Privacy Policy

1. Who we are and what this policy covers

This policy covers Kaelor for iPhone, developed and operated under the OPEXPER name (“we”, “us” or “our”). For privacy questions or requests, email hello@opexper.io and mention Kaelor.
This policy explains Kaelor version 1.0 for iPhone, requiring iOS 26 or later. It covers the app’s handling of your journal, permissions, purchases and files. Visits to the OPEXPER website and information you submit to our Support Hub are covered separately by the OPEXPER Site Privacy Policy linked below.

2. The information you choose to save

Kaelor uses the following information to save, display, search, organise and help you revisit your memories:

• Journal entries: titles, writing, entry dates, creation and update times, moods, favourites, tags and collections.
• Photos you choose to attach to a memory, including locally stored image and thumbnail copies.
• Optional memory locations: a place name you enter, or a place name and coordinates obtained through location detection.
• Preferences: appearance, haptics, onboarding state, reminders, location auto-fill and App Lock settings.
• Security and purchase state: a salted PIN hash, optional remembered file-encryption password, local PIN retry state and Premium entitlement information.

Your writing, photos, moods and locations can contain sensitive personal information. You choose what to record and what to share. Kaelor does not send your journal to an OPEXPER-operated journal server, and we cannot remotely read it through the app.

3. Local storage and optional iCloud sync

Kaelor stores your journal using the storage provided by iOS, including its app database and app files. iCloud sync is optional, off by default and available in Free and Premium. No separate Kaelor sign-in is needed.
If you enable iCloud sync, supported journal records, photos, tags, collections and saved location details can be stored in the private CloudKit database associated with your Apple Account and synced to your other compatible iPhones using that account. Apple provides and operates iCloud under its own terms and privacy policy. OPEXPER does not operate the cloud database or have access to it through Kaelor.
Sync depends on your Apple Account, connectivity, iCloud settings, available storage and Apple’s services. Changes may not appear immediately. A change to the app’s sync setting takes effect when Kaelor reopens.
Changes and deletions can propagate between synced devices. Turning sync off does not erase records already in iCloud. Sync maintains current records; it is not a separate historical backup.
PIN hashes, remembered encryption passwords and other this-device-only Keychain secrets do not sync through Kaelor’s journal sync. Local app data may separately be included in Apple device backups or device transfers, depending on your settings. Manage those copies through Apple.

4. Photos

You add photos using Apple’s system photo picker. Kaelor receives the items you select; it does not request permission to browse your entire photo library.
Selected photos are copied into Kaelor’s storage. They can sync with the memory if iCloud sync is enabled. Free supports one photo per entry; Premium supports up to three. Existing attached photos are retained if your Premium status later changes.
Removing a photo from Kaelor does not delete the original from your Photos library. Removing an original in Photos does not automatically remove a copy already attached to a Kaelor memory. Independently exported copies are also separate.

5. Location and maps

Location Memories is optional. You can type a place without granting location permission. If you request automatic location or enable location auto-fill, Kaelor asks iOS for When In Use access. It does not request Always access or track your location in the background.
When you use location detection, Apple’s location and MapKit geocoding services may process the location needed to determine a place name. When you view a map or open a place in Apple Maps, Apple provides the relevant mapping service. Kaelor saves the chosen place name and coordinates with the memory; these details can sync through your private iCloud account if sync is on.
You can edit or remove the place before saving. To remove saved location information, edit the relevant memory or delete it. Turning off auto-fill or revoking permission prevents future automatic location use but does not remove location details already saved in memories.
Manage permission in iPhone Settings → Privacy & Security → Location Services → Kaelor, or the Kaelor section in iPhone Settings. You can continue journaling without location access.

6. Reminders and notification delivery

Daily journal reminders are local notifications scheduled on your iPhone at the time you choose. Reminder text does not include your journal writing.
You can turn reminders off in Kaelor or manage notification permission in iPhone Settings. Kaelor does not operate an OPEXPER push-marketing service. Optional CloudKit sync may use Apple’s silent background notifications to deliver database changes; those are separate from your daily journal reminders.

7. PIN App Lock, biometrics and security

PIN App Lock is available in Free and Premium. Kaelor stores a salted PIN hash in this iPhone’s Keychain rather than storing the PIN itself in preferences. It also stores local retry state to limit repeated incorrect attempts.
Premium supports biometric unlock with a PIN fallback. iOS performs biometric checks through LocalAuthentication. Kaelor does not receive or store your Face ID or Touch ID biometric templates.
App Lock and the app-switcher privacy shield protect access and visibility within Kaelor. They are not a promise that every journal record, PDF or cloud copy is separately encrypted with your Kaelor PIN. Use a device passcode and keep iOS up to date.
You can change or disable App Lock using the app’s security controls and your current PIN. Kaelor cannot recover a forgotten PIN. Do not delete the app as a PIN-reset method: local-only memories could be lost. No security measure can guarantee absolute protection.

8. Backups, exports, imports and sharing

Premium can create password-protected .kaelorbackup and .kaelorexport files, and restore or import supported files you choose. The encrypted containers use AES-256-GCM with a password-derived key. You choose where to save or obtain a file using Apple’s file and sharing interfaces. These files are not uploaded to an OPEXPER backup server.
A backup can include journal entries, photos and supported settings. Export/import provides a separate way to move supported journal content. Review the preview and confirmation before restoring or importing: a restore can replace existing data, and changes can propagate if iCloud sync is on.
If you enable Remember this password, Kaelor stores the file-encryption password in this-device-only Keychain storage. You can forget the remembered password in Settings. We cannot recover a forgotten file password.
A PDF is a readable document, not an encrypted Kaelor backup. Individual-memory PDFs and Premium full-journal PDFs, or any other copies you share, may contain your writing, photos, tags or saved location details. Review the contents and destination before sharing.
Files saved to another app, email, Files or a cloud drive are governed by the destination’s access and retention controls. Deleting a memory or the Kaelor app does not erase those independent files or recipients’ copies.

9. Premium purchases and Apple services

Kaelor Premium is an optional one-time, non-consumable lifetime unlock. Version 1.0 has no subscription or trial. Apple’s StoreKit service loads product information, processes purchases, verifies entitlements and restores eligible purchases using your Apple Account.
Apple handles payment information. OPEXPER does not receive your payment card details or journal content through a Premium purchase. Apple may make sales, transaction, crash or diagnostic information available to developers through its standard services, subject to Apple’s policies and your device or account choices.
Apple also operates iCloud, location and mapping, the Photos picker, Files, sharing and biometric authentication used by the app. Information processed by Apple’s services is subject to Apple’s own privacy arrangements and processing locations.

10. What Kaelor does not do

Kaelor version 1.0 has no advertising, advertising identifiers, embedded third-party analytics SDKs or developer-operated journal accounts. We do not sell your journal, use it for advertising or profiling, or send it to an AI service for analysis.
Mood and writing summaries are generated from the entries, moods and tags available in the app. They are not sent to an OPEXPER analytics service. The app does not provide a public feed or automatically publish your memories.
These statements concern the app. They do not mean that Apple, your selected file providers, website hosting or support providers process no information when you choose to use their services.

11. Retention, deletion and your controls

Your memories remain in the app until you edit or delete them or remove the app’s data. To delete one memory, use its Delete action. To remove journal entries together, choose Settings → Data → Delete All Entries and confirm. This removes associated entry content and photo records through the app; it does not reset every app preference or delete every collection.
When iCloud sync is active, deletions can reach the private cloud database and other synced devices. Allow sync to complete on those devices. Turning sync off is not a cloud-erasure command, and content that remains in iCloud may return if you enable sync again.
Delete App in iPhone Settings removes the app and its local app-container data; Offload App preserves documents and data. iOS Keychain items may survive app removal. This-device-only Keychain items do not become available on a different device through Kaelor’s journal sync.
Copies in iCloud, device backups, exported PDFs, encrypted backup files and other apps are separate. Manage cloud and device backups through Apple, and delete exported copies from the relevant provider if you also want them removed. Restoring a backup can restore its records.
You can revoke Photos selections, location or notification permissions through the relevant iPhone controls. Revoking a permission stops the corresponding future access; it does not erase content you previously saved. OPEXPER cannot remotely retrieve or erase a journal held only on your iPhone or in your private iCloud account.

12. Contacting us and your privacy rights

For privacy or support questions, contact OPEXPER at hello@opexper.io. If you contact us, we receive the information you choose to include, such as your email address, message and attachments. Please avoid sending private journal content unless it is needed to explain the issue.
We use correspondence to respond to requests, provide support and resolve problems. Where data protection law applies, we rely on our legitimate interests in responding to enquiries and maintaining the app, performance of a relevant contract where necessary to provide requested support, or a legal obligation where one applies. We do not use a support request as consent to marketing.
Website and Support Hub provider, retention and international-processing arrangements are described in the separate OPEXPER Site Privacy Policy linked below. Apple and any file or email providers you choose operate under their own privacy notices.
Depending on applicable law and the circumstances, you may have rights to access, correct, erase or receive a portable copy of information held about you, and to restrict or object to processing. Where processing relies on consent, you can withdraw that consent. Contact us about information we hold; the controls above explain how to manage the journal we do not hold.
You may complain to your local data protection authority. In the United Kingdom, this is the Information Commissioner’s Office at ico.org.uk. Kaelor does not make automated decisions with legal or similarly significant effects about you.

13. Children and changes to this policy

Kaelor does not require an age, an account or a public profile, and its current app has no feature that sends a child’s journal to OPEXPER. Parents or guardians should supervise use where appropriate, including Apple Accounts, purchases, sharing and contact with support.
We will update this policy when Kaelor’s information handling changes and revise the date above. Where a change requires permission, consent or a specific notice, we will provide the required choice or notice before the relevant processing begins. Continued use is not treated as consent to unrelated data processing.