Last Updated: 27 October 2026
HKit (“we”, “our”, or “us”) respects your privacy and is committed to protecting your information. This Privacy Policy explains how we collect, use, and handle data when you use the HKit app for iPhone and iPad. By using HKit, you agree to this policy.
HKit is an HTML viewer and editor. The files, projects and code you create or import stay on your device. We never upload, read, or store them.
HKit does not collect any data from you. There is no account, no analytics and no advertising. We never ask for your name, email address, phone number or location.
To receive its settings (for example, which features are enabled), HKit fetches remote configuration from Google Firebase Remote Config. To pick the right settings, that request carries standard technical information: your device’s country and language settings, time zone, iOS version and the app’s version. Google does not link this to you or to a device identifier, and we do not use it to identify, profile or track you.
Free-tier limits and Pro status are worked out on your device. They are not sent to us.
Everything you make in HKit — files, folders, projects, templates, imported ZIP archives and pasted code — is stored in HKit’s private container on your device.
We do not upload your files to any server
We do not read, scan, index or analyse their contents
We do not use your code to train any model
Your files are not backed up to our systems. They are included in your own iCloud or device backup only if you have that turned on in iOS Settings
HKit’s Inspect feature lets you load a public web address and view its source and stylesheets.
The request goes directly from your device to that website. It does not pass through our servers
We do not log, store or transmit the addresses you inspect
The website you inspect will see a normal web request from your device, including your IP address, exactly as a browser would
Purchases are handled entirely by Apple through the App Store.
We receive your subscription or purchase status (active, expired, product purchased) from Apple so the app can unlock Pro features
We never see or store your payment card, Apple Account credentials or billing address
When you import from the Files app or iCloud Drive, iOS gives HKit a copy of only the file you select. HKit has no access to the rest of your Files or iCloud Drive storage, and the imported copy stays on your device.
Name, email address, postal address or phone number
Precise location
Contacts, calendars, photos, camera or microphone data — HKit does not request these permissions at all
Advertising identifiers. HKit contains no advertising
Any biometric or health data
HKit does not include a third-party crash reporting service. If you have turned on Share with App Developers in iOS Settings › Privacy & Security › Analytics & Improvements, Apple may send us anonymised crash and energy reports. You can turn that off in iOS Settings at any time.
HKit uses the limited information above, on your device or in the request that carries it, only to:
Run the app’s features and remember your editor preferences
Enforce free-tier limits, such as the number of free projects, and unlock Pro
Deliver remote configuration, such as which features are enabled
Diagnose and fix bugs, crashes and performance problems, from the optional Apple reports described in section 2
We do not sell your data, we do not rent it, and we do not build advertising or behavioural profiles.
All of HKit’s core work happens on your device:
Syntax highlighting, formatting, minifying and code folding
Live preview and split-screen preview, rendered locally by iOS WebKit
Search, find and replace
ZIP extraction and project handling
The only network activity HKit performs is: fetching remote configuration from Firebase, verifying purchases with Apple, loading a URL you explicitly ask it to inspect or preview, and loading remote resources that a page you are previewing requests itself.
Apple — app distribution, in-app purchases and subscription management. apple.com/legal/privacy
Google Firebase Remote Config — feature flags and configuration. firebase.google.com/support/privacy
HKit contains no analytics SDK, no advertising SDK and no social login.
We do not sell or rent your data. We may share limited information only when necessary:
With the service providers listed above, strictly to operate the app
To comply with a valid legal obligation, court order or lawful request
To protect our rights, prevent fraud or investigate misuse
In connection with a merger, acquisition or sale of assets, in which case this policy continues to apply
Your files and projects: kept on your device until you delete them or uninstall the app. We hold no copy
Purchase status: retained by Apple under Apple’s own terms; we store nothing beyond what the app needs at runtime
Support emails: kept only as long as needed to answer you, then deleted on request
Firebase Remote Config requests are processed on servers that may be located outside your country, including in the United States. Where required, these transfers rely on standard contractual clauses or equivalent safeguards.
All network traffic between HKit and our service providers uses HTTPS/TLS encryption. Your files are protected by iOS file-system encryption and app sandboxing — no other app can read HKit’s container. No digital system can be guaranteed completely secure, so please keep your own backups of work that matters.
HKit is not directed at children under 13. We do not knowingly collect data from children under 13. If we learn that we have, we will delete it. Parents or guardians with a concern can contact us at the address below.
You can, at any time:
Delete any file, project or all app data from inside HKit
Delete everything by uninstalling the app
Turn off Apple’s crash and energy reports to developers in iOS Settings › Privacy & Security › Analytics & Improvements
Manage or cancel your subscription in iOS Settings › your name › Subscriptions
Email us to ask what we hold about you, or to ask us to delete it
California residents (CCPA/CPRA): you have the right to know what personal information is collected, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA.
EEA & UK residents (GDPR): you have the right to access, rectify, erase, restrict and object to processing, and to data portability. Our lawful basis is legitimate interest for delivering app configuration, and performance of a contract for purchases. You may lodge a complaint with your local supervisory authority.
To exercise any of these rights, email us at the address below.
We may update this Privacy Policy from time to time. Updates are posted on this page with a revised “Last Updated” date. Continued use of HKit after a change means you accept the updated policy.
If you have questions or concerns about this policy:
📧 inferno.appz@gmail.com
We aim to reply within 24–48 hours.