Effective August 10, 2026
Who we are
Secretwell is provided by KW Software LLC. This policy explains how the Secretwell iOS app and this website handle information.
How the app works
Secretwell is an app for servers you or your organization configure. App requests go directly from your iPhone to the selected OpenBao server. KW Software LLC does not proxy those requests and cannot access the server response, your token, or your secret values.
Information stored on your device
Workspace details
Saved server names, server addresses, namespace paths, and other nonsensitive workspace metadata are stored in the app’s local database on your iPhone.
Credentials
Saved OpenBao tokens are stored using the device-only iOS Keychain and are not configured to sync through iCloud. Active tokens and OpenBao responses are kept in app memory while needed and are not written to the workspace database.
Clipboard
When you copy a secret value or supported tool result, it enters the iOS clipboard. Secretwell attempts to clear that value after one minute only if the clipboard still contains the value Secretwell copied. It does not erase newer clipboard content.
Information we collect
We do not collect app analytics, behavioral events, advertising identifiers, crash reports, performance traces, session recordings, OpenBao requests, remote logs, credentials, or secret values from the app.
Secretwell uses RevenueCat-generated anonymous app user IDs. Apple and RevenueCat process purchase history, product identifiers, transaction status, and Secretwell Pro entitlement information for App Store billing, receipt validation, purchase restoration, entitlement delivery, and aggregate purchase reporting. Secretwell does not set RevenueCat customer attributes, enable RevenueCat integrations, or send OpenBao server details, namespaces, tokens, policies, secret paths, or secret values to RevenueCat. This purchase information is not used for advertising or cross-app tracking and is not linked to an OpenBao identity.
If you contact support, we receive the information you choose to send, such as your email address and message. Do not send tokens, passwords, secret values, or other sensitive OpenBao data. We use support messages only to respond and maintain necessary business records.
OpenBao servers and administrators
Your OpenBao server is operated by you or another organization. That operator controls its authentication, authorization, audit devices, logging, retention, and other data practices. Those practices are not controlled by Secretwell and may be governed by a separate privacy or employment policy.
Apple and RevenueCat services
Apple may process App Store, purchase, diagnostic, or device information under Apple’s own policies. RevenueCat processes the anonymous purchase information described above under its own privacy policy. Their processing is separate from Secretwell’s direct OpenBao data flow.
Retention and deletion
Local app data remains on your iPhone until you remove a workspace, clear app data, or delete the app. Clear App Data removes Secretwell’s local workspace records and saved credentials after device-owner authentication. It does not delete information from an OpenBao server.
Apple and RevenueCat retain purchase and entitlement records as needed to operate App Store purchases, restore access, provide purchase reporting, and meet their legal obligations. Removing a workspace, clearing app data, or deleting Secretwell does not delete those purchase records.
Support correspondence is retained only as long as reasonably needed to answer the request, operate the business, and meet legal obligations. You may request deletion of support correspondence by contacting us.
Children
Secretwell is a professional developer tool and is not directed to children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy when Secretwell’s features or legal obligations change. The effective date above identifies the current version.
Contact
Questions or deletion requests can be sent to KW Software LLC at secretwell@khalidwar.com.
This policy describes the current product and is not a substitute for legal advice about your organization’s OpenBao deployment.