HarborKeep

1. Information HarborKeep Stores

HarborKeep stores the information you choose to add, which may include:

• record titles, categories, custom fields, and saved credentials
• rich text notes, drawings, photos, scans, documents, and other attachments
• Important Dates, Related Records, favorites, and Emergency Dashboard choices
• app preferences, draft-recovery information, and operational status needed to provide features

2. Information We Do Not Collect

C. Ray Carroll LLC does not collect:

• readable vault content or your vault encryption key
• advertising identifiers, cross-app tracking data, or behavioral profiles
• developer-run analytics or usage metrics from inside HarborKeep
• a separate HarborKeep account, because none is required

3. Encryption and Device Security

Private record fields, notes, drawings, and attachment content are encrypted before storage using AES-GCM authenticated encryption. HarborKeep uses a 256-bit symmetric vault key protected through Apple Keychain services. Category names, category photos and field labels, attachment filenames and basic file details, and record organization and lifecycle metadata are not encrypted by the app. Older notes, thumbnails, and attachment analysis may remain in a readable legacy format.

To offer destinations in the Share extension, a local suggestion index contains readable record titles and category names outside the encrypted vault content. Local routing information can also include a proposed new record title. Device protections still apply to these files.

HarborKeep also relies on device protections such as Face ID, Touch ID, passcode authentication, app locking, configurable timeouts, sensitive-field masking, and privacy shielding when the app leaves the foreground.

4. Optional iCloud Synchronization

When iCloud is enabled for HarborKeep, the vault database can synchronize through Apple CloudKit. It includes encrypted private content and the organization metadata described above. The matching vault key synchronizes separately through iCloud Keychain to trusted devices using the same Apple Account. Decryption happens locally after authentication.

Record and key delivery are separate Apple services and may arrive at different times. HarborKeep cannot control iCloud availability or delivery timing.

5. On-Device Document and Photo Analysis

HarborKeep can use Apple Vision, text recognition, and—on supported devices—Apple Intelligence to suggest summaries, tags, Categories, and Important Dates. This analysis runs on the device and does not send vault content to a developer-run AI service.

Suggestions are not silently applied. Newly saved attachment insight is encrypted with the attachment; some older insight and thumbnails use a readable legacy format. Related suggestion or analysis features can be disabled in HarborKeep Settings.

6. AutoFill

If you enable HarborKeep AutoFill, eligible website, username, and password values are copied into a device-local shared Keychain store so the included AutoFill extension can provide them to iOS. The AutoFill extension does not receive the main vault encryption key. Its separate credential copies may remain available to the extension after the main vault locks, subject to device and system AutoFill protections.

AutoFill must be enabled in iOS settings and can be disabled from HarborKeep and iOS settings.

7. Sharing into HarborKeep

The HarborKeep Share extension can accept files, photos, links, and text from other apps. Shared items are staged in an encrypted Shared Inbox or queued for the unlocked app to import into the destination you select.

The host app and iOS may provide the shared item and basic metadata required to complete that request. HarborKeep does not use this information for advertising or profiling.

8. Backup, Export, and Restore

Earlier versions may require Pro to create an encrypted backup. In the upcoming 5.3 release, creating, verifying, and restoring encrypted backups are free. A backup uses a passphrase-derived key and does not include the vault key stored in Keychain. During restore, data is decrypted with the backup passphrase and re-encrypted with the vault key available on that device.

Upcoming version 5.3 also adds free Save a Readable Copy. Its ZIP contains readable documents and structured data, including passwords and other private fields, without encryption. The independent offline recovery tool similarly creates unencrypted output from a supported backup. Neither option uploads your content to the developer. You choose where the resulting files are saved.

You control where an exported file is stored or shared. C. Ray Carroll LLC cannot recover a lost backup file or passphrase. See Security & Recovery for format support, offline-tool limits, and practical recovery steps.

9. Purchases

HarborKeep Pro is currently offered as a one-time in-app purchase, without a subscription. Apple processes the transaction and provides the app with verified entitlement information. C. Ray Carroll LLC does not receive your full payment card details through HarborKeep.

10. Storage, Retention, and Deletion Choices

Vault content remains on your device and, when sync is enabled, in Apple-managed iCloud storage until it is deleted through the app or managed through your Apple Account and device settings. HarborKeep also removes temporary decrypted preview files and clears in-memory decrypted values when they are no longer needed or the vault relocks, where possible.

You may delete individual records and attachments in HarborKeep. You may also disable optional AutoFill or analysis features, remove exported backups wherever you stored them, and manage iCloud data using Apple’s controls. Deleting HarborKeep from one device does not necessarily delete data already synchronized or retained in device or iCloud backups.

11. Apple and Other Services

HarborKeep uses Apple platform services for features such as CloudKit, iCloud Keychain, authentication, AutoFill, Share extensions, document scanning, Vision, Apple Intelligence where supported, and App Store purchases. Apple’s handling of those services is governed by Apple’s terms and privacy policies.

HarborKeep does not include third-party advertising or analytics SDKs.

12. Screen and Capture Limitations

HarborKeep covers its interface when it leaves the foreground and uses an opaque shield when iOS reports active screen recording or mirroring. It marks sensitive views as privacy-sensitive where iOS supports that behavior.

An app cannot guarantee that every ordinary screenshot will be blocked. Avoid taking or sharing screenshots while private information is visible.

13. Security Limitations

These protections reduce risk but cannot eliminate it. No app can guarantee perfect security, uninterrupted availability, flawless synchronization, or protection from a fully compromised or jailbroken device. You remain responsible for device security, Apple Account security, backups, and safely storing export passphrases.

14. Support Communications

If you contact support by email, C. Ray Carroll LLC receives the information you choose to include in that message so we can respond. Do not email passwords, vault keys, backup passphrases, or screenshots containing unmasked private information.

15. Contact

Questions about HarborKeep or this policy may be sent to:

• Email: support@craycarr.net
• Support: craycarr.net/support.html

16. Changes to This Policy

This policy may be updated as HarborKeep and Apple platform services evolve. The date above identifies this policy revision. Material changes will be reflected on this page and, where appropriate, in HarborKeep’s in-app privacy information or update notes.