Privacy Policy

This policy covers the Keyring Cat app, its AutoFill extension and its widgets, made by IYIO ("we", "our", or "us"). On the App Store, Keyring Cat's privacy label is "Data Not Collected".

• No account: there's no sign-in and nothing to register.
• No analytics, tracking or ads: the app and its extensions have no third-party SDKs.
• No server of ours: the app, AutoFill and the widgets have no networking of their own and send nothing to us. StoreKit talks to Apple for Pro.

• The Keychain: each code's secret is kept only in the Keychain, one item per code. Never in the app's settings, in files or in logs.
• iCloud Keychain (recommended): your codes sync through your own iCloud Keychain to your Apple devices. That's Apple's service, not ours, and we can't read it.
• This iPhone only: your codes aren't synced and can't be restored onto another device.
• Settings: the app's own settings hold only your storage choice, whether the lock is on, and the date and count of your last backup. No secrets.
• Importing from a password manager: when you export from Apple Passwords or another manager to Keyring Cat (iOS 26), only the verification codes are taken; passwords and passkeys are left alone.

• Backup file: made only when you tap Back up, and saved where you choose (Files, AirDrop, a drive). Its contents are encrypted with AES-256-GCM, with a key derived from your passphrase (PBKDF2-HMAC-SHA256, 600,000 iterations, a random salt). The passphrase is never stored or sent; we can't recover it or open the file.
• Transfer QR codes: shown on screen only after a warning and Face ID, Touch ID or your passcode, in Google Authenticator's transfer format, for your own other phone or app. They aren't saved or sent anywhere.
• Copy: a tapped code goes on the clipboard for this device only (not Universal Clipboard) and expires after 60 seconds.

• AutoFill (Pro): when you tap a code field and pick Keyring Cat, AutoFill reads your codes from a Keychain group that only the app, AutoFill and the widgets share, and hands the one you pick to iOS, which types it into that field. It sends nothing anywhere and keeps nothing.
• Widgets (Pro): read the code you chose from that Keychain group, only while your iPhone is unlocked. The code is marked private, so iOS hides it on the Lock Screen and in StandBy.

• Camera: iOS asks before the camera is used. It's on only while Scan is open, to read a setup QR code on your device.
• Screenshots: a screenshot you choose comes from the system photo picker, which needs no library access, and is read on your device. It isn't kept.
• Face ID, Touch ID and passcode: the lock is off until you turn it on. It goes through Apple's LocalAuthentication, and the app gets only a yes or a no.

• Pro: an optional one-time in-app purchase through Apple's StoreKit. Apple processes the payment, the app reads its own purchase on your device, and we receive no purchase data. A small "Pro is on" flag, not a secret and not synced, sits in the Keychain group so AutoFill and the widgets know.

Feedback in Settings opens an email to [email protected] in your own mail app. It reaches us only if you send it.

Keyring Cat Pro is an in-app purchase handled by Apple through the App Store. We don't receive your payment details. See Apple's Privacy Policy for how Apple handles purchases.

If the app changes how it handles data, we will update this page and the "Last updated" date.

Questions about Keyring Cat and your privacy:

• Email: [email protected]