秘 · Privacy

Privacy policy

Last updated 8 November 2026

Tekkoh is a journal for iPhone, made by Artifact. It is built so that we can't read what you write. This page says, plainly, what that means: what reaches us, what doesn't, and how to delete it.

What we can't see

Everything in your journal is encrypted on your phone, with a key only your devices hold, before it is sent anywhere. That covers your words, photos and their captions, the places your day took you, your steps and workouts, sunrise and sunset, and notes left by agents you link. Our server stores it only as ciphertext and has no way to decrypt it. How the encryption works →

What our server keeps

• Your username, which you choose. We don't ask for your name, email address or phone number.
• Your encrypted journal: pages and photos, with their sizes and when they were uploaded.
• What's needed to recover your journal with your PIN: a salt, a value derived from your PIN that we can check but not reverse, and your journal key locked with your PIN. None of these reveal your PIN or your key.
• The browsers and agents you link: the name each was given, when it was linked and when it was last used.

What passes through

• Request logs. Like any internet service, our server sees your IP address, the country it's in, your device's user agent, and the time and kind of each request. These are written to logs that are overwritten as they fill. Login tokens are never logged. We use them only to run the service and keep it secure.
• Cloudflare carries traffic between your devices and our server. It handles the connection, not your journal, which is already encrypted.
• Apple. Your journal key is shared between your devices through iCloud Keychain, which Apple encrypts end to end. To name the places you visit, the app sends their coordinates to Apple Maps, under Apple's privacy policy; they don't come to us.

On your phone

With your permission, Tekkoh reads your location (to note where you went), steps, distance and workouts from Apple Health, and your photo library (to suggest the day's photos). It reads them on your phone and encrypts what it keeps. Health data is used only to show your activity on your pages: never for advertising, never shared, never sold. Each permission is optional and can be turned off in Settings.

What we don't do

No advertising, no analytics, no tracking, and no third-party code in the app that collects data. We don't sell or share your data with anyone.

Browsers and agents you link

If you link a browser or a personal agent to your journal, you give it your journal's key, and it can read and write your journal. What it does with that is up to it and whoever runs it, not us. You can sign any of them out from the app.

Backups

We keep encrypted backups of the server's data, holding the same ciphertext. Each is kept for fourteen days.

Deleting your journal

In the app, Settings › Delete journal everywhere deletes your account, every page and every photo from our server at once, and signs out every linked browser and agent. Copies in backups are gone within fourteen days. Signing out of a phone, by contrast, leaves your journal on the server so you can come back to it.

Children

Tekkoh isn't directed at children under 13, and we don't knowingly hold accounts for them.

Changes

If this policy changes, we'll update it here and change the date at the top. Tekkoh is open source, so you can check what the app and server actually do: arfct/tekkoh-ios and arfct/tekkoh.

Contact

Questions about privacy: see Support.