Kinroot
Privacy policy
Last updated: 27 October 2026
Kinroot is made by Zephy Studio, Singapore. Contact: support@zephystudio.com
The short version
- Kinroot keeps your documents encrypted on your devices.
- We do not have an account system. We do not collect your documents, your details or your usage.
- We do not use ads, trackers or analytics inside the app.
- We cannot read your documents, and we cannot recover them for you. Recovery is yours (see “Recovery”).
What Kinroot stores, and where
Kinroot stores the documents you add (PDFs, scans, photos), thumbnails of them, the details read from them (names, dates, numbers, issuers), the people it finds, your reminders and your settings.
- On your device. Everything is encrypted before it is saved, with keys held in your device's Keychain.
- In your iCloud, if you turn on sync. Kinroot can sync your vault between your own devices through your private iCloud storage (CloudKit). Documents and details are encrypted by Kinroot before they leave your device, so neither Zephy Studio nor Apple can read them. We cannot see your iCloud data.
- In a backup file or folder, if you turn on backup. You choose the place. The backup is encrypted.
What we collect
Nothing. Kinroot does not send your documents, details, search words or usage to Zephy Studio or to any other company. There is no sign-up, no email address and no profile with us. Kinroot contains no advertising or analytics code.
How your documents are read
Documents are read on your device using Apple's on-device features (for example text recognition) and Zephy Studio's own reading engine, DocIQ, which runs inside the app. Nothing is sent to a server to read a document. What Kinroot reads is a suggestion. You confirm the details before Kinroot relies on them.
People found in your documents
Kinroot groups documents by the people named in them. It uses names, dates of birth and document numbers. It does not use or compare faces. Merging two people is always your choice and can be undone.
What Kinroot asks permission for, and why
- Camera: to scan a document. Asked when you first scan.
- Photos: to import pictures you pick. Asked when you first import from Photos.
- Face ID or Touch ID: to unlock Kinroot. Your biometric data stays with Apple and is never given to Kinroot.
- Notifications: to remind you before a document expires. Reminders are created on your device. Notification text is generic unless you choose otherwise.
- iCloud: only if you turn on sync.
Copying details
When you copy a detail (a number or a name), Kinroot places it on your clipboard for a short time. Sensitive numbers stay on the device you copied them on and are removed after about a minute. Other apps you paste into follow their own rules.
Sharing
Kinroot does not share your data with anyone. If you choose to share a document (for example by AirDrop, Messages or Mail), the file goes where you send it, and the receiving service's rules apply. Kinroot offers to hide details you choose before sharing. Sharing with family members inside Kinroot is planned for a later update and will be explained here before it launches.
Recovery
In the default mode, the key to your vault is kept in your iCloud Keychain, which Apple protects with end-to-end encryption. You can recover your vault on a new device with your Apple Account. In Strict mode the key is not kept in iCloud: you rely on your password, a Recovery Key or another of your devices. If you lose all of them in Strict mode, no one can recover your documents, including us.
Keeping and deleting your data
Your data is yours. Delete a document or use “Erase vault” in Settings to remove it from the device and from your iCloud sync data. Backups you made are separate files in your own storage, and you delete them yourself. Deleting the app removes the on-device data. We hold no copy to delete.
Children
Kinroot is a general-audience app and is not directed at children. We do not knowingly collect data from anyone.
Where this applies
Kinroot is built to respect privacy rules such as Singapore's PDPA, the GDPR and the CCPA. Because we do not collect your data, there is nothing for us to access, correct or delete on your behalf.
Changes
If this policy changes, we will update the date above and explain the change here. Material changes will also be shown in the app.