Privacy policy

Last updated October 10, 2026.

Wiskit is a family tracker. It is built so that what you record stays between you and the people you share it with. This page says exactly what leaves your device, and where it goes.

What we collect

Nothing. Wiskit has no accounts, no analytics, no advertising and no tracking. The developer does not receive, store or sell your trackers, entries, photos, names or contacts.

What stays on your device

Your trackers, entries, photos, your name and your device's name, and your contacts are stored on your device, encrypted. Your identity keys never leave it (except in a backup you make and keep yourself, protected by your recovery phrase).

What you share, and with whom

• Shared trackers go only to the people and devices you share them with, encrypted so only those devices can read them.
• Your name is sent only to contacts you have confirmed. Other Wiskit devices nearby see only your device's name.
• Your contact code (the QR code in the app) contains your device's network address and public keys, so whoever you show it to can add you.
• Linked devices: if you link your own devices, your confirmed contacts can see that they belong together.

Services Wiskit connects through

• Mailbox. When a device you share with is offline, Wiskit leaves encrypted messages for it on the Wiskit mailbox server (run by the developer). The server cannot read them. It keeps each message until it is collected, and for at most 30 days. Like any web server, it sees the IP addresses that connect to it.
• Connection services. Devices find and reach each other using the public iroh discovery and relay services run by number 0. They see your device's network identifier and IP address, and pass along traffic that is encrypted end to end.
• Your local network. Wiskit looks for other Wiskit devices on the same Wi-Fi network so you can add them as contacts. It does not look at anything else on your network.
• Apple. Wiskit is distributed through the App Store; Apple's own privacy policy covers that.

Camera and photos

The camera is used only when you scan a contact's QR code or take a photo for an entry. Photos you add are stored in Wiskit, encrypted, and shared only with the trackers they belong to.

Optional: AI assistant access (Windows only)

On a computer, you can choose to let an AI assistant read trackers you pick, read-only, through a server you run yourself. It is off unless you set it up, and you can turn it off at any time.

Children

Wiskit is made for families, and may be used to record information about children. That information stays on your family's devices as described above; the developer never receives it.

Deleting your data

Delete Wiskit, or use Settings → Advanced → Clear data, to remove everything from a device. Trackers you shared stay on the devices you shared them with; ask those people to remove them. Messages waiting in the mailbox expire on their own within 30 days.

Changes and contact

If this policy changes, this page will say so, with a new date. Questions: email.