Your notes stay on your iPhone.

01Your notes stay on your device

Everything you write — notes, categories, projects, reports, settings — is stored in a local database on your iPhone. Kipo does not upload it, sync it, or read it. Reports (weekly, monthly, yearly, career review) are calculated on the device from your own notes. No text leaves the phone for that.

If you delete the app, the local database is deleted with it. Kipo keeps no copy.

02What is not collected

Kipo does not collect your name, email address, phone number, contacts, photos, precise location, or any identifier tied to you as a person. There is no sign-up. The app does not use advertising SDKs and shows no ads.

03Optional features and the data they use

Face ID lock. If you turn on the lock, the app asks iOS to verify you with Face ID or your passcode before opening. The check is done entirely by iOS. Kipo never receives or stores biometric data.

Reminders. The evening nudge and the weekly report notice are local notifications scheduled on the device. They are not sent through a push service, and no notification content leaves the phone.

Widgets. Home-screen widgets read a small snapshot of your recent notes that the app writes to a storage area shared only between the app and its widgets on your device. When the Face ID lock is on, widgets hide note text unless you allow it in Settings.

Export. Markdown, CSV and PDF files are generated on the device and handed to the iOS share sheet. You choose where they go. Kipo does not send them anywhere itself.

04Subscriptions (RevenueCat and Apple)

Premium is sold as an auto-renewable subscription through the App Store. Purchases are processed by Apple under Apple's terms and privacy policy. To check which subscription is active, Kipo uses RevenueCat, a subscription service. RevenueCat receives:

• an anonymous, randomly generated app user ID (not linked to your identity);
• App Store purchase receipts and subscription status;
• basic device and app information (app version, device model, iOS version).

RevenueCat does not receive your notes or anything you typed. See RevenueCat's privacy policy for how they handle this data.

05Anonymous usage analytics and error reports (PostHog)

To understand which parts of the app are used and to find crashes, Kipo sends anonymous usage events to PostHog, an analytics service, hosted in the European Union. The events are a fixed list — for example "a note was saved", "a report was opened", "the paywall was shown" — together with:

• a random device identifier generated by the analytics library (not your Apple ID, advertising ID, or anything tied to your person);
• app version and build, iOS version, device model, language and time zone;
• an approximate location at city level, derived from the IP address of the request, which is not stored with the event afterwards.

Events never contain the text of a note, a category or project name, a search query, or anything you typed. Error reports contain the technical message and location of the error; any quoted text is removed before the report is sent.

Requests go through a proxy on our own domain (m.kipo.today) to PostHog's EU servers. See PostHog's privacy policy.

06Data retention

Notes: on your device, for as long as you keep them. Subscription records: kept by Apple and RevenueCat under their own policies. Analytics events: kept by PostHog under our project settings, tied only to the random device identifier.

07Children

Kipo is not directed at children under 13 and does not knowingly collect personal data from them. The app collects no personal data from anyone.

08Your rights

Because Kipo does not hold personal data about you, there is nothing for us to access, correct or delete on request — your journal is yours, on your phone. If you are in the EU/EEA or the UK and have a question about analytics data, contact us and we will help; the random device identifier can be found in the app's analytics settings on request.

09Changes

If this policy changes, the new version is published at this address with a new effective date. Changes that expand what is collected are also announced in the app.

10Contact