Strongstead · Legal

Privacy Policy

Effective 20 July 2026 · Applies to the Strongstead iOS app

Data stored on your device

Inventory, checklists, bug-out plans, emergency (ICE) contacts, medical profiles, map points, notes, and vault documents are stored locally on your device. Vault documents and encrypted notes are additionally encrypted with AES-GCM using keys derived from your PIN; the PIN itself is never stored in readable form. We (the developer) have no server and no access to any of this data.

Optional features that use the network

• iCloud backup (off until you use it). The backup file is encrypted on your device with a passphrase only you know, then written to your own iCloud Drive. It travels through Apple's iCloud under Apple's privacy terms; without your passphrase it cannot be read — by us or anyone else. Deleting it from iCloud Drive removes it.
• Family Share (off by default, PRO). If you create or join a family share, the categories of data you choose in its sharing settings sync through your own iCloud (CloudKit) to your family members' devices. Nothing goes to any server of ours.
• Device-to-device sync (manual). A transfer starts only when one person chooses Host, another chooses Join, and both approve the displayed verification code. The connection uses local Wi-Fi/Bluetooth and does not advertise, browse, or reconnect in the background.
• Barcode lookup (off by default). If you enable product lookup, the scanned barcode number is sent to the non-profit Open Food Facts database to fetch product details. Like any web request, it includes your IP address. Nothing else is sent.
• Map tiles. The Maps screen fetches map imagery from a public tile server (versatiles.org). Tile requests reveal the map region you are viewing and your IP address to that server — the same as any online map. You can download offline map regions in advance and use Maps without a connection.
• Route snapping (optional). If you enable road snapping for a bug-out route, the route endpoints are sent to Apple's Maps routing service through MKDirections so Apple can return a road-following route. Apple processes that request under Apple's privacy policy; Strongstead's developer does not receive it.
• Purchases. Subscriptions and purchases are processed entirely by Apple via the App Store. We never see your payment details.

Location

Location is used to show your position on maps and during bug-out navigation. When you send an SOS message, your current coordinates can be embedded in the SMS you review and send from the standard Messages composer. Strongstead does not track location in the background. If you explicitly enable road snapping, the route endpoints are submitted to Apple Maps as described above.

Widgets

Home-screen and lock-screen widgets read a minimized copy of data (for example, emergency contact names and phone numbers) stored on your device. Medical information appears only after you enable the master widget permission in Settings and separately opt in a specific medical profile. Turning the master permission off clears every profile opt-in and the shared widget payload.

What we don't do

• No analytics or crash-reporting SDKs. The App Store privacy label is "Data Not Collected".
• No advertising, no tracking, no fingerprinting, no sale or sharing of data.
• No account. We cannot identify you and have nothing to hand over.

Deleting your data

Deleting the app deletes all local data. Backups you created can be deleted from the Files app (iCloud Drive → Strongstead). Family-share data is removed for you when you leave or stop the share.

Children

Strongstead is not directed at children and does not knowingly collect any personal data — from anyone.

Changes & contact

If this policy changes, the new version will be posted at this address with an updated date. Questions: support@geesoft.eu.