Your data stays yours.

Last updated: October 4, 2026

Forestkey is a record-keeping app for a single rental property. By default everything stays on your device. If you choose to turn on Cloud sync, your records go to a server that you run — never to us.

What Forestkey stores

Everything you enter — property and mortgage details, tenant names and contact information, rent payments, expenses, receipts, documents, mileage and tax settings — is stored in the app's private storage on your device.

Cloud sync (optional, off by default)

Forestkey only contacts a server if you turn on Cloud sync and enter the address of your own Forestkey server. When you do, the app sends that server your records and receipt files, your account email, and this device's name, so your devices can stay in step and your server can keep backups. Details:

End-to-end encrypted. Records and receipt files are encrypted on your device with a key that only your devices hold, before they are sent. The server stores ciphertext it cannot read; it sees only your account email, device names, and record counts, sizes and timestamps. Lose both your password and your recovery key and the data cannot be recovered by anyone.
The server is operated by you (or whoever you chose to host it). The people who make Forestkey have no access to it and receive nothing.
Connections must use HTTPS. Plain HTTP is only accepted for servers on your own local network.
Sign-in tokens are stored in the iOS Keychain on this device. Your password never leaves your device: the app derives a separate login secret from it, and your server stores only a salted hash of that secret.
Accountant links are read-only web pages you create. Anyone who has the link can view your income, expenses, rent payments and receipts until it expires or you revoke it. Treat the link like a key.
You can sign out at any time (your data stays on the device), or delete your server account and all of its data from within the app.

What we collect

Nothing. Forestkey does not include advertising, analytics, crash-reporting or tracking software. Without Cloud sync the app does not contact any server. With Cloud sync it only contacts the server you entered.

Permissions the app may ask for

Face ID / passcode — only to unlock the app if you enable App Lock. Biometric data is handled by iOS and never reaches Forestkey.
Camera — only when you choose to scan a receipt or document. Images stay on your device (and your own server if sync is on).
Photos — only the images you explicitly pick for a receipt. Text recognition runs on-device using Apple's Vision framework.
Notifications — local reminders for rent, renewals and tax dates, scheduled on your device.
Local network — only if your sync server is on your home or office network.

Backups and sharing

Forestkey keeps rolling daily backups in its own folder on your device. These are included in your normal iPhone backups (iCloud or computer) under your Apple account's rules. When you export a backup, a tax package or a receipt, the file goes only where you send it using the iOS share sheet.

Your tenants' information

Tenant details you record are your records. Without sync they never leave your device; with sync they are also on the server you chose, in encrypted form, so keep that server updated, access-controlled and backed up. You can delete everything at any time in Settings.

Children

Forestkey is intended for adult property owners and does not knowingly collect information from anyone.

Changes

If this policy ever changes, the new version will be posted here with an updated date.

Contact

Questions? Email hello@forestkey.example.