Privacy Policy
Kartella Home
Last updated: 9 August 2026
What we collect
We collect nothing. The app has no server and no account, and contains no analytics or advertising SDKs. Its App Store privacy declaration is "Data Not Collected".
Where your data is kept
Clients, visits, photos and key records are stored on your device.
Door codes, alarm steps and key storage locations are encrypted individually with a key generated on the device, and decrypted only after Face ID, Touch ID or your passcode. That key lives in the device Keychain and never leaves the device — not even into an iCloud or encrypted iPhone backup.
What your own actions send elsewhere
The app makes no network requests, but three actions hand data to somewhere you choose:
Opening a map
The client's address goes to the system Maps app. From there, Apple's app and Apple's privacy policy apply.
Sending a report
The job report PDF goes to the app you pick in the share sheet.
Saving a backup
The encrypted backup file goes to the destination you pick.
Photo location data
Photos taken or chosen have their GPS metadata removed before they are written to disk. The app never asks for location permission.
Device backups
By default the app's data is included in iOS device backups — a client list is a business asset, and losing it is the greater harm. You can exclude it from Settings › Where your data lives.
Because the encryption key never leaves the device, restoring from a device backup does not restore door codes or key locations. Use the app's own backup for those.
Permissions
Camera: only when you take a before or after photo. The photo library is read through the iOS picker, so no photo-library permission is requested.
Face ID: to unlock the app and before revealing entry information or a key's storage location.
Notifications: only when you switch on a schedule reminder. The text never contains a client name, address or code.
Contact
Controller, contact and your rights
This app is provided by freetokyo, an independent developer, who acts as the data controller. For any question about this policy or about personal data, contact freetokyo2020@yahoo.co.jp. We normally reply within five business days.
If you are in the EU, the EEA or the UK, the GDPR gives you the right to access, rectify, erase, restrict and port your personal data, to withdraw consent and to object to processing. You may also lodge a complaint with your national supervisory authority.
If you are a California resident, the CCPA/CPRA gives you the right to know, delete and correct the personal information collected about you, and to opt out of its sale or sharing. We do not sell or share personal information.
Where this app stores data only on your device, we have no access to it, so most of these rights are exercised directly on the device: delete or export inside the app, or delete the app. We will still answer any request you send us.
Retention: on-device data is kept until you delete it or remove the app. Support emails are deleted 24 months after the request is closed.