Privacy Policy
The short version. Keisora has no accounts, no servers of mine, and no analytics. Everything you enter stays on your iPhone, and if you leave iCloud on, it syncs through your own private iCloud database, which only you and Apple can reach. I never see any of it. There are no third-party SDKs in the app at all.
The rest of this page is the same statement in the detail that regulators and app reviewers ask for.
Who this is from
Keisora is written and published by Javier Gonzalez, an independent developer (“I”, “me”). There is no company behind it and no other person with access to anything described here. You can reach me at [email protected].
What I collect about you
Nothing. Keisora does not ask for your name, your email address, or any identifier. It has no sign-up, no login, and no user account of any kind. It does not contain analytics, advertising, attribution, or crash-reporting software, and it does not include any third-party SDK or library. The app ships with zero external dependencies.
The App Store privacy label for Keisora is Data Not Collected, and that is a description of the code, not an aspiration.
What the app stores, and where
Keisora is a record-keeping app, so it does hold a good deal of information. It just holds it for you rather than sending it to me. Everything below is written to a database inside the app’s own private storage on your device.
| What | Examples | Where it lives |
|---|---|---|
| Pet profiles | Name, species, breed, sex, birthday, adoption date, microchip number, colour and markings, notes, memorial state | Your device, plus your iCloud if sync is on |
| Your own profile | The name you give yourself, and your photo if you add one | Your device, plus your iCloud if sync is on |
| Vet details you type in | Practice name and phone number, visit dates, notes, photographed documents | Your device, plus your iCloud if sync is on |
| Care tasks and history | Task names, intervals, which pets they cover, and a timestamped record of every completion | Your device, plus your iCloud if sync is on |
| Walks you record | The route as a list of coordinates, the distance, the start and end times, and which pets came along | Your device, plus your iCloud if sync is on |
| Weight entries | A value, a unit and a date per entry | Your device, plus your iCloud if sync is on |
| Photos you add | Pet photos and vet documents, resized and re-encoded by the app on import | Your device, plus your iCloud if sync is on |
| App preferences | Theme, app icon, light/dark override, whether to confirm before completing a task | Your device only, and these never sync |
None of it is transmitted to me, and none of it is shared with any other company. There is no analytics event, no “anonymous usage statistic”, and no telemetry ping anywhere in the app.
Some of it does appear outside the app itself. The home screen widget and the Watch complication read a short summary of what is due, written into a container shared only between Keisora and its own extensions, so that they can draw without opening the database. Worth knowing for a plainer reason than privacy law: a widget on the Lock Screen can be read without unlocking the phone, so whatever you name a task is visible to anyone who picks it up.
iCloud sync
Keisora uses Apple’s CloudKit to keep your data on all of your own Apple devices, an iPhone and an Apple Watch. It writes into the private database of an iCloud container tied to your Apple Account.
A private CloudKit database is exactly what it sounds like: readable by you, on your devices, signed in to your Apple Account. As the developer I can see the shape of the data, that a record type called “Pet” has a field called “name”, but I have no access to the contents of any user’s private database, and no mechanism exists that would give me one. Apple’s handling of that data is covered by the Apple Privacy Policy.
Two consequences worth stating plainly:
- Syncing uses Apple’s push infrastructure to signal that something changed. That signal is between your devices and Apple; it carries no content to me.
- You can turn it off. In Settings → your name → iCloud, switching Keisora off leaves the app fully working with a purely local database. Nothing else in the app depends on being online.
Photos
When you add a picture, iOS shows you the system photo picker and hands the app only the images you actually chose. Keisora never asks for access to your photo library as a whole, and it cannot browse it.
An imported picture is resized and re-encoded before it is saved, which strips most embedded metadata. The one thing the app deliberately reads first, from the original file and before re-encoding, is the capture date, because that is what places the photo correctly on the pet’s timeline. Location data in a photo is not read, not stored and not used.
Location
Keisora can record a walk. While one is running it follows your route, so it can draw the map afterwards and work out how far you went. That is the only thing location is ever used for, and it is entirely optional: every other part of the app works without the permission, and the app does not ask for it until the first time you start a walk.
What it asks for is While Using the App, not Always. It also declares the background location mode, for one reason worth stating plainly: a walk that stops recording the moment your screen locks or you answer a message is not a record of the walk. Location is read while a recording is running and at no other time. There is no passive tracking, no significant-location monitoring and no geofencing anywhere in the app.
A finished route is stored with the walk on your device and syncs to your own iCloud like everything else. It is never sent to me, and nothing about where you walk leaves your Apple Account. Delete a walk and its route goes with it.
Photographs are a separate matter, and their location is not read at all. See Photos above.
Notifications
Reminders are local notifications, scheduled by iOS on your device from the intervals you set. They are not push notifications from a server of mine. There is no server of mine. If you decline the notification permission, everything else in the app continues to work; you simply won’t be reminded.
What Apple tells me
This is the one place where any information about use reaches me at all, and it comes from Apple rather than from the app:
- App Store Connect reporting. Apple gives every developer aggregate figures: downloads, updates, territories, ratings. These are counts, not people, and nothing in them identifies you.
- Crash and usage diagnostics, only if you opted in. If you have turned on Share with App Developers in Settings → Privacy & Security → Analytics & Improvements, Apple may include Keisora crash logs in what it makes available to me. That setting is yours, it is off unless you turned it on, and it is a system-wide iOS choice rather than anything Keisora asks for.
- Anything you send me. If you email [email protected], I obviously have your email and whatever you wrote. I use it to answer you and nothing else, and I don’t add you to any list.
Third parties
There are none. Keisora contains no advertising network, no analytics provider, no A/B testing service, no attribution SDK, no social login, and no embedded web content. I do not sell, rent, or share personal information, because I do not have any to sell, rent or share.
This website is static and served by Cloudflare Pages. It sets no cookies, runs no scripts, and embeds no fonts, images or trackers from anywhere else. Cloudflare processes standard request logs (IP address, timestamp, requested URL) to serve and protect the site, as any web host does.
Deleting your data
- One record at a time: delete a pet, a task, a weight entry, a photo or a vet visit inside the app. Deleting a pet takes their records with them.
- Everything, from inside the app: Settings → Erase All Data removes every pet, task, walk, photo and record, and puts your preferences back to their defaults. It deletes each record properly rather than throwing the database away, which is what lets the deletions travel through iCloud as well, so your other devices catch up when you next open the app on them.
- Everything on the device: delete the app. iOS removes its database and files with it.
- Everything in iCloud: Settings → your name → iCloud → Manage Account Storage, then choose Keisora and delete its data. Deleting the app alone does not empty your iCloud container.
Because I hold nothing, there is no request to make of me and no waiting period. If you email me, the only thing I can delete is the email you sent.
Your rights
If you are in the European Economic Area, the United Kingdom, or a US state with a comprehensive privacy law such as California, you have rights to access, correct, delete, and port your personal information, and to object to its processing.
In Keisora those rights are satisfied structurally rather than by request: you already hold the only copy, you can read and change all of it in the app, and you can destroy it at any time by the steps above. I hold no personal information about you to disclose, correct, or transfer, and there is no profiling, automated decision-making, or sale of personal information. Keisora has never sold or shared personal information, and does not use it for targeted advertising or profiling.
Where processing does occur, such as you emailing me for support, the legal basis is my legitimate interest in answering you, and your message is kept only as long as it is useful for that.
Children
Keisora is not directed at children under 13 and does not knowingly collect information from anyone. It is a perfectly reasonable app for a child to use to look after a pet; it simply asks for nothing about them.
Security
Your data sits inside the app’s sandbox on your device, protected by iOS itself and by your device passcode or biometric lock. In transit to and from iCloud it is encrypted by Apple. If you have iCloud Advanced Data Protection turned on, app data such as Keisora’s is end-to-end encrypted, and Apple cannot read it either.
Changes to this policy
If Keisora ever gains a feature that changes any of this, I will update this page and change the effective date at the top before that version ships. Material changes will also be mentioned in the App Store release notes. If the app ever needed to collect something, it would ask you first, and honestly, that is not the plan.
Contact
Questions about any of the above, or about what the app does with something specific:
[email protected]It goes to a person, and I would rather answer a question than have you guess.