Updated September 24, 2026
In short: the app runs on your Mac and talks directly to Apple. We have no server collecting things about you, and no wish to build one.
The password and the two-factor code are typed into the app and sent straight to Apple's servers. We never see them, never pass them on and never store them. They are not kept on your Mac either — once you are signed in, the password is wiped from the app's memory.
The proof of a successful sign-in (a temporary token issued by Apple) is kept in a file in your home folder, under ~/Library/Application Support/iVerni/. The macOS Keychain is not used. The “Sign out” button deletes that file.
All of it lives in your home folder and is sent nowhere. Deleting the app together with that folder wipes it without a trace.
Update check. At launch the app requests a small file describing the latest version. Our web server logs the usual line for it: IP address, time, app version. The check can be switched off in the About window.
Restore counter. The app reports, as a number, how many apps were put back on the iPhone. Along with it go anonymised fingerprints of the Mac and the iPhone (one-way transforms — no device can be identified from them), the iPhone model, and the iOS, macOS and app versions. App names, your Apple ID and device names are never sent. The record also keeps the IP address the request came from. All of this exists so we know how many people use the app and whether it works. It can be switched off in the About window.
Licence activation. If you bought a licence, entering the key sends us the key itself and an anonymised fingerprint of your Mac (a one-way transform of its hardware identifier — nothing can be recovered from it). We keep those so the key cannot be handed around, along with your email, the purchase date and the expiry date. iPhones are counted the same anonymised way, as a number only.
The list of your apps, the contents of your iPhone and your Apple ID never reach us.
Payments are handled by Stripe. Card details are entered on their page and never reach us — we receive the payment confirmation, the buyer's email and an internal payment reference. Stripe's policy is at stripe.com/privacy.
This site uses no analytics, no ad networks and no tracking cookies. The web server keeps an ordinary access log (IP address, time, page, browser) for no longer than 30 days.
If you write to support, your message and whatever you attach are kept in our mailbox for as long as it takes to settle the matter. We send no newsletters.
You may ask what we hold about you, and have it corrected or deleted — write to support@iverni.me. Deleting a licence record ends that licence.
If this policy changes, the new version appears on this page with a new date.