Privacy Policy

Who is responsible

Coldbore is provided by Joao Vitor Humenhuk Achutti, an individual developer based in Tel Aviv, Israel (“we” or “us”). We are the data controller for the personal information described in this policy that we receive, which is normally limited to messages you send us.

Provider

Joao Vitor Humenhuk Achutti

Location

Tel Aviv, Israel

Email

coldbore@humenhuk.com

This policy covers the Coldbore app for iPhone, iPad and Apple Watch, and this website.

Your collection records

Coldbore can hold details about your firearms, including make, model, caliber, optional serial numbers, values, storage notes, maintenance, range sessions, ammunition, photos, documents and text recognized from documents. These records are stored in the app on your device. We do not receive them.

The record database uses iOS Complete file protection, which keeps it encrypted on disk while your device is locked. This is iOS file protection. Coldbore does not add a separate app-managed database encryption key. Photos and documents are also encrypted with AES-256-GCM using a key kept in the device’s Keychain. App lock and identifier reveal controls use iOS device authentication. Inspect any export and its attachments before sharing.

Document scanning and text recognition run on your device. When you add photos from your library, Coldbore receives only the photos you choose. Face ID, Touch ID and passcode checks are handled by iOS, and Coldbore never receives biometric data.

iCloud Backup

iCloud Backup is optional and stays off until you turn it on.

When it is on, Coldbore encrypts a copy of your whole collection, including photos and documents, on your device with AES-256-GCM before anything is uploaded. The encrypted copy is stored in your own private iCloud database and uses your iCloud storage. Coldbore backs up after changes while the app is open, from time to time in the background, and whenever you tap Back up now.

For each device that backs up, Coldbore keeps that device’s latest backup plus up to 7 daily and 4 weekly backups, always keeps its newest backup that has firearms in it, and removes its older backups automatically. Encrypted photos and documents that no remaining backup uses are removed during a later backup, once they are at least a day old. Backups from a device that no longer backs up, for example after you erase your records, reinstall Coldbore or replace a device, stay in your iCloud until you delete them in iCloud Backup.

The key that encrypts your backups is created on one of your devices. Coldbore keeps it in the device’s Keychain and places copies in your iCloud Keychain and in an encrypted CloudKit field in your private iCloud database, so your other devices can restore without you typing anything. The iCloud Backup screen tells you if Coldbore cannot confirm the copy in your iCloud. You can also choose to view a recovery key and keep it somewhere safe offline. Older keys a device used stay only in that device’s Keychain, so it can still open the backups they made. If you set a recovery phrase in Coldbore 1.0, it is kept only in the Keychain of the device where you set it or enter it, is never copied to iCloud, and is used only to open backups made by Coldbore 1.0. New backups use the new key. Coldbore’s provider never receives your backup key or records. iCloud Keychain is end-to-end encrypted. The CloudKit copy of the key and the encrypted record counts use Apple’s account protection. With Standard Data Protection, Apple holds the CloudKit service keys. Advanced Data Protection extends end-to-end encryption to eligible encrypted CloudKit fields. This means Coldbore cannot promise that Apple can never access the backup key under Standard Data Protection. Anyone who can sign in to your Apple Account and unlock your iCloud Keychain could restore them, so keep your Apple Account secure.

To list and manage your backups, Coldbore stores a few details next to the encrypted data that are not end-to-end encrypted: the date and time of each backup, its size and the number of parts it is stored in, a checksum of the encrypted backup, random identifiers for the device that made it and for the backup before it, the size of each photo and document, and random-looking names for each backup, photo and document. iCloud itself also notes when each of these items, and the record holding your encrypted backup key, was created and last changed. Coldbore works out photo and document names from their contents with a backup-derived key. A name cannot be matched to file contents without that key. The record counts and device type use encrypted CloudKit fields. Their end-to-end protection depends on Advanced Data Protection. None of these details include the contents of your records, photos or documents. Backups made by Coldbore 1.0 name photos and documents by a plain SHA-256 fingerprint of each file until those backups are removed.

You can turn iCloud Backup off, or delete your iCloud backups, at any time in Coldbore’s iCloud Backup screen. Erasing your records in Coldbore turns iCloud Backup off on that device but does not delete your backups. We do not operate a server and have no access to your iCloud.

Choices that share information

• Exports and reports, including CSV and HTML exports, PDF reports and the Collection Pack, are created only when you ask for them. A copy you share or move outside Coldbore is no longer controlled by the app.
• Spotlight is off by default. If you turn it on, selected record details can appear in search on your device so Coldbore can open the matching record.
• Reminders need your permission and use generic notification text.
• The Home Screen widget, the Apple Watch app and the Shortcuts action only open Coldbore to start a range session. They do not store or show collection records.

Membership and the App Store

Apple processes Coldbore Membership purchases through the App Store. Coldbore checks your membership status on your device and never receives your payment details. Apple gives developers sales and subscription reports, which do not include your name or contact details.

If you allow sharing with app developers in your device’s Analytics settings, Apple may share aggregated crash and usage statistics with us. Apple handles the App Store, iCloud and iCloud Keychain under its own terms and privacy policy, and may process data in the United States and other countries.

Support messages

If you email us, we receive your email address, your message and anything you attach. We use it to reply, provide support and keep a record of the conversation. Please do not send serial numbers, document images or other sensitive details unless your request needs them.

We keep support and feedback messages for up to 24 months after our last exchange, unless we need them longer for a legal claim or obligation. Where UK or EU GDPR applies, our legal basis is our legitimate interest in answering you and running support. For membership questions, it can also be performing our agreement with you or meeting a legal obligation.

Messages pass through your email provider and the email service that hosts the coldbore@humenhuk.com mailbox. We read and handle them in Israel, which the European Commission and the United Kingdom recognize as providing an adequate level of data protection.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of personal information we hold about you, or to receive a copy of it. We hold very little, usually only messages you have sent us. The records inside Coldbore stay on your device and in your iCloud, and you can view, correct, export or delete them yourself at any time.

To make a request, email coldbore@humenhuk.com. We aim to respond within one month. If you are not satisfied with our answer, you can complain to the data protection authority where you live (for example the ICO in the UK).

Children

Coldbore is not directed to children, and we do not knowingly collect personal information from children.

Changes to this policy

We will update this policy before Coldbore starts using a new data flow or service, such as an account, analytics, advertising or another third-party service. The date at the top shows the current version. Material changes will appear here and in the app before they take effect.