PocketVeil Privacy Policy
Updated October 19, 2026
Your vault is stored and encrypted on your iPhone. The current PocketVeil app does not upload vault content to Kiwi Digital Lab servers.
About this policy
This policy explains how PocketVeil for iPhone, provided by Kiwi Digital Lab LLC in Michigan, USA, handles information. It covers version 1.8.2 and its TestFlight beta. It does not describe the data practices of other Kiwi apps or every service used by our website.
Information you choose to store
You may enter passwords, usernames, bank account and routing details, Wi-Fi credentials, key codes, private notes, images, scanned documents, and other information. PocketVeil processes this content on your iPhone to provide the vault, editing, search, categories, drafts, and backup features. The current app does not send your vault content to Kiwi Digital Lab servers and does not require an online account.
Encryption and device authentication
Vault content and saved drafts are encrypted on your device using Apple’s CryptoKit. The vault key is stored in the device Keychain with device-only protection requiring a device passcode. PocketVeil asks iOS to authenticate you using Face ID, Touch ID, or your device passcode. The app does not receive your biometric templates or device passcode. Exported backups use a separate recovery password. We do not receive your vault key or recovery password and cannot recover your vault or decrypt your backup for you.
Camera, photos, and files
You can choose to use the camera or document scanner, select photos, or import files to attach content to notes. These features are used at your request. Photos and scans captured within the app are kept as vault content rather than automatically saved to your Photos library. You can manage camera and biometric permissions in iPhone Settings. Files and photo selection are handled through Apple’s system interfaces.
Backups and copies you control
PocketVeil does not automatically synchronize your vault to a Kiwi account. The app marks its vault and draft files as excluded from automatic device backups. You can export an encrypted backup to a location you choose in Files, including iCloud Drive or another storage provider. Those services handle files according to their own terms and privacy policies. Copies remain in those locations until you remove them. Keep the backup password safe; restoring requires it.
Clipboard
When you choose to copy sensitive details, PocketVeil places them on the local device clipboard with a 45-second expiration. Other apps may be able to read or use clipboard content under iOS rules when you paste or permit access. Copy only when needed.
Tracking, advertising, and diagnostics
The current PocketVeil iOS app does not include advertising, third-party analytics SDKs, or cross-app tracking, and does not sell vault content or share it with advertising networks. Apple may process TestFlight participation, installation, crash, usage, and feedback information according to its own settings and privacy terms. Beta feedback you choose to share may be made available to us through TestFlight. This policy page is served by our website hosting provider, which may process ordinary request information such as IP address, browser information, and access logs to deliver and protect the page.
When you contact us
If you email us or send beta feedback, we receive what you choose to provide, such as your email address, message, device details, and screenshots. We use it to respond, investigate issues, and improve the app. Email and platform providers process those communications to deliver their services. Please do not send real passwords, bank details, vault keys, backup passwords, or unredacted sensitive screenshots.
Retention, deletion, and your choices
Vault information stays on your device until you delete it or remove the app. You can edit or delete saved items in the app. Removing the app removes its local app-container files; device Keychain records may remain under iOS behavior. Removing an item or the app does not delete backups, exported files, clipboard copies, or information already pasted elsewhere. Delete those separately, including any copies retained by your storage provider. There is no Kiwi online vault account to delete. Contact us to request access, correction, or deletion of support correspondence we hold; we handle those requests subject to applicable legal obligations. We retain support information as needed to address the request, troubleshoot related issues, and meet applicable legal requirements. We cannot remotely access or delete your local vault.
Children
PocketVeil is not designed specifically for children. We do not knowingly collect children’s personal information through an online PocketVeil account because the current app has no such account. If a child sends personal information to our support channel, contact us so we can address its removal.
Changes
We may update this policy when the app or its data practices change. The updated date will appear on this page. Review the policy when installing a new version.
Contact
For PocketVeil privacy questions or requests, contact Kiwi Digital Lab LLC at contact@kiwidigitallab.com.