ICINA was built around a single conviction: your most sensitive documents belong to you, and only you. This policy explains what that means in practice.
We do not collect your vault data
The ICINA app does not collect or upload your names, documents, notes, account numbers, camera scans, or other vault content. There is no ICINA user account, registration, profile, analytics service, sync service, or vault server.
Sensitive vault payloads, drafts, and registry metadata are stored as encrypted local artifacts inside the app's container. ICINA does not have a service that receives or can inspect them.
Encryption
Every vault is encrypted with AES-256-GCM. The vault passphrase is never stored. If you enable Face ID or Touch ID unlock, ICINA stores a copy of the random vault-decryption key in Apple's device-only Keychain, protected by the current biometric set. ICINA never receives your passphrase, biometric data, or vault key.
When you seal and export a vault, the resulting .icina file has its own passphrase and remains encrypted until that passphrase is entered. Use a strong, unique passphrase, send it through a different channel from the file, and keep control of both copies.
No analytics, advertising, or data SDKs
ICINA contains no analytics tools, advertising networks, or third-party SDKs that collect or report app usage. ICINA does not transmit vault content or usage analytics.
App Store purchases are handled by Apple, and links you choose to open leave ICINA for the selected website. Those services operate under their own privacy terms.
We do not know how often you open the app, which sections you use, how many vaults you create, or anything else about how you use ICINA.
iCloud and computer backups
ICINA does not provide cloud sync or operate a vault server. However, encrypted ICINA app data may be included in an iCloud or computer backup according to your iPhone's backup settings. Those backups are managed by Apple, not ICINA.
You can review which apps are included in iCloud Backup in your iPhone settings. Separately, a sealed .icina file goes wherever you choose to save or share it, such as Files, iCloud Drive, AirDrop, email, or external storage.
In-app purchases
ICINA Pro is offered through the App Store as an annual subscription or a one-time lifetime purchase. Prices are localized by Apple and shown in the app before purchase. An introductory trial appears only when StoreKit confirms that the offer exists and the customer is eligible.
We receive no payment details — no card numbers, no billing addresses, nothing. Apple's Privacy Policy governs the payment transaction.
Camera access
ICINA uses your iPhone's camera only when you choose to scan a document. Free users receive three lifetime scans; Pro includes unlimited scanning. On supported iOS 26 devices, Pro can also use Apple Foundation Models to propose document details for your review.
Scans and intelligent autofill are processed locally and are not uploaded for processing. The resulting PDF is stored inside your encrypted vault and may be included in an OS-managed device backup as described above.
You can revoke camera permission at any time in Settings → ICINA.
Face ID and biometric authentication
ICINA offers Face ID (or Touch ID) as a convenient way to unlock a vault. This is handled entirely by Apple's LocalAuthentication framework.
ICINA never accesses, stores, or transmits biometric data. Apple confirms whether authentication succeeded. When you enable biometric unlock, the random vault-decryption key is stored in a device-only Keychain item protected by the current biometric set; it is not the passphrase and is not synchronized to another device.
No cookies, no tracking
ICINA is a native iOS app. It does not use cookies, web beacons, pixel trackers, fingerprinting, or any other tracking technology. There is no web dashboard, no login portal, and no session to track.
Children's privacy
ICINA is not directed at children under 13 and does not knowingly collect vault data or app-usage data from children.
Support communications
If you email support, we receive the email address, message, and any details you voluntarily include so we can respond. Do not send passphrases, vault files, screenshots of vault contents, Apple credentials, or other sensitive vault information. Support messages are not sold or used for advertising.
Changes to this policy
If this policy ever changes in a meaningful way, we will update the effective date at the top and, where appropriate, note the change in the app's release notes. We will never change the policy to introduce data collection without making that visible.
Contact
If you have any questions about privacy — or anything else — you can reach us at [email protected]. We read every message.