Privacy Policy
Kargo
Privacy Policy — Kargo
Last updated: 2026-09-17
One-sentence summary
Your boxes, photos and lists stay on your device. Anonymous usage events and session recordings, without box content or photos (masked on your device before sending), may be sent to PostHog Europe to improve the app.
1. Data collected
Kargo collects no personal data.
All information you enter (box names, contents, photos, moving date) stays exclusively on your iPhone inside the app's private folder. It is never transmitted, shared or sold. Anonymous usage events and session recordings may be sent to PostHog Europe to improve reliability; your box content is masked in them (see below).
2. Permissions requested
| Permission | Why | Mandatory |
|---|---|---|
| Camera | Photograph box contents | No — you can import from your photo library |
| Microphone | Dictate box contents by voice | No — you can type everything |
| Speech recognition | Convert your dictation into a list of items | No — tied to microphone |
| Photo library | Import an existing photo | No — you can use the camera |
| Notifications | Reminders at moving milestones (M-30, M-7, etc.) | No — you may decline |
None of this data leaves your device.
3. Local storage
Photos are compressed and stored in the app's Application Support/Boxes/ directory. They are automatically deleted when you remove the related box, or when you uninstall the app.
Preferences (moving date, onboarding completion) are stored via UserDefaults and SwiftData on the same device.
4. Third-party services
4.1 PostHog, anonymous usage analytics
Kargo uses the PostHog SDK hosted in Europe for anonymous usage events, such as viewed screens and completed actions. No box name, box content, photo, moving date, email or account identifier is sent to PostHog; in session recordings these are masked on your device before sending. Kargo does not integrate advertising SDKs.
See PostHog's privacy policy for details.
4.2 Speech recognition
Voice recognition uses Apple's SFSpeechRecognizer API. Depending on your iOS configuration, Apple may process part of the speech on its servers. See Apple's privacy policy for details. The requiresOnDeviceRecognition option is enabled when the device supports it.
4.3 Apple attribution (AdServices)
On first launch, the App asks Apple, through the AdServices system framework, for an attribution token that tells whether the install came from an Apple Search Ads ad. This token is sent to Apple only. It does not contain the advertising identifier (IDFA), requires no tracking permission, and the response is neither stored nor shared with any third party.
4.4 In-app purchases
The Kargo Premium purchase is processed by Apple's App Store. Kargo never receives or stores any payment data.
5. Children
Kargo collects no data and contains no inappropriate content. The app is suitable for all ages.
6. Changes
Any change to this policy will be reflected in the app's release notes and on this page with an updated date.
Session recording (screenshots with masking)
Since September 2026, Kargo may record usage sessions through PostHog, to understand where people get stuck in the app.
- What it is: a series of screenshots of the app screen, replayed like a video, with the places that were tapped. No audio, no camera, no content from other apps. Nothing is recorded while the app is in the background.
- What is masked: your box names and contents, photos, custom rooms and searches. Masking is applied on your device, before sending: these never appear in a recording.
- Hosting and retention: PostHog servers in the European Union, kept for 30 days, then deleted automatically.
- Identification: the recording is tied to the same random identifier as the other usage metrics, which cannot identify you.
7. Contact
For any question: alexandre-paul@outlook.com