privacy

Your library never
reaches us.

This is not a summary of a longer policy. It is the policy.

IKI has no account and no user database. By default we hold no copy of your library either. One optional feature changes that, and it is spelled out below rather than buried.

What we collect

Nothing. IKI has no analytics SDK, no crash reporter that ships your content, no advertising identifier, and no login. We do not know who you are, what you save, or that you opened the app.

Apple gives us aggregate numbers if you opted into sharing them with developers: downloads, crash counts, and similar. Those come from Apple, cover everyone together, and never include your content.

Where your library lives

Your saves are markdown files and their originals, stored in the app's own folder on your device. You can open them in Files, copy them out, or delete them without asking us. If you turn on iCloud sync in Settings, those files go to your own iCloud Drive under your Apple Account, which is between you and Apple. We have no access to it.

What leaves your device, and only when you ask

  • Saving a link. Your phone fetches that page directly, the way a browser would. The site you save sees a request; we do not.
  • Deep Parse (only when you tap it). If your phone can’t read a page — it needs JavaScript, say — Deep Parse first tries again on the phone. Only if that fails does it send the page’s address, and nothing else from your library, to our Cloudflare Worker, which fetches the page and sends the text back. The app tells you when this step happens.
  • Your own Claude key (optional). If you paste an Anthropic API key, your question and the relevant excerpts go from your device straight to Anthropic under your own agreement with them. We never see the key or the traffic, and it is stored in the iOS Keychain.
  • Apple Private Cloud (optional, off by default, iOS 27). If you turn this on, questions the on-device model cannot handle are answered by Apple’s Private Cloud Compute: the question and the excerpts found in your library go to Apple’s PCC servers. Apple designs PCC so that this data is not stored and not accessible to Apple, and independent researchers can inspect those claims. We never see this traffic. Off means Ask never leaves the device.
  • Reading your library on the web (optional, off by default). If you turn this on, your phone uploads an encrypted copy of your library to our server so that iki.place/library can show it in a paired browser. This is the one case where a copy of your library exists outside your devices. It is encrypted on the phone with a key we never receive: we hold ciphertext, its size and its timing, and cannot read a title, a tag or a word of it. Turning the switch off deletes it from our server; so does unpairing your browsers.
  • Browser capture (optional). If you pair a browser, what you save there is encrypted in that browser and parked on our Cloudflare Worker until your phone picks it up and deletes it. The key stays in the browser and on your phone; we hold bytes we cannot read, and we never see the page, its address or its text. Unpair and nothing more is sent.
  • Watch notes far from the phone (uses the same box). If you have set up browser capture and record a thought on an Apple Watch with no iPhone in reach, the watch encrypts the note with the same pairing key and parks it in the same box over the watch's own connection, so the thought still gets home. Same encryption, same rule: we hold bytes we cannot read, and the phone deletes them once it picks them up. Without browser capture set up, watch notes travel only over the direct watch-to-phone link, and never touch our server.
  • Share pages. When you deliberately share a collection, that page is uploaded to our Cloudflare Worker so it has a link. With a password, the content is encrypted on your device first: we store and serve text we cannot read. Pages can expire, and you can revoke one at any time.

That is the complete list, and every item on it starts with something you do: a save, a tap, or a switch you turn on. AI summaries, tags, search, transcription and Ask run on your device using Apple’s on-device models. Airplane mode is the easiest way to verify it: everything keeps working.

Permissions

Microphone for voice notes, speech recognition to transcribe them on device, photo library so screenshots can be read by on-device OCR, camera for document scans. Each is asked for in context, and refusing one only turns off that feature.

Payments

Subscriptions are handled by Apple. We receive from Apple, through RevenueCat, whether a purchase is active. We never see your card, your name, or your Apple Account.

Children

IKI is not directed at children under 13 and collects nothing from anyone, regardless of age.

If this changes

If a future version ever sends more than the list above, it will be opt-in, stated in the app, and this page will say so before the release ships. Questions: [email protected].

IKI is made by CHANGES WORK LTD, a company registered in England and Wales under company number 17148155, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. There is no user database to ask us about, but the address is here because you are entitled to know who is behind the app.

last updated 2026-09-23