Privacy Policy

Article 1. Information We Do Not Collect

HoneybeeMobility does not collect personal information through Vellum. The app has no sign-up and no sign-in, and it does not create an account that identifies you.

The following statements describe how the app is built.

• We operate no server for the app. A search of the entire app source finds no code that makes a network call (checked again on 4 September 2026).
• The app includes no third-party analytics or tracking SDK. Every framework it uses comes from Apple: SwiftUI, WebKit, PDFKit, CryptoKit, LocalAuthentication and the like.
• The app does not ask for your name, e-mail address, phone number, or a tracking identifier.
• There is no feature that reports which documents you opened, or when, back to us.

Article 2. The Documents You Open

A document you open is kept as a copy in the app's library. That library lives in the Documents folder of the app's own iCloud container when iCloud Drive is available on the device, and otherwise in Application Support/Vellum on the device itself.

Original files are stored, exactly as you received them, in a Library folder inside that location. The list information is stored beside them in a file named store.json.

store.json holds the following items.

• The document title, derived from the file name and editable by you
• The time you first opened it, the stored file name, and the document type (HTML or PDF)
• The tag you assigned and whether the document is pinned
• A hash of the file contents, used so the same document is not stored twice

Article 3. Document Passwords

Vellum is a viewer for password-protected documents. You type the password into the document's own page rather than into a field belonging to the app, and the script inside the document file checks it and displays the contents.

The app does not read the password you type, does not store it, and does not send it anywhere. There is no feature that remembers a document password.

The web view that displays a document uses a non-persistent data store. Cookies, caches and local storage created by a document are not left on the device.

Article 4. App Lock and Biometrics

When the app lock is on, the app asks for an app passcode at launch. The passcode is not stored as you typed it: it is converted to a SHA-256 hash and kept only in UserDefaults on the device. It is never sent to us.

You can unlock with Face ID or Touch ID. The biometric check is performed by iOS, and the app receives only the result, success or failure. The app cannot access your face or fingerprint data, and that data does not leave the device.

If you turn on content hiding, the document contents are covered on screen when you move to the app switcher or to another app. This setting is stored on the device as well.

Article 5. iCloud Drive

If the device is signed in to an Apple Account with iCloud Drive turned on, the library is stored in the app's Vellum container inside your own iCloud Drive and syncs to your other devices under the same Apple Account. Both the original documents and store.json sync.

The synced files stay inside your own iCloud account. Their storage and transfer are governed by Apple's iCloud terms and privacy policy, and we cannot access them.

The iCloud Backup row in the app's settings shows the current state. Whether iCloud is used is decided in the iOS Settings app, under your Apple Account and iCloud Drive. On a device without iCloud, the library is stored only on that device.

Article 6. Permissions the App Requests

The app requests one permission: Face ID. It is used only to unlock the app lock with biometrics, and its usage description is shown in the eleven languages the app ships with.

The app is entitled to iCloud Documents. That entitlement exists so the library can be stored in your own iCloud Drive.

No other permission is requested. Neither the app nor its share extension declares anything for location, camera, photos, microphone, contacts, notifications, or app tracking.

Article 7. Network Communication

The app makes no network calls of its own. Documents are opened directly from files stored on the device, and no information travels to a server of ours, because we run none.

Some features inside the app are Apple's. Buying the app on the App Store, the rating prompt, and the mail composer that opens when you tap Contact the developer are handled by Apple and by the mail service you have set up, under those companies' own policies.

We receive no information about you from those steps.

Article 8. Retention and Deletion

Documents stay in the library until you delete them. You can delete them one at a time, or select several and delete them together.

If you turn on automatic cleanup, documents older than the period you choose are deleted along with their original files. The choices are off, 30 days, 60 days and 90 days, and the default is off.

Deleting a document in the app deletes its original file along with the list entry. On a device whose library is in iCloud, that copy also disappears from your other devices under the same Apple Account. Deleting the app removes the copies, the settings and the app passcode hash stored on the device, but copies already in iCloud remain, so delete the documents from the library first if you want everything gone.

Because we run no server, we hold no copy of your data.

Article 9. Children

The app is a document viewer and collects no personal information from anyone, regardless of age. It has no feature that asks a child for information or has them create an account.

Purchases are made through an Apple Account. On a device used by a child, please review the Screen Time settings in iOS as well.

Article 10. Your Rights and Contact

Because we collect and hold no personal information, there is nothing to request access to or deletion of from us. Everything the app creates sits on your device and in your own iCloud account, and you can delete it at any time.

To reach us, tap Contact the developer in the app's settings. A mail composer opens with the app version, the device model and the iOS version already written at the end of the message. You can edit or remove those lines before sending.

If the device has no mail account set up, the default mail app opens instead, and if that also fails the address is copied to the clipboard. The message is sent from your own mail account to the address below.

Article 11. Changes to This Policy

If this policy changes, the new text and its effective date are posted on this page.

The version posted here is the one in force. Text with an earlier effective date ceases to apply from the moment the new version is posted.