Privacy Policy
How Cribbo handles your data and keeps setup codes private.
Last updated: February 2026
Introduction
Cribbo is a local-first app for managing HomeKit and Matter setup codes. This policy explains what data is stored, where it is stored, and what optional services you can choose to enable.
Core privacy principles
- Your setup codes stay under your control.
- Analytics are optional and off by default.
- No account is required to use Cribbo.
- You can remove your app data at any time with secure wipe.
What data Cribbo stores
Cribbo stores app data on your device so you can manage your setup code vault, including:
- HomeKit setup codes, HomeKit QR payloads, and Matter setup codes
- Device metadata such as name, category, location, notes, manufacturer, and model
- App preferences and organization settings
Local-first data handling
By default, Cribbo stores your data locally on your device. We do not run a Cribbo user database and we do not transmit your setup codes to our servers.
Optional iCloud sync
If you enable iCloud sync, data syncs through Apple's iCloud infrastructure using your Apple ID.
- Sync is optional and can be disabled any time in app settings.
- We do not host, access, or read your iCloud sync data on our own servers.
Optional analytics (PostHog)
Cribbo can send anonymous product analytics only if you opt in via Settings.
- Default state: analytics off
- When enabled, events are limited to anonymous usage signals (for example: onboarding completed, device added, encrypted backup exported)
- Setup code values, QR payloads, passphrases, device names, locations, notes, and other sensitive content are not collected
- You can disable analytics at any time to stop future event collection
Historical anonymous events may remain in the analytics provider based on their retention policy.
Encrypted backups
Cribbo supports encrypted exports protected with your passphrase.
- Encryption and decryption happen on your device
- Your passphrase is never stored by us
- We cannot recover passphrases
Data export, import, and deletion
- Export your data as JSON for backup or transfer
- Import JSON to restore or merge data
- Use secure wipe to delete all app data from your device
Third-party services
- Apple iCloud for optional user-controlled sync
- PostHog for optional anonymous analytics (opt-in only)
Children's privacy
Cribbo is not directed to children under 13, and we do not knowingly collect personal data from children through the app.
Changes to this policy
We may update this Privacy Policy from time to time. If we do, we will update the "Last updated" date on this page.
Contact
If you have privacy questions, contact us at privacy@onethirteen.co.