KutunaCo Privacy Policy

Summary

KutunaCo is an offline password manager that stores your passwords and other records only on this device. It never asks you to create an account, never connects to the internet (the Android version does not even hold the internet permission) and never collects, uploads or shares any data with anyone. It contains no advertising or crash-reporting libraries and collects no analytics. Two exceptions lie outside the app, both on Android. When you scan a QR code, Google Play services, which provides the code reader, may send Google anonymous diagnostics about the reader; your records and the content of the QR code are never part of them (see Camera and photos). And to show you when a new version is available, KutunaCo asks the Play Store app on your device whether there is an update each time the app starts and, when you return to it, at most once an hour. To answer, the Play Store may send Google device and app details such as the phone model and the app's version, which Google deletes after a fixed period; your records are never part of them, and KutunaCo itself still never goes online and holds no internet permission. If you choose to update, Google Play downloads and installs the new version. On iPhone, nothing is checked: the version row in Settings › About only opens KutunaCo's page in the App Store, which shows whether there is an update. Crash and usage reports you may have allowed in your phone's own settings are sent by the system, not by KutunaCo (see Ratings and feedback). Help, privacy and terms links open in your device's browser; the app itself never goes online.

What is stored

The passwords, cards, API keys, notes and subscriptions you add, plus your app settings (theme, language, lock preferences, and a salted hash of your app PIN; the PIN itself is never stored). To decide when to remind you to back up, the app also keeps, with your settings on this device, when you last made an encrypted backup and when you last dismissed the backup reminder, and whether it has passed a language you chose in the app to the system. This data lives in the app’s folder on the device, encrypted with AES-256. The encryption key is kept in the iOS Keychain or Android Keystore, on this device only. The language you choose in Settings › General is also stored unencrypted, so that the system's and autofill's texts follow it: on Android 13 and later as the app's language in the system settings, on older Android versions in the app's own preferences, and on iOS in the settings the app shares with its AutoFill extension.

Autofill

If you turn on autofill, a copy of your password records that are not in the trash is handed only to the autofill service on this device. On Android the copy sits in the app’s non-backed-up folder, with the passwords encrypted by a Keystore key that requires device-lock verification. On iOS the copy is kept only in the app group keychain on this device; the system is told only the domain and username, never the password. Passwords you save to KutunaCo with AutoFill wait in that keychain until the app adds them to your box (at most 30 days); until then AutoFill can offer them, and the system is told their domain and username. To fill a form, the service reads, on the device, the form structure and the name of the app or site you’re signing in to; this information is neither stored nor leaves the device. Turning autofill off deletes the copy.

Installed apps

On Android, when you link a record to an app, the names and icons of installed apps are read on the device only while you have the picker open, so the list can be shown. The chosen app’s package name and a digest of its signing certificate are stored with the record so that autofill goes to the right app. This list is never sent anywhere.

Clipboard and screen

Copied passwords are flagged as sensitive and cleared from the clipboard after the time you choose in Settings (with “Never” selected, they stay). On iOS, copied passwords stay on this device. Other details you copy, such as a username, an e-mail address or a website, are copied as ordinary text: they are not cleared from the clipboard automatically, and on iOS Universal Clipboard can pass them to your other Apple devices that use the same Apple Account. On Android, screenshots and screen recording are blocked, and the content is hidden in the app switcher.

Camera and photos

To add a 2FA code from a QR code, KutunaCo asks for camera access and reads the code on this device; camera images are not saved or sent anywhere. If you choose a screenshot instead, only the picture you pick in the system's photo picker is read, and the app's temporary copy of it is deleted afterwards. On Android, the code is read on the device by the barcode reader that Google Play services provides and keeps up to date. The reader library's own statistics upload is switched off in KutunaCo, and the app still has no internet permission. Google Play services, however, may send Google anonymous diagnostics about each use of the reader, as it does for other apps: the kind of event, how long it took and an error code, together with device and app details such as the phone model and the app's version. The image, the content of the QR code and the records in your box are never part of them. On iPhone, Apple's own frameworks read the code. You can turn camera access off at any time in your device settings.

Backups and export

You create backups and choose where they are saved or with whom they are shared. Password-protected backups are encrypted with Argon2id + AES-256-GCM; if you forget the password the backup cannot be opened, not by you and not by us. If you choose an unencrypted export, the file is plain text and anyone who opens it can read your records. Temporary export files are deleted from the device after sharing.

Device backups

On Android, app data is excluded from device and cloud backups. On iOS, your box's encrypted file may be included in a device backup, but because the key that opens it stays on this device only, it cannot be opened on another device. To move your box to a new device, make a KutunaCo backup.

Recovery copies

If your box cannot be read at launch, the files are not deleted; the copies set aside remain on the device and can be imported, shared or deleted from Settings › Data Management › Preserved Box Copies.

Deleting your data

Settings › Danger Zone › Delete All Data removes your box, settings, the autofill copy, recovery copies and temporary files, and creates a new encryption key at the next launch. Deleting the app also removes your box's files on the device. On iOS, what the app keeps in the keychain stays on the device after the app is deleted: your box's key (and the keys of any box copies set aside by recovery), a record of how the app is locked (whether Biometric Unlock is on, a digest of your app PIN's record and your PIN reset choice) and, if you use AutoFill, the AutoFill copy of your passwords and any passwords waiting to be added to your box. To remove your passwords completely, use Delete All Data before deleting the app. Because nothing is kept on a server, there is no other copy to delete.

Ratings and feedback

After you have used the app for a few days, KutunaCo may ask the system to show the App Store or Google Play rating window (for example after you make a backup). This is the store's own window: your rating goes to Apple or Google, and the app never learns whether or how you rated it. To decide when to ask, the app keeps, with your settings on this device, when it was first opened, how many times it has been opened, when it last asked and which version was installed at the time. Settings › About › Rate the App opens KutunaCo's page in the App Store or Play Store app (on Android, in your browser if no store app opens it); that app, not KutunaCo, loads the page from Apple or Google, and you rate there with your Apple or Google account. Settings › About › Send Feedback opens a draft in your e-mail app with the app's version and platform in the subject; nothing is sent unless you send it, and the draft contains no data from your box. If you have allowed your phone to share analytics or diagnostics data with Apple or Google, the system may send them crash and usage reports about the apps you use, KutunaCo included. These reports come from the system, not from KutunaCo, which adds nothing to them; they describe the device and where in the app a problem happened, not the records in your box. Apple and Google may make them available to app developers, KutunaCo's developer included, without identifying you (on iPhone, only if you also chose to share with app developers).

Children

KutunaCo is not directed at children and does not collect personal data from anyone.

Changes

If this policy changes, the current text is published at https://kutuna.co/privacy and the date above is updated.

This website (kutuna.co)

This website uses no analytics, advertising or tracking tools and loads no third-party scripts. It sets two cookies, and only when you press the language switch; both hold nothing but the code of the language you chose (such as en or de) and expire after one year. kk_lang lets the site remember your choice. firebase-language-override is read by the hosting service (Google Firebase Hosting), which your browser sends it to with each page request, so that the site's pages open in the language you picked; it is not used for anything else. If you press the theme switch, your choice is kept only in your browser’s local storage (kk_theme) and is never sent to a server. The infrastructure hosting the site (Google Firebase Hosting) may keep standard server logs (IP address, time, requested page) for security and debugging; we do not access these logs or use them for any other purpose. The password generator on the home page runs entirely in your browser; nothing it produces is sent or stored.

The server logs mentioned above contain your IP address, which is personal data. The hosting provider (Google Firebase Hosting) keeps them to run the site and keep it secure, for a limited period under its own retention rules and on servers that may be outside Türkiye; this rests on the legitimate interest in operating a secure website. We do not view or download these logs. Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR), you may ask whether personal data about you is processed, ask for it to be corrected or deleted, and object to its processing; write to support@kutuna.co. You can also complain to the Turkish Personal Data Protection Authority or to the data protection authority of your country.

Contact

The current version of this policy is published at https://kutuna.co/privacy. For questions, write to support@kutuna.co or use the Support section of the Help page; never send your real passwords or your backup file.

Data controller: the independent developer of KutunaCo, an individual and not a company. The developer receives no data from the App and has no access to your box.