Last Updated: January 2025
The Short Version
We don't collect any of your data. Period.
Door Code stores all your data locally on your device and in your private iCloud account. We don't have servers. We don't have analytics. We don't track anything. We literally cannot access your codes, locations, or any personal information even if we wanted to.
What We Don't Collect
To be crystal clear, here's everything we don't collect:
- Personal Information: No name, email, phone number, or account creation
- Location Data: Your location is processed entirely on your device. We never see where you are or have been
- Door Codes: Your codes are encrypted and stored locally. We cannot decrypt or access them
- Device Identifiers: No IDFA, IDFV, or any other device tracking
- Usage Analytics: No tracking of how you use the app, what features you access, or how often
- Crash Reports: We don't collect crash data or diagnostics
- Advertising Data: No ads, no ad tracking, no advertising identifiers
How Your Data is Stored
Local Storage
All your locations, codes, and settings are stored locally on your device using Apple's secure storage APIs. This data is:
- Protected by your device's built-in encryption
- Only accessible by Door Code and you
- Deleted when you delete the app
iCloud Sync
If you have iCloud enabled, your data syncs across your devices through your personal iCloud account. This sync:
- Happens directly between your devices and Apple's iCloud servers
- Uses Apple's end-to-end encryption
- Is controlled by your iCloud settings
- Can be disabled at any time in Settings
We have zero access to your iCloud data. It's between you and Apple.
Encryption
Your door codes receive additional encryption beyond what iOS provides:
- Algorithm: AES-256-GCM
- Key Storage: Secure Enclave (hardware-protected)
- Key Derivation: Keys are derived using your device's unique identifiers and never leave the Secure Enclave
Location Services
Door Code needs location access to detect when you arrive at saved locations. Here's exactly how it works:
- Region Monitoring: We use iOS's built-in region monitoring (geofencing) to detect arrivals. This is processed at the hardware level by your device's coprocessor.
- No Tracking: We don't track your location, record your movement history, or know where you've been.
- No Transmission: Your location data never leaves your device. It's not sent to any server.
- Battery Efficient: Region monitoring is handled by iOS at the system level and uses minimal battery.
You can revoke location permissions at any time in Settings → Privacy → Location Services → Door Code. The app will still work for manual code lookup, but automatic detection will be disabled.
Sharing
When you share a location with someone:
- Shared data is encrypted end-to-end using CloudKit Sharing
- Only you and the recipient can decrypt the shared content
- We cannot see what you share or with whom
- You can revoke sharing access at any time
- Revoking access removes the recipient's ability to see updates, but they may have already copied the code
Third-Party Services
Door Code uses only Apple's first-party frameworks:
- CloudKit: For iCloud sync and sharing (Apple's privacy-focused cloud database)
- MapKit: For map display and location search (requests go directly to Apple)
- Core Location: For region monitoring (processed on-device)
We don't use any third-party SDKs, analytics tools, crash reporters, or advertising frameworks.
App Store Privacy Labels
As declared on the App Store under "App Privacy":
- Data Used to Track You: None
- Data Linked to You: None
- Data Not Linked to You: None
- Data Collected: None
Children's Privacy
Door Code does not knowingly collect any information from anyone, including children under 13. Since we don't collect data at all, there's no children's data to protect—but we're fully compliant with COPPA regardless.
Data Deletion
To delete all your Door Code data:
- Local Data: Delete the Door Code app. All local data is removed.
- iCloud Data: Go to Settings → [Your Name] → iCloud → Manage Storage → Door Code → Delete Data
Since we don't have your data, there's nothing for us to delete on our end.
Changes to This Policy
If we ever change this privacy policy (for example, if we add new features), we'll:
- Update this page with the new policy
- Update the "Last Updated" date
- Note significant changes at the top of the policy
Our commitment to not collecting your data will not change.
Contact
Questions or concerns about this privacy policy?