Back to App

Privacy Policy

Last updated: July 12, 2026

This Privacy Policy describes how HttpKit (“the App”), developed by Pinak Faldu (“we,” “us,” or “the Developer”), handles information when you use the App on iPhone.

HttpKit is designed to be private by default: it works fully on-device, does not require an account, and does not sync your data to our servers.

Summary

  • We do not require you to create an account.
  • We do not operate a cloud backend that stores your API requests, responses, collections, or credentials.
  • We do not collect analytics, advertising identifiers, or usage telemetry from the App for our own tracking.
  • Request data and history stay on your device.
  • Secret variables are stored in the iOS Keychain.

Information Stored on Your Device

HttpKit stores the following locally on your device so the App can function:

  1. Collections, folders, and requests — including URLs, methods, headers, query parameters, and body content you configure
  2. Environments and variables — including non-secret values used for {{variable}} substitution
  3. Secret variables — stored in the iOS Keychain (not in the App’s request database)
  4. Request history — past sends, responses, and related metadata, subject to your retention settings
  5. App preferences — such as theme, editor font size, SSL verification, timeout, and similar settings

This information never leaves your device through HttpKit’s own services, because HttpKit does not provide cloud sync or a Developer-operated API backend for your workspace data.

Network Requests You Initiate

When you send an HTTP or WebSocket request, the App contacts the endpoint you specify. That destination (and any intermediaries on that path) may receive the URL, headers, body, authentication material, and other data you include.

We do not control third-party APIs you choose to call. Their privacy practices are governed by those services, not by this policy. You are responsible for what you send and which hosts you contact.

Purchases and Apple

Premium features may require a subscription or one-time purchase processed by Apple through the App Store / StoreKit. Apple may collect and process payment, receipt, and account information under Apple’s own policies. We do not receive your full payment card details.

Subscription options (subject to change in the App Store):

  • $4.99 weekly
  • $19.99 yearly
  • $49.99 lifetime (one-time purchase, no recurring billing)
  • No free trial

Purchase status may be verified on-device via Apple’s purchase APIs. That verification is between your device and Apple.

What We Do Not Collect

HttpKit does not:

  • Create user accounts or profiles on our servers
  • Sync collections, history, or credentials to a Developer cloud
  • Sell your personal information
  • Use third-party advertising SDKs in the App for cross-app tracking
  • Collect location data for marketing or analytics
  • Require you to provide a name, email, or phone number to use core features

Children’s Privacy

HttpKit is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information through means outside the App’s on-device design (for example, contacting the Developer), contact us and we will take appropriate steps.

Data Retention and Deletion

Because workspace data lives on your device:

  • You can delete requests, history, collections, and related content within the App.
  • Uninstalling HttpKit removes App-stored data from that device (Keychain items may follow iOS Keychain behavior for the App’s access group).
  • We cannot remotely delete or recover your on-device workspace because we do not host it.

Security

We use platform features such as the iOS Keychain for secret variables and keep request data local to reduce exposure. No method of storage or transmission is perfectly secure. You should protect your device with a passcode/biometrics and treat API keys and tokens carefully.

Optional settings such as disabling SSL verification are provided for development against self-signed or local environments. Using them may reduce transport security for those connections; use at your own risk.

Third-Party Links and Services

The App may let you connect to arbitrary URLs and WebSocket endpoints. Those third parties are not covered by this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after an update means you accept the revised policy.

Contact

For privacy questions about HttpKit, contact the Developer through the App Store listing for HttpKit (Support / Developer contact), or reach Pinak Faldu using the contact method published with the App’s App Store listing.

Related