HarborKeep

1. Information HarborKeep Stores

HarborKeep stores the information you choose to add, which may include:

• record titles, categories, custom fields, and saved credentials
• rich text notes, drawings, photos, scans, documents, and other attachments
• Important Dates, Related Records, favorites, and Emergency Dashboard choices
• app preferences, draft-recovery information, and operational status needed to provide features

2. Information We Do Not Collect

C. Ray Carroll LLC does not collect:

• readable vault content or your vault encryption key
• advertising identifiers, cross-app tracking data, or behavioral profiles
• developer-run analytics or usage metrics from inside HarborKeep
• a separate HarborKeep account, because none is required

3. Encryption and Device Security

Records, notes, drawings, and attachments are encrypted before storage using AES-GCM authenticated encryption. HarborKeep uses a 256-bit symmetric vault key protected through Apple Keychain services.

HarborKeep also relies on device protections such as Face ID, Touch ID, passcode authentication, app locking, configurable timeouts, sensitive-field masking, and privacy shielding when the app leaves the foreground.

4. Optional iCloud Synchronization

When iCloud is enabled for HarborKeep, encrypted vault data can synchronize through Apple CloudKit. The matching vault key synchronizes separately through iCloud Keychain to trusted devices using the same Apple Account. Decryption happens locally after authentication.

Record and key delivery are separate Apple services and may arrive at different times. HarborKeep cannot control iCloud availability or delivery timing.

5. On-Device Document and Photo Analysis

HarborKeep can use Apple Vision, text recognition, and—on supported devices—Apple Intelligence to suggest summaries, tags, Categories, and Important Dates. This analysis runs on the device and does not send vault content to a developer-run AI service.

Suggestions are not silently applied. Saved attachment insight is encrypted with the attachment, and related suggestion or analysis features can be disabled in HarborKeep Settings.

6. AutoFill

If you enable HarborKeep AutoFill, eligible website, username, and password values are copied into a device-local shared Keychain store so the included AutoFill extension can provide them to iOS. The AutoFill extension does not receive the main vault encryption key.

AutoFill must be enabled in iOS settings and can be disabled from HarborKeep and iOS settings.

7. Sharing into HarborKeep

The HarborKeep Share extension can accept files, photos, links, and text from other apps. Shared items are staged in an encrypted Shared Inbox or queued for the unlocked app to import into the destination you select.

The host app and iOS may provide the shared item and basic metadata required to complete that request. HarborKeep does not use this information for advertising or profiling.

8. Backup, Export, and Restore

HarborKeep Pro can create an encrypted backup protected by a passphrase-derived key. The exported backup does not include the vault key stored in Keychain. During restore, data is decrypted with the export passphrase and re-encrypted with the vault key available on that device.

You control where an exported file is stored or shared. C. Ray Carroll LLC cannot recover a lost backup file or passphrase.

9. Purchases

HarborKeep Pro is offered as an in-app purchase. Apple processes the transaction and provides the app with verified entitlement information. C. Ray Carroll LLC does not receive your full payment card details through HarborKeep.

10. Storage, Retention, and Deletion Choices

Vault content remains on your device and, when sync is enabled, in Apple-managed iCloud storage until it is deleted through the app or managed through your Apple Account and device settings. HarborKeep also removes temporary decrypted preview files and clears in-memory decrypted values when they are no longer needed or the vault relocks, where possible.

You may delete individual records and attachments in HarborKeep. You may also disable optional AutoFill or analysis features, remove exported backups wherever you stored them, and manage iCloud data using Apple’s controls. Deleting HarborKeep from one device does not necessarily delete data already synchronized or retained in device or iCloud backups.

11. Apple and Other Services

HarborKeep uses Apple platform services for features such as CloudKit, iCloud Keychain, authentication, AutoFill, Share extensions, document scanning, Vision, Apple Intelligence where supported, and App Store purchases. Apple’s handling of those services is governed by Apple’s terms and privacy policies.

HarborKeep does not include third-party advertising or analytics SDKs.

12. Screen and Capture Limitations

HarborKeep covers its interface when it leaves the foreground and uses an opaque shield when iOS reports active screen recording or mirroring. It marks sensitive views as privacy-sensitive where iOS supports that behavior.

An app cannot guarantee that every ordinary screenshot will be blocked. Avoid taking or sharing screenshots while private information is visible.

13. Security Limitations

These protections reduce risk but cannot eliminate it. No app can guarantee perfect security, uninterrupted availability, flawless synchronization, or protection from a fully compromised or jailbroken device. You remain responsible for device security, Apple Account security, backups, and safely storing export passphrases.

14. Support Communications

If you contact support by email, C. Ray Carroll LLC receives the information you choose to include in that message so we can respond. Do not email passwords, vault keys, backup passphrases, or screenshots containing unmasked private information.

15. Contact

Questions about HarborKeep or this policy may be sent to:

• Email: support@craycarr.net
• Support: craycarr.net/support.html

16. Changes to This Policy

This policy may be updated as HarborKeep and Apple platform services evolve. The effective date above identifies the current version. Material changes will be reflected on this page and, where appropriate, in HarborKeep’s in-app privacy information or update notes.