Effective August 7, 2026
Who we are
Secretwell is provided by KW Software LLC. This policy explains how the Secretwell iOS app and this website handle information.
How the app works
Secretwell is a client for servers you or your organization configure. App requests go directly from your iPhone to the selected OpenBao server. KW Software LLC does not proxy those requests and cannot access the server response, your token, or your secret values.
Information stored on your device
Workspace details
Saved server names, server addresses, namespace paths, and other nonsensitive workspace metadata are stored in the app’s local database on your iPhone.
Credentials
Saved OpenBao tokens are stored using the device-only iOS Keychain and are not configured to sync through iCloud. Active tokens and OpenBao responses are kept in app memory while needed and are not written to the workspace database.
Clipboard
When you copy a secret value or supported tool result, it enters the iOS clipboard. Secretwell attempts to clear that value after one minute only if the clipboard still contains the value Secretwell copied. It does not erase newer clipboard content.
Information we collect
We do not collect app analytics, behavioral events, advertising identifiers, crash reports, performance traces, session recordings, OpenBao requests, remote logs, credentials, or secret values from the app.
If you contact support, we receive the information you choose to send, such as your email address and message. Do not send tokens, passwords, secret values, or other sensitive OpenBao data. We use support messages only to respond and maintain necessary business records.
OpenBao servers and administrators
Your OpenBao server is operated by you or another organization. That operator controls its authentication, authorization, audit devices, logging, retention, and other data practices. Those practices are not controlled by Secretwell and may be governed by a separate privacy or employment policy.
Apple services
Apple may process App Store, TestFlight, purchase, diagnostic, or device information under Apple’s own policies. Apple’s processing is separate from Secretwell’s app data practices.
Retention and deletion
Local app data remains on your iPhone until you remove a workspace, clear app data, or delete the app. Clear App Data removes Secretwell’s local workspace records and saved credentials after device-owner authentication. It does not delete information from an OpenBao server.
Support correspondence is retained only as long as reasonably needed to answer the request, operate the business, and meet legal obligations. You may request deletion of support correspondence by contacting us.
Children
Secretwell is a professional developer tool and is not directed to children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy when Secretwell’s features or legal obligations change. The effective date above identifies the current version.
Contact
Questions or deletion requests can be sent to KW Software LLC at contact@khalidwar.com.
This policy describes the current product and is not a substitute for legal advice about your organization’s OpenBao deployment.