Privacy Policy

1. Information used by Kaki

Kaki's basic diagnosis and tools do not require a visible sign-in. The app may create a guest session when it starts or when a server-backed feature needs one. For that session, Kaki processes a guest identifier, access token, account status, and VIP entitlement. The app stores the access token in the device Keychain and caches limited account information on the device so it can identify the current guest and display access status.

When you run a diagnosis or individual tool, Kaki processes the measurements needed for that action. Depending on the tool, these can include connection type, response time, jitter, packet-loss results, DNS or TLS test results, speed measurements, public IP address, ISP or organization, and approximate city or country inferred from that IP address. Kaki does not need your device's precise GPS location for the public-IP lookup.

2. Why the information is used

Kaki uses network measurements to show results, explain possible connection problems, save reports on the device, and compare reports. Guest and purchase information is used to provide server-backed features, verify VIP access, and restore eligible purchases. Technical requests are also necessary to retrieve available proxy locations and connect to a node you select. As with any request to a server, Kaki's service can receive ordinary connection metadata such as the public IP address used for that request; its operational logging and retention still require confirmation.

Network measurements describe a connection at a point in time. They are not a certification of network security, anonymity, or future performance.

3. Network tests and outside services

A network test necessarily contacts a destination. Public-IP information is requested from ipwho.is; that service receives the current public IP address and ordinary connection metadata needed to answer the request. Speed tests currently use a Cloudflare-hosted endpoint, which likewise receives the public IP address and connection metadata associated with the test traffic. Responsiveness, DNS, and TLS checks contact the selected or configured test destinations, which may include third-party hosts. Kaki does not send a guest account identifier, VIP status, or a complete diagnosis report to the speed-test endpoint as part of the speed-test request.

Those destinations may handle requests under their own practices.

4. Reports, exports, and sharing

Diagnosis reports and speed-test history are stored on the device. A report can include test time, network environment, destinations, measured values, outcomes, and an interpretation or score. Kaki does not automatically upload the complete local report archive to its business server. If you choose to export a report as PDF or JSON or use the iOS share sheet, the file is disclosed to the destination you select and is then subject to that destination's practices.

You can delete individual diagnosis reports or clear diagnosis history in the app. Deleting a guest account does not automatically erase locally saved diagnosis reports; use the report controls separately if you also want to remove them.

5. Purchases and VIP access

Apple processes in-app purchases through StoreKit. Kaki receives the transaction information needed to verify a purchase or restoration and sends the relevant transaction identifier and order information to its service to update the guest's VIP entitlement. Kaki does not receive your full payment-card details from StoreKit. Purchase records may also be retained by Apple under Apple's own policies.

6. IP Proxy

IP Proxy is an optional VIP feature, separate from network diagnosis. If you choose to connect, Kaki requests iOS VPN permission and uses an iOS VPN configuration to route device traffic through the selected proxy node while the connection is active. The node must process traffic to forward it; the destination service sees the node's outbound IP address rather than your ordinary public IP address.

Kaki's current in-app IP Proxy disclosure states that browsing activity, DNS queries, traffic content, source and destination IP addresses, and IP Proxy connection history are not recorded as proxy traffic logs. This statement is limited to IP Proxy traffic; it does not mean that Kaki's guest-session, purchase, diagnostic, or support systems process no information. IP Proxy does not guarantee anonymity, security, uninterrupted access, or a particular speed.

7. Storage, retention, and deletion

Local reports remain on your device until you delete them, clear the app's data, or remove the app, subject to any device backup you have enabled. Local speed-test history is stored on the device with a bounded record count. Guest account information and purchase-entitlement records are held by the business service for account and purchase functions, subject to applicable legal retention requirements.

In Settings, Delete Guest Account & Data requests deletion of the current guest record and clears its local session state. If you later use a server-backed feature, Kaki may create a new guest session. This action does not remove local diagnosis reports or Apple's own transaction history. To ask about information that cannot be managed in the app, use the contact details on the Support page.

8. Your choices and protection of data

You can use core diagnosis without connecting IP Proxy. You can stop an active proxy connection, decline the initial proxy data-use confirmation, delete reports, and request deletion of the guest account in Settings. Kaki uses device storage, the iOS Keychain, and authenticated network requests for the functions described above. No online service or transmission can be guaranteed to be completely secure.

9. Changes and contact

If data practices change, this policy and the in-app explanations should be updated before or when the change takes effect. The final version must show an effective date. For privacy questions or requests, contact [email protected] or visit the Support page.