Skelett is a password manager that stores your data encrypted on your device. This policy describes the little that ever leaves it — and the switch that turns even that off.
Your vault
- Vault items — passwords, passkeys, 2FA secrets, notes, credit cards, identities and attachments — are stored encrypted on your device using
AES-256-GCM, with a key derived from your master password (PBKDF2-SHA256, 310,000 iterations). - Your master password is never stored and never transmitted. We cannot read, recover or reset it.
- The encryption salt and a one-way master-password verifier are stored in Apple's iCloud Keychain, so your vault can be recovered when you reinstall the app or sign in on a new device with the same Apple ID.
- Vault contents sync between your own Apple devices through your private iCloud account (CloudKit). What lands there is ciphertext. The developer runs no servers and cannot read this data.
The short version: the contents of your vault never reach us, in any form, at any time. There is no account, and nothing for us to leak, sell or be subpoenaed for.
Anonymous usage analytics (optional)
To understand whether features are used, Skelett sends anonymous usage events — for example "app launched", "item created", "paywall shown" — to TelemetryDeck, a privacy-focused analytics service that processes data in the EU.
- Events carry a hashed, anonymous device identifier — we can't tie it to you, and neither can TelemetryDeck.
- Events never include vault contents: no passwords, item names, usernames, websites or anything derived from your secrets.
- No advertising identifiers are used, and nothing is used for tracking across apps or websites.
- You can turn this off any time in Settings → Share Anonymous Usage Data. Off means zero events leave the app.
This matches the App Store privacy label: Device ID and Product Interaction, not linked to your identity, not used for tracking.
Feature requests (WishKit)
The optional feedback board inside the app is powered by WishKit. Only the text you voluntarily type into a feature request is sent. Don't put secrets in there.
Payments
Subscriptions are billed by Apple through your App Store account. The developer never receives your payment information.
Permissions
- Face ID / Touch ID — used to unlock the vault and authorize AutoFill. Biometric data never leaves the Secure Enclave and is never visible to Skelett.
- Camera — used only to scan QR codes when adding a 2FA code. Images are never stored or transmitted.
Changes
If this policy changes, the update ships with an app release and this page's date changes. The direction only goes one way: less data, never more, without asking.
Contact
Questions about privacy: skelett@lumira.app. You can also reach us through the Feature Requests board inside the app.