Secret Links Private Vault - Privacy Policy
This policy covers the Secret Links Private Vault iOS app by You 2.0, LLC ("we," "us," "our"). It describes what data the app handles, where that data lives, and the choices you have. For the cantlosesoftware.com website itself, see the site privacy policy.
How your data is handled
Secret Links Private Vault does not require an account. The links, titles and notes you save are encrypted and stored on your device, and are synced through your private iCloud (CloudKit) database. Usage and error information is sent to our analytics service, and the websites you open receive your requests as in any browser. Each is described below.
iCloud sync
If iCloud is enabled on your device, the app syncs your data through your personal, private iCloud database (Apple CloudKit) so it stays consistent across your devices. That data is tied to your Apple Account, is encrypted in transit and at rest by Apple, and is not readable by us. Disabling iCloud for the app in Settings stops sync.
Analytics
The app sends lifecycle events, review-prompt events and error reports to our analytics provider, PostHog. Each event carries a random anonymous identifier plus your device model, operating system version, locale, time zone and app version, and the provider can see your IP address when it receives the event. Error reports include error descriptions and context. If a link saved through the Share or Safari extension fails to import, the saved web address and error details are sent. If you submit the in-app feedback form, your feedback text and the optional contact email you enter are sent to the same provider. The app has no setting to opt out of analytics and does not use a crash reporter. We do not use the advertising identifier and do not track you across other companies' apps or websites.
No advertising
Secret Links Private Vault contains no ad networks and does not track you across other apps or websites. It does not request the advertising identifier (IDFA).
Websites you save
Secret Links opens the pages you save in an in-app browser. Those websites receive your requests and may set cookies, which the in-app browser keeps between visits, as an ordinary browser would. When you import links in bulk, the app also contacts each saved address directly to read the page title. We do not receive this traffic.
Photos and videos
If you pick a photo or video to save, the app copies it to its temporary storage and keeps an encrypted bookmark that points to the copy. The app does not upload it. iOS may remove temporary files.
Sign in with Apple (optional)
If you choose Sign in with Apple, your name and email address (or Apple's private relay address) are stored on your device only. We do not run an account server.
Locking and encryption
The addresses, titles and notes you save are encrypted on your device, and the encryption key is held in the iOS Keychain. You can lock the app with Face ID, Touch ID or a PIN. Backups you export are protected by a password.
Purchases
In-app purchases are processed entirely by Apple through the App Store. We never see your payment details. Purchases can be restored on any device signed in to your Apple Account, and refunds are handled by Apple at reportaproblem.apple.com.
Data deletion
In the app, Delete account and all data removes the links and categories saved on the device, your PIN, the encryption key, your sign-in details, and the trial and review counters. It does not clear website data kept by the in-app browser, items waiting from the Share or Safari extension, temporary copies of photos you picked, purchase items in the keychain, or analytics data already sent. The app does not separately erase iCloud records; deletions reach iCloud only as they sync. Deleting the app does not remove its iCloud data; you can remove that in Settings > Apple Account > iCloud > Manage Storage.
Your rights
Depending on where you live (including the EU/EEA under GDPR and California under CCPA/CPRA), you may have the right to access, correct, or delete personal information, and to object to its processing. We do not sell or share personal information. To exercise any of these rights, email us and we will respond within 30 days.
Children
Secret Links Private Vault is not designed for children. It includes an unrestricted web browser. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
Changes to this policy
When we make material changes, we will update the "Last updated" date above. Continued use of the app after changes are posted constitutes acceptance of the updated policy.
Contact
You 2.0, LLC
Email: development@youtwopointo.com
Web: youtwopointo.com