App Privacy

Last updated October 27, 2026. This page covers the IDMyKey app for iPhone and Android. The website has its own privacy page.

In short

Everything you put into IDMyKey stays on your phone. The app has no account, no analytics and no ads, and it doesn't send your keys, photos or anything else to us or to anyone else.

What the app keeps, and where

For each key you add, the app keeps what you give it: its photos (top and back), the name, place and notes you enter, and a fingerprint of the key's cut that the app measures from the photos. If you add a photo to a place (a building or a door, say), it keeps that too. All of it is stored only on your phone. The names, places, notes and fingerprints are kept in an encrypted database whose key is held by your phone's secure storage (the iOS Keychain or the Android Keystore). The photos are kept in the app's private storage, which other apps can't read and which your phone encrypts along with the rest of its storage.

Measuring keys happens on your phone too: the model that finds the key in a photo runs on the device.

Camera, Face ID and motion sensors

• Camera: used only when you photograph a key (to add or identify it) or a place. The photo you take to identify a key is compared with your stored keys and then deleted; it isn't kept.
• Face ID, Touch ID or fingerprint: used, if the app lock is on, only to unlock IDMyKey. Your phone does the check; IDMyKey never receives your face or fingerprint data, only "yes" or "no".
• Motion sensors: used only while the camera is open, to show a level and take the photo when the phone is held flat and steady. Their readings aren't stored.

The app doesn't use your microphone, contacts, location or photo library.

What the app doesn't do

• No account or sign-in.
• No analytics, crash reporting or tracking of any kind.
• No advertising.
• Nothing is uploaded: the app doesn't connect to our servers or anyone else's. On Android it doesn't even have permission to use the internet.

Backups

Backup files: in Settings > Backup, the app can save your whole library (keys, places and photos) as one file, locked with a recovery code the app makes for you. You choose where the file goes: Files, iCloud Drive, Google Drive, a computer. It's encrypted on your phone before it's saved, and only the recovery code opens it. We never receive the file or the code, so we can't open your backup, and we can't recover a lost code. Restore it on any iPhone or Android phone, replacing what's there or adding to it.

Sharing keys: you can choose keys or places to share with someone. The app saves them (with their photos, and their notes only if you choose) as a file like a backup, locked with a new code made just for that file, never your recovery code. You send the file and the code yourself, however you like; nothing goes through us. Whoever has both can add those keys to their IDMyKey; they can't open your backups or see anything else.

iPhone: if you have backups turned on, your key library is also included in your iCloud backup (or computer backup), still encrypted. Restoring an iCloud backup or an encrypted computer backup brings it back; an unencrypted computer backup can't, because it leaves out the Keychain that holds the library's encryption key. Android: the app opts out of Google backup and phone-to-phone transfer, because the library's encryption key stays with the phone it was made on. Use a backup file to move to a new phone.

Deleting your data

Delete a key in the app and its photos and fingerprint are deleted with it. Uninstalling the app deletes everything it stored. There's nothing to ask us to delete, because we never receive it.

Children

IDMyKey isn't directed at children under 13.

Changes

Later versions may add features that use the internet, such as optional syncing between your devices. If they do, this page will say exactly what is sent and why before that version is released, and those features will be optional.

Contact

Questions about privacy, or anything else: info@idmykey.com.