Privacy Policy

Last updated: July 2026

At Roundedapps, privacy isn't a feature — it's the foundation. This policy explains, plainly, what Accessbox does and doesn't do with your information.

Our Philosophy

The safest data is data we never have. Accessbox is built so your passwords, passkeys, and verification codes stay under your control — encrypted on your device, and never stored on our servers.

What We Never Do

• We never store your passwords or other secrets on our servers
• We never sell or rent your data
• We never share your data with advertisers or data brokers
• We never use advertising identifiers, and we never track you across other apps or websites
• We never collect your name or location, and we only see your email if you choose to contact support

Your Vault

Your passwords, passkeys, and verification codes are stored in the Apple Keychain and encrypted with industry-standard AES-256. Your secrets never leave your device unencrypted.

iCloud sync (optional). If you use iCloud, your encrypted data syncs through your own iCloud account. We cannot read it — only your devices, with your credentials, can decrypt it.

Password generation stays on your device. Accessbox uses Apple Intelligence, on your device, to turn randomly chosen words into a memorable phrase. That phrase becomes your password and is never sent to any server.

Anonymous Usage Analytics

To understand which features are used and to make Accessbox better, we collect anonymous product-interaction analytics through TelemetryDeck. These are simple event counts — for example, that a card was created or that onboarding finished — with no personal information and no content from your vault.

This data:

• is not linked to your identity — there is no account, and the identifier is anonymized
• is not used for tracking, advertising, or profiling
• is used only to evaluate feature usage and plan improvements

Data That Leaves Your Device to Power Features

A few features work by making privacy-preserving requests to service providers. In every case, your passwords and secrets stay on your device:

• Breach checks (Have I Been Pwned). To warn you about compromised passwords, Accessbox sends only a short, anonymized fragment of a password's hash (a technique called k-anonymity). Your actual password is never sent and cannot be reconstructed from the fragment.
• Card icons and colors. When you add a card, its name or website address may be sent to our icon service (and an icon provider) to fetch the site's logo. It is used only to display the icon, and is not retained or tied to you.
• App configuration. Accessbox occasionally requests configuration, such as which features are available, from our server. These requests contain no personal information.

We use these providers only to deliver the features above. None of them receive your name or vault contents, none are advertisers or data brokers, and none of this data is used for tracking.

Support

If you email support@roundedapps.com, we keep your message and email address to help you. We don't use it for anything else, and we don't share it.

Children's Privacy

Accessbox is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above.

Contact

Email: support@roundedapps.com

This policy applies to all Roundedapps products, including Accessbox.