Legal
Privacy Policy
Kept — the privacy-first iOS document vault by OrbonTech — stores your documents encrypted on your own device. We collect no personal data, run no analytics, and have no servers of our own that receive your information. If you enable iCloud sync (paid tier), your data travels exclusively through Apple's iCloud Private Database — which neither Apple nor OrbonTech can read.
| Data category | Collected by OrbonTech? | Shared with third parties? | Notes |
|---|---|---|---|
| Document images & files | No | No | On-device only, AES-GCM encrypted |
| Personal / contact data | No | No | No account required |
| Usage analytics | No | No | Zero third-party SDKs |
| Crash & diagnostics | No | No | No crash reporter integrated |
| Payment information | No | No | All billing handled by Apple |
| iCloud sync data (optional, paid) | Encrypted ciphertext only | No | Goes to your iCloud — not OrbonTech servers |
1. Who we are
Kept is developed and published by OrbonTech. References to "we", "us", or "our" in this policy mean OrbonTech. You can reach us at [email protected].
This policy applies to the Kept iOS application (bundle ID com.orbontech.kept.app) and the website kept.orbontech.com.
2. What data we collect
We collect nothing from you directly. There is no account to create, no email address to provide, no usage telemetry sent to OrbonTech servers.
The app uses the following device resources — all processed locally, never transmitted to us:
- Camera / Photos: To let you scan or import document images. Images are processed on-device and saved in the app's encrypted container only if you choose to save them.
- UserDefaults: App preferences (e.g. view mode, theme). No personal data stored here.
- File system timestamps & disk space: Used to display document metadata inside the app.
- System boot time: Used to calculate the auto-lock inactivity timeout. Not transmitted.
3. On-device storage
Documents you add to Kept are stored in the app's private container on your device. Each file is encrypted with AES-GCM using a unique HKDF-derived key. The master key is stored in the iOS Keychain, protected by your device passcode and Face ID.
Kept has no backend. There are no OrbonTech servers that receive, cache, or process your documents. If you delete the app, all locally stored documents are deleted with it.
4. iCloud sync (optional, paid tier)
Paid subscribers may enable iCloud sync. When enabled, encrypted document data is synced across your Apple devices via Apple iCloud Private Database.
The encryption described in Section 3 applies before data leaves your device. Apple's servers store only the encrypted ciphertext — they cannot read your documents. OrbonTech likewise has no access to data stored in your iCloud account.
Your iCloud data is governed by Apple's privacy policy: apple.com/legal/privacy.
5. Local notifications
Kept may send you local notifications to remind you of upcoming document expirations (at 90, 30, 7, and 1 day before expiry, for paid subscribers). These notifications are generated entirely on your device by iOS. No data leaves your device for this purpose.
You can disable notifications at any time in iOS Settings → Notifications → Kept.
6. Analytics & tracking
Kept contains no third-party analytics SDKs, crash reporters, or advertising frameworks. We do not:
- Track how you use the app
- Collect crash logs or performance data from your device
- Use your data for advertising or profiling
- Share any data with data brokers or advertising networks
Apple may collect aggregate, anonymised App Store and TestFlight usage data under their own privacy policy, independent of Kept.
7. In-App Purchases
The lifetime upgrade ($29.99) is processed entirely by Apple App Store using StoreKit. OrbonTech never handles your payment details. Apple's payment and privacy policies govern the transaction.
When you complete a purchase, Apple provides Kept with a transaction receipt that confirms entitlement. This receipt is verified on-device using StoreKit 2 — no OrbonTech server is involved.
8. Data Retention & Deletion
Because OrbonTech holds no personal data about you, there is no retention schedule to describe on our end. All data exists solely on your device and, if you opt in, in your iCloud account.
Kept has no user accounts. There is nothing to "delete" on our servers because nothing is ever sent to our servers. Data deletion is performed entirely by you, on your own devices:
- Delete individual documents: Swipe left on any document in the main list and tap Delete, or open the document and tap the trash icon. The encrypted file is removed from your device immediately and cannot be recovered.
- Delete all data (on-device): Delete the Kept app from your iPhone. iOS removes the app's entire private container — all encrypted documents and the Keychain master key — permanently and irrecoverably.
- Delete iCloud data (if sync was enabled): Go to iOS Settings → [Your Name] → iCloud → Manage Account Storage → Kept → Delete Data from iCloud. This removes the encrypted ciphertext from Apple's servers. You may also disable iCloud sync inside Kept (Settings → iCloud Sync) before deleting the app.
- Delete support correspondence: If you have contacted us by email and want that correspondence deleted, email [email protected]. We will respond within 30 days.
9. Your rights
Because we hold no personal data, most conventional data-subject rights (access, portability, rectification, erasure) are exercised directly in the app — by viewing, editing, or deleting your documents.
If you have a question about data we might hold (e.g. a support email you sent us), contact [email protected] and we will respond within 30 days.
10. Children
Kept is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through our support channels, contact us at [email protected] and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy. For significant changes, we will provide notice in the app.
This policy is always accessible at kept.orbontech.com/privacy.
12. Contact
Privacy questions or requests: [email protected]
General support: [email protected]
Website: kept.orbontech.com