Isla Privacy Policy

Secret values are stored in the macOS Keychain under the service identifier com.isla.secret-values. Workspaces and other metadata are stored locally with Core Data.

Unlock. Touch ID or your Mac password is required to open the vault. Isla locks itself after 60 minutes of inactivity.

No cloud vault. Isla does not run a service that stores or syncs your secrets. If that ever changes, this policy will change first, before the feature is turned on.

Clipboard. After you copy a secret, Isla clears the clipboard 60 seconds later if the contents have not changed.

Isla does not require an account. We do not collect, transmit, or store your API keys. There is no analytics or advertising SDK in the app, and .env import is processed on the Mac. The file is not uploaded.

A support email contains only what you type. Do not include a live secret. A redacted value or a fake key is enough to describe a bug.

If Isla offers a paid feature, Apple processes the payment through the Mac App Store. We do not receive your card number.

Keychain and Touch ID protect the vault inside macOS. You still decide who can unlock the computer, whether FileVault is on, and what happens to a secret after you paste it somewhere else.

If this policy changes in a way that matters, it will be posted here with a new date.