Privacy Policy

Last Updated: June 8, 2026  ·  Effective Date: June 8, 2026

Data Ultimate Clarity Cannot Access

Ultimate Clarity is designed with privacy as a core principle. We do not collect:

• Your photos or files
• Face recognition data
• Location information from your photos
• Usage analytics or tracking data
• Personal identification information
• Device identifiers
• Crash reports (unless you explicitly send them)

This holds true whether or not you enable iCloud sync: synced data goes to your private iCloud account, which we cannot access.

How Ultimate Clarity Processes Your Files on Your Device

Local Processing Only

All of Ultimate Clarity's features run entirely on your device:

• Face Detection & Recognition: Uses Apple's Vision framework locally. Face data is stored only on your device.
• Duplicate Detection: Image comparison happens on-device. No images are uploaded anywhere.
• File Organization: Files are moved and renamed locally on your file system.
• Private Vault: Encrypted with AES-256-GCM via Apple CryptoKit. Keys are stored in your device's Keychain and never uploaded in raw form — optional vault sync (off by default) transfers only zero-knowledge ciphertext to your private iCloud.
• Auto-Redact PII: Personal ID detection and masking happens entirely on your device.
• Sensitive Content Detection: Uses Apple's built-in Sensitive Content Analysis framework locally.

Permissions Ultimate Clarity May Request

Permission	Why We Need It
Photos Library	To import photos from Apple Photos (optional)
Camera	Security camera feature (optional)
Notifications	To alert you when tasks complete
Face ID / Touch ID / Optic ID	To unlock the Private Vault (optional)

You can revoke these permissions at any time in your device's settings under Privacy & Security.

External Connections from Ultimate Clarity

Ultimate Clarity does not use any third-party analytics, advertising, or tracking services. The only external connections Ultimate Clarity may make:

• Apple's App Store — for license validation and in-app purchases
• Apple iCloud (CloudKit) — only if you enable optional sync; data goes exclusively to your private iCloud account
• Your email client — if you choose to contact support
• Your web browser — if you click help links

Optional iCloud Sync via Apple CloudKit

Ultimate Clarity includes optional iCloud sync. It is off by default: on a fresh install, nothing syncs until you explicitly turn it on. Vault sync is a second, separate switch — vault data syncs only when both switches are on.

If you enable general sync, the following sync between your own devices:

• Person profiles, app settings, scan history, and scheduled tasks. The sensitive content of these records — names, notes, birthdays, relationships, identifiers, and file paths — is stored using CloudKit's encrypted fields: it is encrypted on your device before upload, and the encryption keys exist only on your trusted devices. Neither Apple nor we can read these fields.
• A small set of operational metadata (item counts, timestamps, and a device identifier) is stored alongside, protected by standard iCloud security (encrypted in transit and at rest in Apple's data centers).

If you also enable vault sync, your vault items sync as zero-knowledge ciphertext: every file is encrypted on your device with your vault key (AES-256-GCM) before upload, and its metadata is encrypted the same way. Apple's servers — and we — only ever see opaque encrypted bytes. Your vault key itself is never uploaded in raw form; cloud recovery stores it only wrapped (re-encrypted) under keys derived from your recovery phrase.

In all cases:

• Sync uses your private iCloud database, under your Apple Account and your iCloud storage. We operate no servers and have no access to it.
• Photos and files outside the Vault never sync.
• You can turn sync off at any time, and you can delete synced vault data from iCloud from within the app.

App Store Age Rating and Children's Privacy

Ultimate Clarity does not knowingly collect information from children under 13. The app is rated 4+ and contains no objectionable content.

Technical Security Implementation in Ultimate Clarity

• Sandboxed Application — limited access to system resources
• Keychain Storage — sensitive credentials stored in Apple's secure Keychain
• AES-256-GCM Encryption — the Private Vault uses authenticated encryption via Apple CryptoKit
• Key Derivation — PBKDF2-SHA256 with 600,000 iterations (OWASP-aligned); vaults created by older versions used 100,000 iterations until migrated
• Recovery Phrase — optional 12-word recovery phrase (BIP39 word list) that can restore vault access if you forget your password — shown once, stored nowhere in plain form
• Biometric Authentication — Face ID, Touch ID, and Optic ID supported
• Local by Default — no network transmission of your data unless you explicitly enable iCloud sync, which is end-to-end encrypted and goes only to your private iCloud

Your Data Rights for a Local-Only App

Since Ultimate Clarity doesn't collect your data, traditional data rights are handled directly by you:

• Access: All your data is on your device in the app's sandboxed container
• Deletion: Delete the app or its data folders at any time; if you enabled sync, synced data can be deleted from within the app or via your iCloud settings
• Portability: Export your data using Ultimate Clarity's export features

Changes to This Policy

We may update this Privacy Policy occasionally. Changes will be posted on our website and noted in app updates.

Contact Us

Email: privacy@ultimateclarity.app
Website: ultimateclarity.app

---

Ultimate Clarity is committed to protecting your privacy. Your data belongs to you.