Privacy Policy
Secure Hub is an app for password-protected notes, documents and tasks. Protecting your data is a core part of the app. This policy explains what data is processed — and what is not.
No data collected by the developer
The developer of Secure Hub does not collect, store, sell or share any personal data. There is no developer account, no developer-operated server, no analytics, no tracking and no advertising.
Your content
You store notes, documents and tasks in an encrypted vault. Encryption and decryption happen exclusively on your device (client-side encryption). Your password never leaves the device and is never stored or transmitted. The developer cannot access your content or your password.
iCloud sync
If you use sync, your encrypted data is stored in your own private iCloud database (Apple CloudKit) and synchronized across your devices. This data resides in your Apple account and is subject to Apple’s privacy policy. The developer cannot access this private database. Only encrypted content is transmitted.
S3 sync (optional)
Instead of iCloud you can enter your own S3-compatible storage (e.g. AWS S3, Cloudflare R2 or MinIO). Your data is then stored in that bucket with the same end-to-end encryption. The bucket only holds encrypted objects without file or project names. The credentials stay in your device’s keychain. The storage is subject to the privacy policy of the provider you choose. The developer cannot access it.
MCP server for AI assistants (optional, macOS only)
On the Mac you can turn on an MCP server. It is off by default, only runs while the vault is unlocked and is protected by a random token. AI assistants that you connect yourself can search and read notes through it and create and edit their own notes marked “KI – …”. What an assistant does with this content (for example whether it sends it to an AI provider) depends on that assistant’s provider and settings. Secure Hub itself sends nothing to the developer. If you choose “Local network”, the connection is unencrypted (http) and should only be used on trusted networks.
Data deletion
You can delete your data at any time by removing the vault or the app’s data. Content stored in iCloud can be deleted via your Apple account’s iCloud management. Because the vault is client-side encrypted, a lost password cannot be recovered.
Contact
For privacy questions: report@goongorke.de