Privacy policy

• Your data lives in plain Markdown files on your device, or in your own iCloud account if you choose.
• There is no account: you never sign up or sign in.
• The app collects no data and sends nothing to the developer.

Every kind of access has a purpose. Calendar, location, notifications and Face ID go through a system permission prompt, and you can revoke any of them at any time in Settings on iPhone and iPad or System Settings on the Mac.

• Vault files

  What for

  The events, tasks, goals, people and places you write. These Markdown files are the app's source of truth; it also keeps an SQLite index on the device for fast search.

  Where it stays

  Wherever you chose on first launch: the app's folder on your device, your own iCloud account, or a folder you pick. If the folder you pick lives in a cloud service such as Dropbox, OneDrive or Google Drive, the files follow that service's rules. The index stays on this device and is never synced. The app does not encrypt the vault, so you can open the files in another app such as Obsidian.

  Can you turn it off

  No, the app works with these files. On iPhone and iPad the vault shows up in the Files app, and you can copy, move or delete the files whenever you like. If you delete the app, a vault in iCloud Drive or in a folder you picked stays where it is. On iPhone and iPad, a local vault in the app's own folder on the device is deleted together with the app, so copy that folder somewhere else before you delete the app.

• Calendar

  What for

  Showing the events of the day you open, drafting an entry from an event you pick, and showing a person's upcoming events on their page. Attendee names and event titles are read to match them with people in your vault. The app also writes events you add, edit or delete in the app to your calendar. It changes your calendar only when you save a change or confirm a deletion.

  Where it stays

  Events stay in the calendar on your device and sync through that calendar's account (iCloud, for example); the app holds them in memory while it shows them and never copies them into your vault. For an event you add, its title, time or all-day setting and repeat are written to the calendar you pick; "Add birthday" writes a yearly all-day event with the person's name. Tasks and entries are never written to the calendar. If you write an entry from an event, that line goes into your vault. For the Lock Screen widget, up to five events per day for today and tomorrow are written to the shared area on your device; their titles are left out while notification content is hidden.

  Can you turn it off

  Yes. Reading and writing depend on the same full calendar access permission; the app asks for it only when you tap the calendar permission button, not on first launch. If you don't grant it, or revoke it later, the app neither reads nor writes your calendar.

• Location

  What for

  Suggesting your saved places nearby as you write, showing where you are on the map, and filling in a place's coordinates when you ask. If you allow it, the app also uses your location while closed, so that arriving at a place you chose can mark the goal linked to it or remind you.

  Where it stays

  Your location is written to a place's file as coordinates only when you tap Save. Kenet has no server; the map tiles on the map screen are loaded by Apple Maps, and that request follows Apple's privacy rules.

  Can you turn it off

  Yes. With the Location suggestions switch on the app's Settings screen, by setting a goal's location behaviour to Off, or by revoking the system permission.

• Notifications

  What for

  Task, goal and evening journal reminders, plus an optional reminder to keep in touch with people.

  Where it stays

  The app schedules notifications on your device; none come from a server. Notification content is hidden by default: task text, goal names and people's names stay out of notifications unless you turn content on.

  Can you turn it off

  Yes. Each kind of reminder has its own switch on the app's Settings screen; the arrival notification is turned off per goal. You can revoke the system permission too.

• iCloud (optional)

  What for

  Syncing your vault across iPhone, iPad and Mac.

  Where it stays

  In your own iCloud Drive, in the Kenet folder. Apple does the syncing; Kenet has no server of its own.

  Can you turn it off

  Yes, it is not required. On first launch you can keep the vault on your device or in a folder you pick instead.

• Siri and Shortcuts

  What for

  Adding an event or a task and marking a goal without opening the app. One command opens the Today screen.

  Where it stays

  The text you give the command is written to your vault. When you mark a goal, your goal names appear as choices in Shortcuts.

  Can you turn it off

  Yes. These commands run only when you run them. You can stop Siri from using Kenet in your device's Settings app; the actions in Shortcuts still run only when you run them.

• Widget and sharing data

  What for

  Letting the widgets show today's goals, events and task count, and adding text you send from the share sheet to your journal.

  Where it stays

  On your device, in a shared folder (App Group) that only Kenet, its widget and its share extension can reach. No task text is written into the widget data. When the vault is in iCloud and the app lock is off, the share extension writes the text you share, as an event or a task, straight to the day file; otherwise the text waits here until the app writes it to your vault.

  Can you turn it off

  There is no separate switch; this data never leaves your device. Without calendar access, no events are written.

• Face ID or Touch ID

  What for

  Unlocking the app lock, if you turn it on. Without biometrics, your device passcode is used.

  Where it stays

  The system does the check; the app only learns whether it succeeded. No face or fingerprint data reaches the app.

  Can you turn it off

  Yes. The app lock is off by default.

• Contacts

  What for

  Importing people you pick from your contacts as person pages. On iPhone and iPad; not on the Mac.

  Where it stays

  The app never asks for contacts access; the system's own picker handles the choice. The app takes only the name and nickname of the people you pick and writes them to your vault. Phone numbers, addresses, notes and photos are never read.

  Can you turn it off

  Yes. The import runs only when you start it, once; there is no ongoing link to your contacts.

• Journaling suggestions

  What for

  Picking a moment from Apple's journaling suggestions picker in quick entry and turning it into the text of an event. iPhone only.

  Where it stays

  The picker runs in a separate system process. The app receives only the suggestion you pick and drafts text from it; the text reaches your vault when you send it. Photo and video files are never opened.

  Can you turn it off

  Yes. Unless you open the picker, the app has no access to suggestions.

Kenet has none of the following:

• Analytics or usage measurement.
• Code that collects crash reports.
• Ads, an advertising identifier, or tracking you across apps.
• An account, a username or an email address.
• Third-party SDKs for any of the above. The only outside library in the app is GRDB, which manages the SQLite index on your device.

The privacy manifest inside the app package also states that there is no tracking and no collected data.

• kenet.app uses no cookies.
• It creates no accounts; there is no sign up or sign in.
• It loads no third-party scripts, fonts or analytics.
• Access logs of requests to the site are produced by the hosting stack: Cloudflare in front, the site's own server behind it. The logs are not used for analytics.

If this policy changes, the new text is published on this page and the date above is updated.

For questions and requests, use the channels on the support page.