Quirky Drawer Privacy Policy

What stays on your device

Your notes, to-dos, links, password records, drawer names, character choices, capsule collection, visit dates, streaks and ticket balance are used to provide the app features and stored in the app’s local storage. Preferences such as your language choice are also kept on the device.

What the developer receives

The current version has no developer-operated account system, cloud sync service or data collection server, and includes no third-party advertising or analytics SDK. The app does not send your writing, passwords or animal interactions to the developer.

Apple may still process store information or device diagnostics according to your system settings and its own policies. This is separate from the developer collecting your app content.

In-app purchases

Purchases and purchase restoration are handled through Apple StoreKit. The app reads verified purchase entitlements to determine whether all twelve drawers should be available. Apple handles payment information; the developer does not receive your credit card details through the app. Capsule tickets are not sold, and collectibles have no cash value.

Passwords and biometrics

Password drawer records are encrypted with AES-GCM using a key derived from your passphrase. Your passphrase is not stored as readable text or sent to the developer. Ordinary notes, to-dos, links and collection data do not use the password drawer’s encryption. Do not treat them as encrypted password records.

You may enable Face ID or Touch ID. iOS performs the identity check; the app does not receive your face, fingerprint or raw biometric data. If you enable this option, the derived decryption key is stored in a biometrically protected, device-only Keychain item. The app does not sync that key or include it in manual backups.

The developer cannot reset or recover your passphrase. Keep it safe, especially for restoring backups or using your data on another device.

Manual backups and system backups

You can export a backup using the iOS file interface and choose its destination. Ordinary cards, drawer labels and collection data are readable in the backup; password records remain encrypted. If you choose iCloud Drive or another service, that service handles the file under its own settings and policies. The app does not automatically upload a backup to the developer.

Restoring a backup replaces the current data after confirmation. The app may first retain a local copy of the original file for recovery. Device or iCloud system backups may also contain app data, depending on your Apple settings. This is separate from any app-provided automatic cross-device sync. Purchase entitlements come from StoreKit, never from a backup file.

Copying text and opening links

When you choose to copy an account name or password, the app places it on the device’s system clipboard with a local-only setting and a sixty-second expiration. Consider the app or website you paste it into. Opening a saved website may allow that site to process network and browsing data under its own privacy policy.

Your choices and data retention

You can edit or delete cards, export a manual backup, and turn biometric unlocking and animations off. The developer has no copy of your content and cannot remotely delete or restore it for you.

Deleting the app normally removes its local files, but separately saved backups, system backups and system Keychain items may remain. Before removing the app, consider disabling biometric unlocking and managing backups you no longer need. Deleting an individual card does not remove it from existing exported files or recovery copies.

Updates to this policy

We will update this policy if the app’s data handling changes.

This website and email support

This website provides app information, support and this privacy policy. It has no sign-in, upload feature or tracking analytics. The hosting provider may process IP addresses, browser information and access logs to serve the website and maintain security. If you choose to email us, we receive your email address and message and use them to reply to and handle that support request. Please do not send passwords, passphrases, verification codes or backups containing private information.

Contact

Support and privacy contact: haolynn1982@gmail.com