Privacy policy.

Your vault is for your device information. We do not operate an advertising or analytics service inside the app.

Setup Code Vault is provided by Richard Wallace. For privacy questions or requests, contact us through rsw.io. This policy covers the Setup Code Vault app and setupcodevault.rsw.io.

Information you put in the app

The app stores the homes, rooms, device names, manufacturer and model details, setup credentials, notes, images and files you choose to add. Records have app-generated identifiers and dates. Imports can retain HomeKit source identifiers so repeat imports can recognise the same accessories.

The local vault is encrypted using Apple’s CryptoKit, with its encryption key stored in the device Keychain. Local files use iOS data protection. The device-only key does not migrate in backups, and the vault directory is excluded from device backup. We cannot recover your local encryption key or reset your device authentication.

Optional Apple services

If you use iCloud sync, the app sends your vault archive to Apple’s CloudKit private or shared storage. Sync is initiated by you. Cloud data relies on Apple’s account access and platform protections; the app does not add a separate end-to-end encryption layer to its CloudKit archive.

If you share a vault, invited participants can access its contents according to the permissions managed by CloudKit. An editing participant can change the shared copy. Stopping sharing cannot recall information another person has already copied or exported. Apple processes its services under Apple’s privacy policy.

Camera, photos, files and Apple Home

The camera is used when you scan a code or photograph a label. The system photo and file pickers provide the items you select. HomeKit permission lets the app read the home, room and accessory metadata you choose to import. HomeKit does not supply saved setup codes. These features do not send their contents to a custom developer server.

Authentication and purchases

Optional app locking uses Apple’s LocalAuthentication framework. We do not receive Face ID or Touch ID templates or your device passcode. Apple processes Family purchases. The app checks verified StoreKit transactions to determine access; we do not receive your payment-card details.

Exports, retention and deletion

A JSON export is a readable copy of the vault, including its codes and attachments. It is not encrypted by the export feature. Save and share it carefully. Exported copies remain wherever you store them until you delete them.

Local records remain until you remove them or remove the app’s data. Deleting a device removes its associated local credentials and attachments. Use sync to send changes to iCloud. Cloud copies and copies held by shared-vault participants or in backups may remain independently of the local installation. Manage your iCloud storage and separately delete exports you no longer need.

Website visits

This website is hosted on Cloudflare Pages. Cloudflare processes connection information such as IP addresses and request details to deliver and protect the website. See Cloudflare’s privacy policy. We do not add analytics scripts, advertising pixels, forms, tracking cookies or third-party fonts to this website.

Links to rsw.io, Apple or other sites take you to separate services with their own policies. If you contact us, the information you choose to send is used to respond and investigate the request. Do not include your setup codes, passwords or a vault export.

Your choices and requests

You choose what to save, which permissions to grant, whether to sync or share, and when to export or delete your records. You can change app permissions in iOS Settings. Contact us through rsw.io about information you have sent directly to us, including requests for access, correction or deletion. We do not have a developer dashboard for reading your private vault contents.

Changes

We will update this page when the app’s data handling changes and revise the date above. Check this policy before using a new feature that handles information differently.