Carden
Carden Privacy Policy
Last updated: 8 November 2026
Carden doesn't collect any information about you. No accounts, no analytics, no advertising, no tracking. We receive nothing when you use the app.
Carden is made by Afallon Labs Ltd. This page explains where your information goes when you use Carden on iPhone and iPad. It's short, because there isn't much to say.
Your databases stay with you
Each database is a file that you own. It lives on your device, or in your own iCloud Drive if you choose to keep it there. When you use iCloud Drive, Apple stores and syncs the file under your iCloud account and Apple's privacy policy applies. We can't see your databases.
Chats with the assistant are saved inside the database file, so they stay wherever the file is.
The optional assistant
Carden works fully without AI. If you turn on the assistant, you choose who powers it: Apple Intelligence, or a provider you bring your own API key for, such as Anthropic, OpenAI, a compatible service or a model running on your own computer. Your key is kept in your device's Keychain.
When you use the assistant, Carden sends your message, any images you attach and the database information needed to answer directly from your device to the provider you chose. That provider's privacy policy applies to those requests. Apple Intelligence requests are handled by Apple, on device or with Private Cloud Compute. None of this passes through us.
If you ask the assistant to read a web page or fetch pictures, Carden fetches them directly from your device.
Sharing a database with a link
If you choose "Share with a link", Carden makes a read-only copy of that database, encrypts it on your device with a new random key, and stores the encrypted copy in Carden's iCloud storage so that others can open it. The key is only in the link you share. It is never sent to us or stored with the copy, so we can't read it. Anyone you give the link to can open the copy. Shared copies expire after 30 days unless you update them, and you can remove one at any time with Unpublish.
Diagnostic reports
Carden can save a diagnostic report on your device when you ask it to. Reports describe the app's screens and recent interface events, never the contents of your databases. They stay on your device unless you choose to share them with us.
Children
Carden is not directed at children and does not knowingly collect information from anyone.
Changes
If this policy changes, we'll update this page and the date at the top.
Contact
Questions? Email hello@afallonlabs.com.