Privacy Policy
Last updated: 23 October 2026
This policy explains what the Kefir app and its server keep about you, why, and how to have it deleted. We do not sell your data and do not show ads.
Without an account
As a guest you have no account on our server: profiles, tabs, history, bookmarks, passwords and site data stay on your iPhone. The app still downloads updates of its protection from our server, which, like any request on the internet, shows the server your IP address.
With an account
- Account — your e-mail and a hash of your password, or the identifier given by Apple or Google if you sign in with them.
- Devices — an identifier of each device you sign in on, its model and name, the app version and, if you allow notifications, a push token.
- Profiles — names, icons and settings of your profiles, including proxy settings.
- Cloud Sync (if switched on) — open tabs, history and bookmarks of each profile; cookies are encrypted on your device before they are sent.
- Which profile is open where — so that one profile is not edited on two devices at once.
- Purchases — the subscription details Apple sends us to confirm a purchase.
- Diagnostic reports — technical reports about errors, when the app sends them.
Passwords you save in the browser stay on your iPhone, in the Keychain.
Other services
To show which network and IP address a profile uses, the app asks public services (ipapi.co, ip-api.com, freeipapi.com, ipify.org). Purchases, notifications and device checks go through Apple; signing in with Google goes through Google. The sites you open see what any site sees from a browser.
Where it is stored
Our server is in the Netherlands. Data is kept while your account exists.
Deleting your data
Deleting the app removes what it stores on your iPhone. Items it keeps in the iOS Keychain — saved passwords, your sign-in and the start of the trial — can stay on the device after that, as iOS keeps Keychain items. To delete your account and everything on our server, see Account.