Overview
CoverID Redact is a privacy-first travel and identity document wallet for iOS. We designed every feature to keep your data under your control. Documents are encrypted on your device and never leave it unless you explicitly choose to export or back them up.
What stays on your device
- Documents — encrypted with AES-256-GCM. Your master encryption key is generated locally, stored in the iOS Keychain (hardware-backed), and never transmitted.
- PIN — stored as a hash in the device Keychain, never in plaintext.
- Biometric data — Face ID / Touch ID is handled entirely by iOS. CoverID Redact never accesses the biometric data itself.
- Settings — stored via standard UserDefaults and never leave the device.
iCloud Backup (optional)
If you enable encrypted iCloud Backup, your vault is encrypted with your master key before it leaves your device. The encrypted data is stored in your personal iCloud account via Apple CloudKit. Neither Apple nor the developer can decrypt your backup.
You can disable iCloud Backup at any time in the app settings. Deleting the backup removes your data from iCloud.
Analytics
CoverID Redact uses TelemetryDeck for privacy-respecting, aggregate analytics. TelemetryDeck uses differential privacy techniques and does not collect personally identifiable information, IP addresses, or device identifiers.
Subscriptions
In-app purchases are processed by Apple through StoreKit, with RevenueCat managing subscription state. Payment information is handled exclusively by Apple — CoverID Redact never sees your payment details.
Data we do not collect
CoverID Redact does not collect:
- Your name, email, or phone number
- Location data
- Contacts
- Health or financial data
- Advertising identifiers (IDFA)
- Document contents or metadata
Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Apple (StoreKit) | Payments | Transaction data (managed by Apple) |
| RevenueCat | Subscription state | Anonymous app user ID, purchase receipts |
| TelemetryDeck | Aggregate analytics | Anonymous usage signals, no PII |
| Apple CloudKit | Encrypted backup | Client-encrypted vault data (opt-in) |
Data retention
- Documents remain on your device until you delete them.
- iCloud backups persist until you manually remove them.
- Deleting the app removes all local data.
- Temporary export files are cleaned up automatically.
Your rights
Because your data stays on your device, you have full control at all times:
- View, delete, or export any document
- Disable analytics in Settings
- Disable iCloud Backup in Settings
- Cancel your subscription via the App Store
No account exists to delete — CoverID Redact does not require an account.
Children's privacy
CoverID Redact is not directed at children under 13. We do not knowingly collect any personal information from children.
Changes to this policy
We may update this policy to reflect changes in the app or legal requirements. Material changes will be communicated through the app or this page.
Contact
Questions about this policy? [email protected]
Ruslan Grabar · Girona, Spain