Secrates

Privacy Policy

Effective date: October 26, 2026

This policy explains what data Secrates (the "app") uses, and what leaves your device. The app is made by Infinity Systems LLC, United States ("we", "us"). Contact: support@secrates.app, Infinity Systems LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States.

The short version

  • We collect no data. The app has no account, no server of ours, no ads, no analytics and no tracking.
  • Your photos, videos, documents and notes are encrypted on your device before they are saved to your iCloud Drive. We never hold your passphrase, your recovery phrase or your keys, so we cannot open your vault and cannot recover it for you.
  • iCloud and CloudKit hold only encrypted files. Apple stores them under your Apple Account.
  • Purchases are handled by Apple.

What stays on your device

Everything you put in the vault is encrypted on the device with keys that only you can unlock. This includes file names, notes, thumbnails and the text and duplicate information the app finds in your items (text in photos and documents is read on the device, and nothing is sent anywhere). Face ID, Touch ID and the optional PIN are handled by your device; the app never sees your face, fingerprint or Apple Watch data. Settings, such as the lock time, are stored on the device.

iCloud Drive

The app saves your encrypted vault in its own folder in your iCloud Drive, so it can be backed up and kept in step between your devices. Apple holds those files under your Apple Account and under Apple's terms and privacy policy. They are ciphertext: file contents, names and metadata are encrypted, so neither Apple nor we can read them. If iCloud is off, your vault stays on the device, and only your device backup protects it.

Family vaults (CloudKit)

If you share a vault with people you invite, the app uses Apple's CloudKit sharing. The encrypted vault records, and each member's public key, are stored in CloudKit under Apple's terms. The vault key is wrapped for each member, so CloudKit holds only ciphertext. The owner lets each person in and can remove them. iCloud may wake the app silently to fetch a family member's encrypted changes; no data goes to us. We have no server and see none of this.

Share extension and the lock control

The share extension encrypts what you share into a folder shared between the extension and the app (an App Group); the app moves it into your vault the next time you unlock it. The lock control only asks the app to lock. Neither sends anything off the device.

Purchases

Purchases and subscriptions (lifetime, yearly, monthly) are handled by Apple through StoreKit. We never see your payment details, name or Apple Account, and we run no server that receives purchase data. Apple's privacy policy applies to purchases.

Support emails

If you write to support@secrates.app, we receive your email address and what you write. We use it only to answer you, and keep it as long as needed for that. The app attaches nothing to the mail.

What we do not do

  • No accounts or sign-in.
  • No advertising, no ad SDKs, no analytics or crash-reporting tools of our own.
  • No tracking across apps or websites.
  • No selling or sharing of personal data.
  • No way for us to read, recover or reset your vault.

Screenshots and screen recording

iPhone, iPad and Mac do not let an app block screenshots or screen recording. The app covers its screen when it leaves the foreground and locks after the time you choose, but it cannot stop someone from capturing a screen while you view an item.

Deleting your data

We hold no data about you, so there is nothing on our side to delete. To remove your vault:

  1. Delete the app from your device.
  2. Delete its iCloud data: Settings > your name > iCloud > Manage Account Storage (or Manage Storage) > Secrates > Delete Data. On a Mac: System Settings > your name > iCloud > Manage.

Deleting the iCloud data removes the vault from every device that uses your Apple Account, and it cannot be undone. Export first if you want a copy. For a family vault, the owner deletes the shared vault, and a member who leaves keeps only what is already on their device.

Children

The app is not directed at children under 13, and we do not knowingly collect data from them.

Your rights in the EU and UK (GDPR)

We hold no personal data about you, so most requests have nothing to find. You can still ask us to access, correct or delete data, to object or restrict use, and to withdraw consent. You can complain to your local data protection authority. Apple is a separate controller for iCloud, CloudKit and purchases.

Your rights in California (CCPA/CPRA)

We do not collect, sell or share personal information, and do not use it for targeted advertising.

How to reach us

Email support@secrates.app for any privacy question or request. We aim to reply within 2 working days.

Changes to this policy

If we change what the app sends or keeps, we will update this policy and the effective date above. For important changes, we will tell you in the app before they apply.