Privacy policy
Applies to Keystone for iPadOS. Last updated 1 September 2026.
Keystone collects nothing and transmits nothing. There is no account, no sign-in, no analytics, no advertising and no tracking. Your songs, scripture, media, themes and running orders are stored on your iPad and stay there. We never see them, because there is nowhere for them to go.
Information we collect
None. Keystone has no servers of its own and does not send your content, your usage, your device identifiers or your location anywhere. We cannot identify you, and we have no database of users.
What lives on your iPad
Everything you create or import stays in the app's own storage on the device:
- Songs, lyrics, sections and arrangements.
- Service orders and presentations.
- Images, videos, PDFs and fonts you import.
- Themes and app settings.
- Scripture from the Bibles bundled with the app, which are read from local files and need no network.
This content is only shared if you deliberately share it, for example by exporting a file or using the iPadOS share sheet. Standard iPadOS or iCloud device backups, if you have them switched on, are covered by Apple's terms rather than ours.
The diagnostics log
Keystone writes a plain text log called keystone-diagnostics.log into its own Documents
folder. It records app events such as an external display connecting, slides being fired and errors,
so a problem that happened mid service can be understood afterwards. It is visible in the Files app
under On My iPad, Keystone.
The log never leaves your device unless you send it. It is not uploaded, and it is not read by us or by anyone else automatically. If you email it to support so we can help, it is used only to investigate the problem you reported, and it is deleted when the matter is closed. You can delete the file at any time in the Files app. It is capped in size and rotates on its own.
No account
Keystone has no login, no user profile and no password to lose. Nothing about you needs to exist on any server for the app to work, during a service or at any other time.
Deleting your data
Deleting the app from your iPad deletes everything Keystone stored, including the library, imported media and the diagnostics log. There is no separate account to close and no request to make of us, because we hold nothing about you. If your iPad backs up to iCloud, remove the backup in iOS settings as well.
Subscriptions and payment
Keystone Pro is an auto-renewing subscription sold through Apple's In-App Purchase. Payment, billing, renewal, cancellation and refunds are handled entirely by Apple. We never see your name, your card, your billing address or your Apple Account. Apple's handling of that information is governed by the Apple Privacy Policy.
The app asks the device whether a current subscription exists and gets back a yes or a no. That check happens on your iPad and produces no record for us. Purchases are governed by the standard Apple licensed application end user licence agreement.
Third parties
Keystone contains no analytics SDK, no advertising SDK, no crash reporting service and no social media kit. No third party receives data from the app. Nothing in Keystone is used for tracking as App Tracking Transparency defines it, so the app never asks you for tracking permission.
Children
Keystone is a production tool for general audiences, not a service directed at children. Because it collects nothing from anyone, it collects nothing from children either.
Changes to this policy
If a future version of Keystone ever handles data differently, for example an optional sync feature, this page is updated first and the date above changes with it. A change of that kind would be opt in and would be described here plainly before it shipped.
Contact
Questions about privacy, or about anything else, go to support@keystonepresenter.com and are answered by a person.