Privacy
Privacy policy
Last updated Nov 3, 2026
Kakey collects no personal data. It has no account system, no analytics, and no server of its own, so there is nothing for us to sell, share, or lose.
The app
Your accounts stay on your device. Accounts, secrets, and categories are stored in a vault encrypted with AES-256-GCM, using a key derived from your master password with Argon2id. The master password is never stored.
Biometric unlock is handled by the system. Touch ID, Face ID, and Android biometrics only release vault key material protected by the Secure Enclave, Keychain, or Android Keystore. Kakey never sees your fingerprint or face data.
Scanning happens on the device. Camera images, photos, and screen selections used to read QR codes are processed locally and never uploaded.
Backups go only where you choose. If you turn on backup, Kakey uploads the encrypted vault and a small metadata file (device name and time) to that one location: iCloud, Dropbox, OneDrive, Google Drive, WebDAV, Nextcloud, or a folder. The connection goes directly from your device to that service; we never see it. Sign-in tokens are stored on your device, protected by the system. That provider's own privacy policy applies to what you store there.
Update checks on the Mac. After you agree, the Mac app checks GitHub once a day for a new version. The request includes the app version, like any download; no system profile is sent. You can turn it off in Settings.
Kakey has no telemetry, crash reporting, advertising, or tracking of any kind.
This website
kakey.gicek.com is a static website hosted on Cloudflare. It sets no cookies and loads no analytics, third-party scripts, or third-party fonts. Your language choice is remembered in your browser's local storage only. Cloudflare processes requests, including your IP address, to deliver and protect the site, as described in Cloudflare's privacy policy. Downloads are served by GitHub, the App Store, and Google Play under their own privacy policies.
Children
Kakey doesn't collect data from anyone, including children.
Changes
If this policy changes, the new version appears on this page with a new date. The full history is in the public repository.
Contact
Questions about privacy: open an issue on GitHub. Security problems: report them privately through GitHub's vulnerability reporting.