Cribbo

Privacy Policy

How Cribbo handles your data and keeps setup codes private.

Last updated: February 2026

Introduction

Cribbo is a local-first app for managing HomeKit and Matter setup codes. This policy explains what data is stored, where it is stored, and what optional services you can choose to enable.

Core privacy principles

  • Your setup codes stay under your control.
  • Analytics are optional and off by default.
  • No account is required to use Cribbo.
  • You can remove your app data at any time with secure wipe.

What data Cribbo stores

Cribbo stores app data on your device so you can manage your setup code vault, including:

  • HomeKit setup codes, HomeKit QR payloads, and Matter setup codes
  • Device metadata such as name, category, location, notes, manufacturer, and model
  • App preferences and organization settings

Local-first data handling

By default, Cribbo stores your data locally on your device. We do not run a Cribbo user database and we do not transmit your setup codes to our servers.

Optional iCloud sync

If you enable iCloud sync, data syncs through Apple's iCloud infrastructure using your Apple ID.

  • Sync is optional and can be disabled any time in app settings.
  • We do not host, access, or read your iCloud sync data on our own servers.

Optional analytics (PostHog)

Cribbo can send anonymous product analytics only if you opt in via Settings.

  • Default state: analytics off
  • When enabled, events are limited to anonymous usage signals (for example: onboarding completed, device added, encrypted backup exported)
  • Setup code values, QR payloads, passphrases, device names, locations, notes, and other sensitive content are not collected
  • You can disable analytics at any time to stop future event collection

Historical anonymous events may remain in the analytics provider based on their retention policy.

Encrypted backups

Cribbo supports encrypted exports protected with your passphrase.

  • Encryption and decryption happen on your device
  • Your passphrase is never stored by us
  • We cannot recover passphrases

Data export, import, and deletion

  • Export your data as JSON for backup or transfer
  • Import JSON to restore or merge data
  • Use secure wipe to delete all app data from your device

Third-party services

  • Apple iCloud for optional user-controlled sync
  • PostHog for optional anonymous analytics (opt-in only)

Children's privacy

Cribbo is not directed to children under 13, and we do not knowingly collect personal data from children through the app.

Changes to this policy

We may update this Privacy Policy from time to time. If we do, we will update the "Last updated" date on this page.

Contact

If you have privacy questions, contact us at privacy@onethirteen.co.