written to the database. The encryption key is kept in the system keychain; on iPhone and iPad it is marked “this device only” and does not move to another device with a backup.
Deletion. Deleted keys go to Recently Deleted and are permanently removed after 30 days, or immediately if you choose. “Erase All Data” in Settings removes every key, project and custom platform from the device.
2. The App does not go online
The App itself connects to no server: there is no account system, no cloud API, no crash reporting or analytics SDK. The Mac version runs in the system sandbox and does not request network access.
When you tap a platform’s website link in key details, the system opens it in your default browser. Those are third-party websites governed by their own privacy policies.
3. System capabilities the App uses
| Capability | Purpose |
|---|---|
| Face ID / Touch ID | Unlocking the App and verifying you before a full secret is shown or copied. The system performs the check; the App only learns whether it passed and never receives biometric data. |
| Clipboard | When you tap Copy, the App writes the secret to the system clipboard, marked local-only (not shared through Universal Clipboard), and clears it automatically according to your setting, 90 seconds by default. The App does not read the clipboard in the background. |
| Notifications (Mac only) | After you turn on “Allow agents to request keys”, local notifications tell you which variable of which project an agent took. They are issued on your Mac, pass through no server and contain no secret. |
| Keychain | Stores the key used to encrypt your secret values. |
4. Letting agents request keys (Mac only, off by default)
You must turn this on yourself in Settings › Agent. Once on, an agent you configure on your Mac (for example Claude Code) can ask over MCP to have one key from one project placed on the clipboard:
- The agent and the App exchange data only through local inter-process communication, never over the network
- The App tells the agent only project names, variable names, platforms and the outcome of a request; it never returns a secret value to the agent
- Every request needs your confirmation; for one minute afterwards the same agent session may take keys from the same project without asking again, with a notification each time
Once a secret is on the clipboard it is handled by you and the agent you use. How the agent and its provider treat what it reads is governed by their own terms and privacy policies and is outside KeyPocket’s control.
5. Device backups
If you use iCloud Backup or back up your device to a computer, the App’s data files may be included in the device backup. Backups are handled by Apple under its privacy policy and we cannot access them. Secret values remain encrypted inside a backup.
The App does not currently offer iCloud sync. If a later version adds it, data will live in your own iCloud account, still inaccessible to us, and this policy will be updated.
6. Information Apple provides to developers
- TestFlight. If you join a beta, Apple provides us with crash logs and any feedback and screenshots you choose to submit, under the TestFlight terms.
- App Store. If you have opted in to “Share With App Developers” in system settings, Apple provides us with aggregated, non-identifying download, usage and crash statistics. You can turn this off at any time.
None of this includes anything you have saved in the App.
7. Website
keypocket.zayen.dev is a static site. It sets no cookies and embeds no analytics or advertising scripts. It is hosted on Cloudflare, which processes technical request information (such as IP addresses) to deliver and protect the site; see Cloudflare’s privacy policy.
8. When you contact us
If you email us we receive your address and message and use them only to reply and resolve your issue. Please never send a secret by email.
9. Children
The App is a developer tool and is not directed at children. It collects personal data from no one, children included.
10. Your choices
All data is on your device and under your control: view, edit or delete any item at any time, erase everything with “Erase All Data”, or delete the App. Because we hold none of your data, there is nothing to request from us for export or deletion.
11. Changes
We will update this policy and its effective date when features change (for example iCloud sync or import and export). Significant changes will be mentioned in the App’s release notes.
12. Contact
Questions about this policy: support@zayen.dev.