Privacy policy
How Custodia handles your data, which is by not handling it at all. Last updated 16 September 2026.
The short version
Custodia collects nothing. No accounts, no analytics, no crash reports, no identifiers, no contact details. Neither the macOS nor the iOS app requests a network entitlement, so they have no ability to send anything anywhere — this is a property of how the apps are built, not a promise about how they are operated.
The App Store privacy label for Custodia reads Data Not Collected.
What stays on your device
Everything. Specifically:
- Your vault and its contents. On macOS, an encrypted disk image in Custodia's Application Support folder. On iOS, encrypted files in the app's own Documents directory.
- A record of where each item came from, so items can be restored to their original location. It is stored encrypted inside the vault itself.
- Your settings — auto-lock interval, window title, sort order — in the app's standard preferences.
- On iOS only, if you turn on Face ID, one Keychain item holding a wrapped copy of your vault key. It is marked so it never syncs to iCloud, and it is destroyed when a face is re-enrolled or the device passcode changes.
Your master password is not in that list. It is never stored, in any form, anywhere. It exists in memory only for as long as it takes to unlock the vault.
Who else is involved
Apple, for the purchase. Buying through the App Store means Apple processes the payment and handles refunds under their own privacy policy. We receive aggregate sales figures — units and totals by region — and never your name, email address or payment details.
Nobody else. There is no analytics vendor, no error-reporting service, no advertising network and no third-party code of any kind inside either app.
This website
No cookies, no analytics, no tracking pixels, and no requests to any other domain — the fonts and every other asset are served from custodia.zewify.com itself. The web server keeps standard access logs containing IP addresses, used for security and troubleshooting and discarded on a rolling basis.
If you email support, that email sits in a mailbox until it has been dealt with, which is what email does. Nothing from it is used for anything else.
Children
Custodia is suitable for all ages and collects nothing from anyone, so there is no child-specific data practice to describe.
Changes
If this policy changes, the date at the top changes with it. Any change that affected what data leaves your device would be a change to how the apps are built, and would be described here plainly rather than buried.
Contact
A contact address for questions about this policy will be published here before Custodia reaches the App Store.