Numkoi Privacy Policy
Numkoi ("the app") is made by Patrick Martin. Your data stays on your device. The developer does not collect it and cannot see it. The only times the app sends anything off your device are when you set up a variable to pull its value from a web address and when you open the Gallery, both described under Network.
What the app stores
The app stores the variables, formulas and saved results you create, the Dashboard pages and cards you arrange, and your settings (how many decimals answers show, how text and numbers are joined, your Dashboard theme and which card a widget uses). With a variable that pulls from a web address it also stores the address, the method (GET or POST), the header names and values you entered (not keys, see Keys), the body, what to take from the answer, and a note of when the last pull was tried, when it last worked and, if it failed, a short sentence saying why (this can include the first 200 characters of the reply the server sent back). All of this is kept only on your iPhone or iPad, inside the app's own storage. If you delete the app, it is deleted with it.
What is collected
Nothing. The app has no analytics, no advertising, no tracking and no crash reporting. It does not ask you to create an account or sign in.
Widgets
If you add a Home Screen or Lock Screen widget, the app keeps a small file with what your Dashboard cards show, and the names of your pages, in a shared folder on your device so the widget can draw it. The file never leaves your device and is deleted with the app. It does not contain a web address, a header or a key.
Shortcuts and Siri
The Run Formula, Open Formula and Set Variable actions run on your device with the same stored data, and send nothing anywhere by themselves. What a Shortcut you build does with an answer, or where it gets a value to give Set Variable from, is up to that Shortcut.
Network
The app works offline and does not connect to the internet by itself. There are two exceptions, both started by you. The first is a variable you set up to pull its value from a web address you type in. For that variable the app makes a request from your device to that address, and only that address, over https. The request is a GET or a POST with the headers you entered (including a secret key, if you added one) and the body you wrote, if any. It is made when Numkoi opens (you can turn that off for each variable), when you tap Refresh, and when you tap Try it while setting the variable up. The server at that address receives the request and can see it, as any web server can, including your device's internet address; what it does with the request is up to its owner and is covered by their policy, not by this one. The app reads the answer and keeps only the value you chose to take. Nothing is sent to the developer or to any other service, and the developer has no way to see these requests. Without a variable set up this way, and without opening the Gallery, the app makes no network requests at all.
The Gallery is a list of ready-made examples (formulas, Dashboard pages and themes) that you can add. It is opened by you, from Settings or from a link where the app suggests it, and nothing is requested before that, at launch or in the background. When you open it the app asks the Gallery's host for a public list, and for a file only when you choose one to look at or add. These are plain read-only requests over https. They carry nothing about you or your phone: no account, no identifier, no cookies, no headers of the app's own, and no data from the app. The host can see the request and your device's internet address, as any web server can; the Gallery has no accounts and no tracking, and the developer does not collect what the host sees. If the Gallery cannot be reached (no connection, or no host set up yet), the app shows the examples that came with it and says so. A file from the Gallery is checked against the list's size and hash and then read like any file; a web address in it arrives switched off.
Keys
A key or token you mark as secret is kept in the Keychain on your device, only on this device: not with the variable, not in History or widgets, and not synced through iCloud or moved to another device by a backup. The app reads it only to make the request. A key typed into the web address or the body is not secret: it is stored with the variable as ordinary text on your device, so put keys in a header marked secret. iOS manages the Keychain and can keep a key after an app is deleted; remove the header (or the variable's web address) first if you want the key gone.
Purchase
Numkoi is free to use. An optional one-time purchase, Numkoi Pro, lifts the free limits on Dashboard pages, cards and web-address variables. The purchase is made through the App Store and is between you and Apple: Apple takes the payment and keeps its records under its own policy. The app only asks the App Store, on your device, whether your Apple account owns Pro (and, when you open the Pro screen, for its price). It sends no purchase or account information to the developer and keeps none beyond the fact, held by the system, that Pro is unlocked. The developer sees only the sales totals Apple reports.
Third parties
The app uses no third-party SDKs and no analytics. The only servers it ever contacts are the web addresses you enter yourself and, when you open the Gallery, the Gallery's host; their owners' policies apply to them. Purchases go through Apple's own App Store, whose policy applies to them.
Children
The app does not collect information from anyone, including children.
Backups
Your device's own backup (for example iCloud Backup or an encrypted computer backup, if you have turned it on) may include the app's data. Your device settings and Apple control that.
Changes
If a future version changes how data is handled, the updated policy will be posted here with a new date.
Contact
Questions: support@patrickmartin.dev