Privacy Policy — BlueClip
BlueClip is a personal career-logging app for law enforcement professionals. We've designed it to be privacy-first: your data stays on your device by default, we operate no servers, and we do not collect any personal information from you.
This policy explains what data the app handles, where it goes, and which permissions it requests.
1. Who we are
BlueClip is developed by Kraken Ink inc., based in Canada / British Columbia.
For privacy questions, contact: info@krakenink.ca
2. Data we collect
We do not collect, transmit, store on our servers, or sell any personal data.
All information you enter — investigations, court dates, training, contacts, voice memos, notes, photos, and so on — is stored locally on your device in a private database, with optional sync to your personal iCloud account (see Section 4).
We do not operate a backend service. There is no analytics SDK, crash-reporting SDK, advertising SDK, or third-party tracker integrated into the app.
The only content the app ever downloads is public legislation for the Library feature — see Section 6. That download carries none of your data.
3. Data stored on your device
The following are stored locally on your iPhone or iPad:
- Career records you enter (investigations, court appearances, training, promotions, deployments, contacts, voice memos, notes, photos, medical records, etc.)
- Voice memo audio files, saved to the app's private Documents folder
- Authentication material, stored in the iOS Keychain:
- If you choose password protection: a PBKDF2-SHA256 hash of your password (210,000 iterations) plus a random 16-byte salt. The password itself is never stored.
- If you use Sign in with Apple: your Apple user identifier.
- A flag indicating whether biometric unlock (Face ID / Touch ID) is enabled.
- App preferences in standard iOS user defaults (e.g., display options, trial state)
- Installed statutes and personal reference documents for the Library — public legislation files and files you add yourself, cached for offline use
Data stored on your device is protected by iOS Data Protection using the strongest class available: the app's database is encrypted and unreadable whenever your device is locked, not merely until first unlock.
4. Optional iCloud sync
If you enable iCloud sync in BlueClip's settings, your career records are synchronized between your devices through your personal iCloud account using Apple's CloudKit service.
- Sync is off by default and is fully controlled by you.
- Synced data is stored in your private iCloud database, accessible only to you under your Apple ID.
- We have no access to this data. It is governed by Apple's Privacy Policy.
- Disabling iCloud sync stops further uploads; you can also delete the app's data from iCloud through iOS Settings → Apple ID → iCloud → Manage Storage → BlueClip.
5. Apple services the app uses
Although we operate no servers, the app uses standard Apple frameworks that connect to Apple's services for specific features. These exchanges are governed by Apple's Privacy Policy.
- Sign in with Apple — If you choose this sign-in method, the app verifies the validity of your Apple credential with Apple on launch.
- App Store / StoreKit — Used to process optional subscriptions (Operations Monthly, Full Monthly, Full Yearly) and to verify your free-trial status. Apple processes the purchase; we do not see your payment information.
- MapKit — When you display a map (e.g., career map, location pins), iOS requests map tiles and may perform address look-ups via Apple's MapKit servers. The query (region or address text) is sent to Apple; we do not receive or store it.
- Speech Recognition — When you transcribe a voice memo or use the Library's voice search, BlueClip requests on-device speech recognition. If your device supports on-device recognition (most current iPhones), no audio leaves your device. On unsupported devices, Apple's framework may transmit audio to Apple's servers for processing. We do not receive your audio or transcripts.
6. Statute Library content downloads
The Library displays Canadian legislation — offences, fines, and the readable text of the law. Statute files are public legal content, not personal data. When you install or update a statute, the app downloads a read-only file over HTTPS from our public content repository (hosted on GitHub).
- The request contains no account, no identifiers, and none of your data — it is an ordinary, anonymous file download (as with any web request, your IP address is visible to the hosting provider; see GitHub's privacy statement).
- Downloaded statutes are cached on your device and work fully offline.
- The optional "Stay Updated" refresh performs the same read-only check at most once a day, and can be turned off in Library Settings.
- Reproduced legislation is used under the applicable reproduction terms (e.g., the federal Reproduction of Federal Law Order and provincial King's Printer terms), with attribution shown in the app under Library → Info & Legal. The Library is a reference tool, not an official source of law.
7. Features that process data on your device only
The following features run entirely on your device. No data is sent to Apple, to us, or to any third party:
- Document scanning (paystub scanning, recognition certificates, court documents) — uses Apple's on-device document camera and Vision text recognition.
- Business card scanning — uses on-device Vision OCR; parsing of fields (name, title, phone, email, address) is performed locally.
- Biometric unlock (Face ID / Touch ID / Optic ID) — handled by iOS; biometric data never leaves the Secure Enclave and is never accessible to BlueClip.
- Local notifications (court date reminders, trial expiry reminders) — scheduled and delivered entirely on your device. BlueClip sends no marketing or promotional push notifications; if you enable iCloud sync, Apple's CloudKit uses silent system notifications to keep your devices in sync.
8. Permissions BlueClip requests
iOS will prompt you to grant each of the following before the related feature is used. You can change permissions at any time in iOS Settings → BlueClip.
| Permission | Why it's used |
|---|---|
| Camera | Scanning documents (paystubs, certificates, business cards) and taking event photos |
| Photo Library | Attaching existing photos to events and contacts |
| Microphone | Recording voice memos |
| Speech Recognition | Transcribing voice memos and powering the Library's voice search (on-device when supported) |
| Location (While Using the App) | Pinning investigation, training, and event locations on the map. Location is read only when you actively use the map feature and is stored only with the items you create. |
| Calendar (Write-Only) | Adding court dates, deployments, vacations, and overtime to your device calendar when you choose to export them |
| Health (Read-Only, Optional) | Pre-fills the daily Wellness Check-In with last night's sleep, exercise minutes, and heart-rate variability so you don't re-enter what your watch already tracks. Each category can be declined individually and the feature works manually without it. Health data stays on device, is never exported, and never appears in career records or shared PDFs. The app never writes to Health. |
BlueClip does not access your Contacts, Reminders, or HomeKit data, and never writes to Health.
9. Sharing and export
BlueClip provides export features (PDF reports, share sheet for entries) that you initiate manually. When you tap "Share," iOS opens its standard share sheet and you choose the destination (Mail, Messages, Files, AirDrop, etc.). Once data leaves the app through your action, it is governed by the privacy policy of the receiving app or service.
We do not auto-upload, back up to our own servers, or otherwise transmit your data on your behalf.
10. Children
BlueClip is intended for adult professionals. The app is not directed to children under 13 and does not knowingly collect any information from them.
11. Data retention and deletion
- On-device data: persists until you delete an entry, reset BlueClip's data through the in-app reset option, or uninstall the app.
- iCloud data (if sync is enabled): persists in your iCloud account until you delete it from within the app, or remove the app's iCloud data through iOS Settings.
- Keychain entries: removed when you reset authentication in the app, or when iOS clears your Keychain.
We retain nothing on our side because we receive nothing.
12. Security
- Local data is protected by iOS Data Protection using the strongest class (Complete): the app's database is encrypted and unreadable whenever your device is locked.
- Passwords (if used) are stored only as PBKDF2-SHA256 hashes with a per-user random salt and 210,000 iterations.
- Optional biometric unlock and automatic lock-on-background are available.
- iCloud sync data is encrypted in transit and at rest by Apple, under your Apple ID.
No system is perfectly secure. Use a device passcode and keep iOS up to date for the strongest protection.
13. Your rights
Because we hold no personal data about you, requests under privacy laws (GDPR, CCPA, PIPEDA, Quebec Law 25, etc.) for access, correction, deletion, or portability of data held by us will return no records. To exercise those rights against data held on your device or in your iCloud, use the in-app data reset feature or iOS Settings → Apple ID → iCloud.
14. Changes to this policy
If we materially change this policy, we will update the "Last updated" date above and, where appropriate, surface a notice in the app. Continued use of BlueClip after such an update constitutes acceptance.
15. Contact
Kraken Ink inc.
Canada, British Columbia
info@krakenink.ca